Operator and contact details are listed in company and legal information.
Who is responsible
Veripoint is operated by Global Data Intelligence Limited, registered in England and Wales under company number 09410808. Registered office: Artisans’ House, 7 Queensbridge, Northampton, NN4 7BF, United Kingdom. Companies House record.
For privacy requests, contact privacy@globaldatabase.com or use the privacy request form. For account, billing or support questions, open a support ticket in your dashboard.
This notice covers visitors, account users and personal information appearing in returned company records. For information about the underlying company database, see Global Database’s database privacy notice.
Information we use
- Identity and profile: name, email, verified sign-in identity, company name, job title, phone number and intended use of the data.
- Workspace data: membership, questions, answers, evidence, saved conversations, monitoring snapshots and changes, usage and activity.
- Support: messages, email addresses, references, replies and delivery status.
- Billing: Stripe customer and subscription identifiers, plan status and invoice summaries. Payment-card details are handled by Stripe.
- Optional website analytics: consent choice, public page paths, interactions, referrer, browser and device information, and approximate location. Research questions, reports, account names and sign-in emails are excluded.
- Security: authentication sessions, scoped API-key hashes, short-lived request limits and hosting logs. We show a new API key once and do not store its full secret in readable form.
- Company records: available information about companies, directors, officers, shareholders and owners, which can include personal information.
Why we process it
We process information to provide requested research and subscriptions, authenticate users, enforce usage limits, monitor selected companies, deliver transactional messages, handle support and protect the service. Account details are used for customer relationship management; registration does not itself subscribe you to marketing. Relevant bases include performance of the requested service contract, legitimate interests in operating and securing a professional research service, and applicable legal obligations. Optional processing requiring consent is presented separately.
Service providers and sharing
- OpenAI Sites and Cloudflare provide the hosted application and application storage.
- WorkOS handles authentication and team identity.
- Global Database / Regis receives research queries and relevant recent conversation context and returns company information.
- Stripe handles hosted checkout, payments and subscription management.
- Resend sends account, support, subscription and monitoring emails and reports delivery events.
- Google Analytics, managed through Google Tag Manager, receives consented public-page activity and successful enquiry, registration and initial purchase events. Private workspace paths are replaced with a generic dashboard path. Advertising storage, Google signals and ad-personalisation features are disabled in the Veripoint tag.
- HubSpot receives support tickets and conversation messages, as well as registration and enquiry contact details and submitted enquiry messages, including the company, job title, phone number and use case you provide, the Veripoint source marker and the conversion page when CRM synchronisation is configured. With permission, this includes the first recorded landing page, referring domain and campaign tags. We do not send research questions, authentication codes or full referring URLs as attribution.
We do not separately attach your account name or sign-in email to a Regis research query, but information you include in the question is transmitted. Authorised workspace members can view shared research. API and MCP clients you connect can receive the records permitted by their key; consider the client’s own data handling.
Retention and deletion
Completed research and conversations remain available while you keep them in your workspace. You can delete reports; their question, answer and evidence are cleared from active application storage. A minimal usage receipt remains so deletion does not reset your allowance. Ask us to close your account or delete associated data.
Scheduled maintenance clears failed-research content after 30 days. Delivered or bounced email-job payloads and completed CRM payloads are cleared after 30 days; minimal delivery metadata is retained for operational review. Pending or failed delivery jobs remain available to resolve delivery problems. Closed support message content, contact details and enquiry attribution are cleared after 24 months. Registration attribution is retained with the account. Completed reports are not automatically expired.
Expired authentication-flow records and short-lived request-limit records are removed by maintenance. Removing a monitor deletes its stored snapshots and change events from active application storage. Provider backups, payment records, legal holds and provider-controlled logs can have separate retention periods; deletion from active storage is not a claim of immediate erasure from every backup. Contact us for a retention or deletion request.
International processing
The service uses providers operating internationally. We do not offer a guarantee that all processing remains in the UK or EEA. For procurement requirements concerning a particular location, subprocessor arrangement or transfer safeguard, request the relevant provider and contractual details before sharing restricted information. A specific regional hosting or transfer commitment requires written confirmation.
Your choices and rights
Depending on the applicable law, you may request access, correction, deletion, restriction or portability, or object to processing. We verify identity proportionately before releasing personal information. Do not send identity documents with an initial request unless requested through a suitable channel.
For privacy requests, contact privacy@globaldatabase.com or use the privacy request form. For account, billing or support questions, open a support ticket in your dashboard.
You may complain to the UK Information Commissioner’s Office or your applicable supervisory authority.