# Privacy & opt-out — Ravn

Canonical: https://askravn.com/privacy

# Ravn Privacy Policy

Last updated 4 November 2026
Ravn is software provided by Rook Industries, Inc. ("Rook", "we", "us"), 30 N Gould St Ste R, Sheridan, WY 82801, USA. This policy explains what personal information Ravn handles, in what role, and what you can do about it. It covers askravn.com, the Ravn API and MCP server, the CLI and the browser extension.

## Opt out or delete your data

Enter your email address or phone number. From then on, Ravn never returns it to anyone, and removes matching entries from results customers have saved in their Ravn accounts. We keep only a one-way fingerprint so the block keeps working. You don't need to prove who you are to opt out. You can also email [privacy@askravn.com](mailto:privacy@askravn.com).

- never returns it to anyone, and
- removes matching entries from results customers have saved in their Ravn accounts.
We keep only a one-way fingerprint so the block keeps working. You don't need to prove who you are to opt out. You can also email [privacy@askravn.com](mailto:privacy@askravn.com).

## The short version

- Ravn is software, not a data seller. We don't sell or share personal information, and we don't offer a database of people.
- Our only database is about businesses: company facts and generic addresses like info@.
- When a customer looks up a person, it's the customer's lookup. We process it for that customer only, keep it in that customer's account only, and never use it for anyone else.
- No advertising cookies, no analytics trackers, no selling, no targeted ads.

## 1. Our two roles

a. Software provider for our customers. Customers use Ravn's tools to check and find business contact details. For example, they verify an email address, find the likely work email for a person at a company they name, read a company's website, or run searches on their own accounts with data providers such as People Data Labs. The data customers send, receive and save ("Customer Data") belongs to them. For Customer Data, Rook is the customer's service provider / processor: we process it only on their instructions and under our Data Processing Agreement ([askravn.com/dpa](https://askravn.com/dpa)). We:

- keep each customer's data separate;
- never use one customer's data to answer another;
- never add it to our own directory; and
- never sell or share it.
b. Business in our own right. Rook decides how it handles three things:

- the Business Directory;
- information about our customers and their accounts;
- information about visitors to our website.

## 2. If a Ravn customer looked you up

If a business used Ravn to find or check your contact details, that business decided to do it and is responsible for how it uses them. Please contact that business directly to exercise your rights over the data it holds. If you contact us instead, we'll pass on your request where we can identify the customer.
Either way, you can opt out with us (above). We'll stop Ravn returning your email address or phone number to anyone, and remove matching entries saved in customer accounts.

## 3. The Business Directory

What it contains: company name, category and industry codes, address, website, main phone numbers, generic role addresses (such as info@ or sales@), public social-media pages, services, opening hours, technologies used on the website, and similar business facts. It doesn't contain profiles of individual people, and it doesn't contain named employees or their emails.
Where it comes from:

- Open data from the Overture Maps Foundation (CDLA-Permissive-2.0).
- Businesses' own public websites. We respect robots.txt, and we never read social networks.
- Public internet registries.
Sole proprietors. If your business is just you, some of its details may be personal information. You can opt out above, or email [privacy@askravn.com](mailto:privacy@askravn.com) to have the listing removed or corrected.

## 4. Information about customers and visitors

What | Examples | Why | Shared with | 
Account details | email address, plan, sign-in records, API key fingerprints (never the keys) | create and secure your account, sign you in, support | Resend (sign-in emails) | 
Provider keys you connect | your People Data Labs or Twilio key, stored encrypted, shown only as the last 4 characters | run the tools you call on your own provider account | the provider you connected, when you call it | 
Billing | Stripe customer reference, plan, invoices (Stripe handles card details; we never see them) | charge for paid plans, tax and accounting | Stripe | 
Usage | which tools you call, counts, timestamps, errors | fair-use limits, billing, security, improving the Service (aggregated) | nobody | 
Customer Data | lists and inputs you send, results, anything you save | provide the Service to you (Section 1a) | nobody except the vendors in the DPA | 
Website visits and security logs | IP address, user agent, pages requested, request IDs | security, abuse prevention, keeping the site working | Cloudflare (network) | 
Messages to us | emails to support@, privacy@ or security@ | answer you | nobody | 
No cookies or trackers. Our website uses no advertising or analytics cookies and no third-party trackers. We don't sell or "share" personal information (as California law uses those words) and we don't do targeted advertising. We treat a Global Privacy Control signal as an opt-out request anyway.
Sensitive information. We don't ask for or knowingly process sensitive personal information. The only exception is account credentials, which we store only as hashes.

## 5. The browser extension

The extension stores your Ravn API key on your device, in the browser's extension storage. It sends a request to Ravn only when you click it. That request contains the website domain or profile address of the page you're on and the tool you chose. It doesn't read the contents of pages, doesn't collect your browsing history, and doesn't run in the background. We use what it sends only to answer that request, and never for advertising, credit or any purpose unrelated to the extension. This meets the Chrome Web Store User Data Policy, including its Limited Use requirements.

## 6. How long we keep things

Data | How long | 
Email-check results (cache) | up to 30 days, per account, without the plain address | 
Lookup history in a customer's account (only if turned on) | a fixed period of 12 months; the customer can delete it at any time; deleted within 30 days after the account closes | 
Provider keys | until removed, or until the account closes | 
Account details | while the account is open, then deleted within 30 days (billing records kept as below) | 
Billing and tax records | 7 years | 
Website and security logs | up to 90 days | 
Opt-out fingerprints | as long as we operate, so the block keeps working | 
Aggregated statistics (can't identify anyone) | indefinitely | 

## 7. Who we disclose information to

- Service vendors that help us run Ravn, under contract, listed at [askravn.com/subprocessors](https://askravn.com/subprocessors).
- The provider you connect, when you call one of its tools.
- Legal and safety: when required by law or legal process, or to protect people, our rights or the Service.
- A successor: in a merger, acquisition or sale of assets, under this policy.
We never sell personal information.

## 8. Your rights

Depending on where you live (California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, the EU, the UK, Canada and elsewhere), you may have the right to:

- know or access the personal information we hold about you;
- correct it;
- delete it;
- receive a copy (portability);
- opt out of sale, sharing, targeted advertising or profiling. We do none of these, but you can still opt out;
- appeal our decision on your request.
How to make a request:

- Opt-out requests: use the form above. No proof of identity is needed.
- Other requests: email [privacy@askravn.com](mailto:privacy@askravn.com). For account data, we'll verify you through your account email. An authorized agent may make a request for you with your signed permission.
We respond within 45 days. If we deny a request, you can appeal by replying with "Appeal" in the subject. We'll answer the appeal within 60 days, and if you're still unhappy you can contact your state attorney general. We won't treat you differently for using your rights.
California Delete Request and Opt-out Platform (DROP). DROP sends requests to registered data brokers. Ravn doesn't sell personal information and isn't a data broker, so please use the opt-out form above instead. It blocks your email address or phone number everywhere in Ravn.
EU and UK. Where we decide how data is used (Section 1b), our legal bases are:

- performing our contract with customers;
- our legitimate interests in running a secure business directory and service;
- legal obligations.
You can also complain to your local data-protection authority.

## 9. Security

- Data is encrypted in transit.
- Provider keys are encrypted at rest. API keys and sign-in codes are stored only as hashes.
- Opt-outs are stored as one-way fingerprints.
- Backups are encrypted.
- Access is limited to authenticated, rate-limited endpoints.
- Website reads can't reach private networks.
No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires. Report vulnerabilities to [security@askravn.com](mailto:security@askravn.com).

## 10. Children

Ravn is a business service for people 18 and over. We don't knowingly collect information about children. If you believe we have, email [privacy@askravn.com](mailto:privacy@askravn.com) and we'll delete it.

## 11. Where data is stored

Ravn runs on servers in the United States. For customers in the EU or UK, international transfers are covered by the Standard Contractual Clauses in our DPA.

## 12. Changes

We'll post any change here and update the date at the top. For material changes, we'll email account holders before they take effect.

## Contact

Rook Industries, Inc. · 30 N Gould St Ste R, Sheridan, WY 82801, USA · [privacy@askravn.com](mailto:privacy@askravn.com)