Privacy Policy

1. Scope of this policy

This policy applies to everyone who interacts with the Services: people who create a Scryn account, visitors to our website, and users who connect Scryn to an AI assistant through the MCP connector. It covers two broad categories of data:

• Customer data — information about you and your use of the Services (for example, your account details and the searches you run).
• Company-intelligence data — business information about companies and their representatives that Scryn aggregates from public registries, licensed commercial sources, and publicly available records, and that we enrich and make searchable as the core of our product.

2. Data we collect

Information you provide

• Account information — name, work email, company/organization, role, and password or single sign-on identifier when you register.
• Billing information — plan and transaction records. Card details are collected and processed directly by our payment processor; we do not store full card numbers.
• Content you create — search queries, saved lists, chat sessions, exports, and other inputs you submit while using the Services.
• Communications — messages you send to support or sales, and related correspondence.

Information collected automatically

• Usage data — features used, searches and requests made, and interactions with the platform and connector.
• Device & log data — IP address, browser and device type, timestamps, referring pages, and diagnostic logs.
• Cookies & similar technologies — used to keep you signed in, remember preferences, and understand aggregate usage. You can control cookies through your browser settings.

Company-intelligence data

The core of Scryn is a searchable database of 30M+ companies built from government registries, licensed commercial databases, and publicly available records. This data is about businesses, and may include limited business-contact information about company representatives — such as name, job title, and business contact details — where it is relevant to professional and B2B purposes. We act as a controller of this data and process it on the basis of our legitimate interest in providing business intelligence, subject to the rights described below.

3. The Scryn MCP connector

The Scryn MCP (Model Context Protocol) connector lets you use Scryn from a third-party AI assistant — such as Claude — so the assistant can search companies, retrieve profiles, and run other Scryn tools on your behalf. When you use the connector:

• Authorization. You connect through a secure OAuth flow. We store the access and refresh tokens needed to link your AI assistant to your Scryn account. You can revoke this access at any time from your Scryn account or your AI assistant.
• Requests. Your AI assistant sends the queries and parameters needed to run Scryn tools. We process these requests the same way we process searches made directly in the platform, and they are associated with your account.
• Responses. Scryn returns company- intelligence results to the AI assistant that made the request. Once results are delivered to that assistant, they are handled by the provider of that assistant under their privacy policy and terms — not this one.

Important: Scryn does not control the AI assistant you connect. The provider of that assistant (for example, Anthropic when you use Claude) determines how your prompts and the returned data are processed on their side. We encourage you to review the privacy policy of any AI assistant you connect to Scryn.

4. How we use data

We use the data we collect to:

• Provide, operate, and maintain the Services;
• Authenticate you, process transactions, and manage your account and connector authorizations;
• Run and improve search, enrichment, and AI features, including relevance and quality of results;
• Monitor for security, prevent abuse and fraud, and enforce our terms;
• Understand usage and improve product performance and reliability;
• Communicate with you about the Services, including service notices and support; and
• Comply with legal obligations and respond to lawful requests.

We do not sell your personal information, and we do not use the content of your searches or connector requests to train third-party foundation models.

5. Storage & security

Data is hosted with reputable cloud infrastructure providers and protected by administrative, technical, and organizational safeguards appropriate to the risk — including encryption in transit, access controls, and least-privilege access for our team. No method of transmission or storage is completely secure, but we work to protect your information and to continually improve our safeguards.

6. Third-party sharing

We share information only as described here. We do not sell personal information.

• Service providers. Vendors that host our infrastructure, process payments, deliver email, and provide analytics and security tooling, acting on our instructions under contract.
• AI and enrichment providers. We use AI services to power enrichment and search features. Where data is sent to these providers, it is used to perform the requested processing and is not used to train their models.
• AI assistants you connect (MCP connector). When you use the Scryn MCP connector, the company records and other results you retrieve flow into the conversation context of the AI assistant you authorized and are processed on that provider’s infrastructure — for example, Anthropic (Claude) or OpenAI. Once delivered, that data is governed by the provider’s privacy policy and retention practices, not ours. We do not control how long the provider retains it or how it is used within your conversations.
• Legal & safety. When required to comply with law, respond to lawful requests, or protect the rights, property, or safety of Scryn, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

7. Data retention

We keep personal data only as long as needed for the purposes described in this policy:

• Account data is retained while your account is active and for a reasonable period afterward, then deleted or anonymized.
• Connector tokens are retained until you revoke access or your account is closed.
• Usage and log data is retained for a limited period for security, debugging, and analytics, then deleted or aggregated.
• Company-intelligence data is retained as part of our database and refreshed over time to keep it accurate.

We may retain information longer where required to meet legal, accounting, or reporting obligations, or to resolve disputes.

8. Your rights & choices

Depending on where you live, you may have rights over your personal data, including the right to access, correct, delete, or port it, to object to or restrict certain processing, and to withdraw consent. These rights may apply both to your customer data and, where applicable, to business-contact information about you held in our company-intelligence database.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law. You may also manage cookies through your browser and revoke connector access at any time.

9. International transfers

Scryn operates internationally, and your information may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards — such as standard contractual clauses — to protect personal data transferred across borders.

10. Children’s privacy

The Services are intended for business and professional use and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

12. Contact us

If you have questions about this policy or how we handle your data, or if you would like to exercise your privacy rights, contact us at: