Privacy notice.

Effective date: October 6, 2026. Operator: Go Penguin Solutions LLC, 1207 Glenleaf Dr, Peachtree Corners, GA 30092. Contact: [email protected].

What we process

Account details (name, email, password hash, verification and session records); your searches and the public listing results they return; saved leads, notes, contact details you verify, and message drafts; message recipients, content, and sending status; your email provider settings, with SMTP credentials encrypted at rest using a key kept outside the database; subscription references and suppression records; and operational logs used for security and debugging.

Why we process it, and with whom

We use this information for accounts, discovery, saved leads, customer-approved email submission, opt-out enforcement, billing, support, and security. We share it only with providers that make Findor work: Oracle Cloud Infrastructure (hosting), Cloudflare (network security and delivery), Stripe (payments — card details are entered on Stripe's checkout and we store only references and subscription state), the platform email provider that sends account notifications, your own email provider (when you connect SMTP, messages go from your account through your provider), public listing sources (Google Maps observations), and Google Fonts (typography). We do not sell personal information and we run no advertising trackers.

Cookies and sessions

We use a signed session cookie for CSRF protection and an opaque findor_session cookie (seven-day expiry) that keeps you logged in. Both are HttpOnly, SameSite=Lax, and Secure in production. See the cookies page for details.

Retention and requests

We keep account data while your account is active. To get a copy or have your data deleted, email [email protected]; verified requests are completed within 30 days, except billing, tax, and security records we must keep, and unsubscribe and suppression records kept to honor opt-outs. Deleted content may remain briefly in rotating backups until removed.

Contact [email protected] for verified access, correction, export, or deletion requests; we complete verified requests within 30 days. Lead CSV export is available in Your leads.

Security and breach notice

SMTP credentials are encrypted at rest using a deployment key kept outside the database, and we use encrypted connections, hashed passwords, and restricted database access. No system is perfectly secure. If a security breach affects personal information, we will notify affected users without unreasonable delay as required by Georgia law (O.C.G.A. §§ 10-1-910 to 10-1-912).

Outreach records

Unsubscribe and suppression records may be retained after account deletion as needed to honor opt-outs. Recipients who unsubscribe from a customer's messages should contact that business for requests about their campaign data.

Children

Findor is a business tool for users 18 and older. It is not directed to children, and we do not knowingly collect information from them.

Changes

We may update this notice; material changes will be posted with a new effective date and, where appropriate, emailed to you.