Privacy Policy

Last updated: 16 April 2026

1. Who We Are

CompanyStack is a UK Company Intelligence API operated by BlackPeak CFO Ltd ("we", "us", "our"), registered in England and Wales. We act as the data controller for personal data collected through the Service.

2. What We Collect

  • Account information — email address and name provided at registration.
  • Usage logs — API endpoints accessed, request timestamps, response codes, and request volume.
  • Technical data — IP addresses, user agent strings, and device information for security and rate limiting.
  • Payment data — if you subscribe to a paid plan, payment details are processed by our payment provider and are not stored on our servers.

3. Why We Collect It

We use your data to:

  • Provide, maintain, and improve the Service.
  • Enforce rate limits and subscription tiers.
  • Detect abuse, prevent fraud, and maintain security.
  • Communicate with you about your account, service updates, and support requests.
  • Comply with legal obligations.

4. Data Retention

  • Usage logs — retained for 90 days, then automatically deleted.
  • Account data — retained while your account is active. Deleted within 30 days of account closure upon request.
  • Technical/security logs — retained for up to 12 months for security and abuse prevention.

5. Data Sharing

We do not sell your personal data to third parties. We may share data only with:

  • Infrastructure and hosting providers necessary to operate the Service.
  • Payment processors for billing (they act as independent controllers).
  • Law enforcement or regulators when required by law.

6. Your Rights (GDPR)

Under the UK General Data Protection Regulation, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your personal data ("right to be forgotten").
  • Restriction — ask us to limit processing in certain circumstances.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@blackpeakcfo.com. We will respond within 30 days.

7. Cookies

We use essential cookies only for authentication and session management. We do not use advertising or third-party tracking cookies.

8. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, and regular security reviews.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service.

10. Contact

For privacy-related enquiries, contact us at hello@blackpeakcfo.com.

BlackPeak CFO Ltd · Registered in England and Wales