Privacy policy

Last updated 14 September 2026

Our role

BizProfile is a widget for Kommo. It processes data that the customer already holds in their own CRM, on the customer's instruction and inside the customer's interface. We act as a processor. We do not build or sell a database of people, and we do not buy contact data from data brokers.

What our database holds

• The customer's Kommo account — account id, subdomain, interface language, number of users, time zone, OAuth tokens, credit balance.
• The fact that a search happened — the contact id, the time, how many results came back, and whether the manager confirmed any of them. Not the results.
• Credits — the ledger of grants, purchases and charges.
• An action log — which account, which user, which action, which card. It is deleted every day: only the current day is kept.
• Daily counters — how many searches ran on a given day and how many found a match. These carry no card id, no user id and no contact details of any kind.

What our database never holds

The name, email address, phone number, profile link or search snippet of a person found by a search. The line type or carrier of a number. Any fragment of a provider's response. None of it is written to the database, and none of it is written to our logs — logs carry an account id, a card id, a duration and a status code.

Provider responses exist for the duration of one HTTP request to our server and are discarded when it ends. Caching them is also forbidden by the Brave Search licence.

Where the found data goes

Into the customer's own CRM, and only when a manager presses the button. The widget writes one note to the card that is open. It never edits the customer's fields, tags or pipeline. After the customer revokes our access token we have no way to reach that data at all — it is theirs to keep or delete.

Subprocessors

• Brave Software — search in open sources.
• Automattic (Gravatar) — accounts a person confirmed themselves, looked up by a hash of the email address.
• Twilio — phone number metadata (line type, carrier).
• Stripe — payments. Card details never reach our servers.
• Hetzner Online GmbH — hosting, Finland.

Where the data is

On our own PostgreSQL database on a Hetzner server in Finland. The database port is not published to the internet.

How long we keep it

• The action log — the current day only.
• Account data and search facts — while the widget is installed.
• Daily counters — indefinitely. They identify nobody.
• The credit ledger — a financial record; its retention follows accounting requirements rather than our preference.

Deletion

Write to the support address published on the Kommo marketplace listing from the address of an administrator of the Kommo account. We delete the account row together with its tokens, the search facts, the action log and the credit holds for that account. Data already written into the customer's CRM cards stays in their CRM and is deleted by them.

Contact

Questions about this policy: the support address published on the Kommo marketplace listing.