Privacy Policy

Effective Date: March 20, 2026

Umbrella Projects, LLC (“Spider Sight,” “we,” “us,” “our”) operates a market discovery engine that finds organizations, people, and signals on the open internet. Our products include our website and all of the services we offer through that website (the “Products” or “Services”). When you use our Products, you provide personal information to us. We wrote this privacy policy (the “Privacy Policy” or “Policy”) to help you understand what personal information we collect, how we use it and disclose it, how long we retain it, and what choices you have about it.

Some of the concepts below are a little technical, but we've tried our best to explain things in a simple and clear way. You may have specific privacy rights in your state or region. In the United States, residents of California and other states have specific privacy rights as noted in the disclosures below. Residents of the European Economic Area (“EEA”) and the United Kingdom also have specific rights, which are noted in other disclosures below.

This Privacy Policy applies where Spider Sight acts as a “data controller,” which means Spider Sight decides why and how personal information is processed. It does not apply to situations where Spider Sight acts as a “data processor,” which means it processes data only according to contractual instructions from its customers or other data controllers. Spider Sight discovers and organizes publicly available business information from the open internet and connects it to customers who are looking for information about businesses and individuals who work at those businesses. In doing so, Spider Sight may act as a data processor because it is acting according to the instruction of its customers per its data processing agreements with those customers.

1. What Information Do We Collect?

A. Personal Information You Provide To Us

We collect personal information that you provide to us, such as your account details and payment information. This includes:

Account Data: When you set up an account to use our Services, we collect your contact details such as your name, email address, and company domain.

Payment Data: We may collect personal information necessary to process your payment if you make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is stored by Stripe, Inc. You may find their privacy notice here.

Communications: If you contact us directly or express interest in using our Services, we collect personal information including your name, email address, the contents of a message or attachments that you may send to us, and other information you choose to provide. When we send you emails, we may track whether you open them to learn how to deliver a better customer experience and improve our Services.

Query History: Your search queries and analysis results to provide and improve the Service.

Saved Jobs: Job results and discovery snapshots for ongoing monitoring features.

Feedback: Signal confirmations and disputes to improve detection accuracy.

If you do not provide your personal information when requested, you may not be able to use our Services if that personal information is necessary to provide you with our Services or if we are legally required to collect it.

B. Information From Cookies And Similar Technologies

We use essential cookies only: a session token for authentication (30-day duration). We do not currently use tracking cookies, analytics cookies, or third-party advertising cookies. Should this change in the future, we will update this Policy and provide appropriate notice and consent mechanisms.

C. Information Collected About Discovered Entities

Spider Sight discovers and organizes publicly available business information from the open internet. This includes:

Organization Information: Names, websites, and locations from public websites, Google Maps, and directories.

Technology Signals: Detected platforms and tools from website HTML analysis.

Contact Information: Names, roles, and email addresses from publicly published team and about pages.

Evidence: HTML snippets and source URLs from website crawls that substantiate each discovery.

All entity data is retained indefinitely unless removal is requested. This is the same approach used by search engines, web indexes, and other publicly accessible data aggregation services.

2. How Do We Use Your Information?

We process your information for our legitimate business purposes, such as to provide you with our Services, to develop and improve our Services, or for compliance with our legal obligations. If you are located in the European Economic Area, the United Kingdom, or Switzerland (“Europe”), we only process your personal information based on a valid legal ground.

We use the information we collect or receive for the following purposes:

Providing and Improving the Services: We may process your personal information to provide, maintain, improve, and enhance our Services, including expanding our discovery capabilities and developing new products.

Understanding Usage: We may use your personal information to understand and analyze how you use our Services and develop new products, services, features, and functionality.

Communicating With You: We may use your personal information to contact you for administrative purposes such as to provide information that you request, to respond to comments and questions, or to ask you to provide feedback.

Billing and Accounting: We may process your personal information to facilitate transactions and payments and to handle payments you initiate, including keeping records of your purchases.

Fraud and Incident Prevention: We may use your personal information to detect security incidents and respond to trust and safety issues, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity.

Aggregated Data Generation: We may process your personal information to generate anonymized or aggregate data that we may use for any lawful purpose such as to publish reports or improve our discovery algorithms.

Compliance: We may process your personal information for compliance with legal obligations to which we are subject.

3. Will We Share Your Information With Anyone?

We may share your information in order to provide our Services, comply with laws, protect your rights, fulfill our business obligations, or with your consent. We may share your personal information with the following recipients:

Vendors and Service Providers: We may disclose information to vendors and service providers retained in connection with the provision of our Services, such as website hosting, data analysis, information technology and related infrastructure provision, customer service, email delivery, auditing, and payments processing.

Spider Sight Users: If your information is present in publicly accessible sources that Spider Sight indexes, we may disclose your information to Spider Sight's users when they run queries on our platform.

Public Visitors: Redacted organization data (names only) on public discovery pages.

Stripe: Payment processing data. Stripe's privacy policy is available at stripe.com/privacy.

AWS: All data is hosted on Amazon Web Services infrastructure.

OpenAI: Page text (no PII) is sent for natural language processing analysis. OpenAI's API terms prohibit using this data for model training.

As Required By Law: We may access, preserve, and disclose your information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others' rights, property, or safety.

Affiliates: We may share personal information with our current or future affiliates for any of the purposes described in this Privacy Policy.

Merger, Sale, or Other Asset Transfers: We may transfer your information to service providers, advisors, potential transactional partners, or other third parties in connection with a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

We do not sell your personal data to data brokers or advertisers.

4. How Do We Handle Third-Party Logins?

Our website offers you the ability to register and log in using certain third-party login tools (e.g., Google). Where you choose to do this, we will receive certain profile information about you from the third-party login provider. The profile information we receive may vary depending on the provider concerned, but will often include your name and email address.

We will use the information we receive only for the purposes described in this Privacy Policy. We do not control, and are not responsible for, other uses of your personal information by your third-party account provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information.

You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Spider Sight. Spider Sight is not responsible for the functionality or security measures of any third party.

5. How Long Do We Keep Your Information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). We delete your personal information or keep it in a form that does not identify you when this retention period is over.

When determining the specific retention period, we take into account various criteria, such as the type and sensitivity of the personal information, the type of services provided to you, the impact on our ability to provide you with certain features of our Services, and mandatory retention periods provided by law and the statute of limitations.

6. How Do We Keep Your Information Safe?

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our website is at your own risk. You should only access the website within a secure environment.

7. Do We Collect Information From Minors?

We do not knowingly solicit or collect data from, or market to, anyone under 18 years of age. By using the website, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the website. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at info@spidersight.com.

8. Can I Change My Account Information Or Delete My Account?

Yes. If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided in the “Contact Us” section below.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service, and/or comply with applicable legal requirements.

9. Data Removal for Discovered Entities

Organizations and individuals whose information has been discovered and indexed by Spider Sight can request removal of their data by emailing info@spidersight.com, or by using our opt-out form. Removal requests are processed within 7 business days.

10. Can I Opt Out Of Email Marketing?

Yes. You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list — however, we may still communicate with you to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

11. Are There Controls For Do-Not-Track Features?

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

12. What Are My Privacy Rights In Europe?

If you are located in Europe, you have certain rights in relation to your personal information. Please note there are exceptions and limitations to each of these rights. We may, for example, refuse to act on a request if the request is manifestly unfounded or excessive. To submit a request to exercise your rights, please contact us at info@spidersight.com.

Access, Correction, and Data Portability: You may ask for an overview of the personal information we process about you and to receive a copy of your personal information. You also have the right to request to correct incomplete, inaccurate, or outdated personal information. To the extent required by applicable law, you may request us to provide your personal information to another company.

Objection: You may object to any use of your personal information that is not (i) processed to comply with a legal obligation, (ii) necessary to do what is provided in a contract between Spider Sight and you, or (iii) if we have a compelling reason to do so. If you do object, we will work with you to find a reasonable solution.

Deletion: You may request the deletion of your personal information, as permitted under applicable law. This applies, for instance, where your personal information is outdated or the processing is not necessary or is unlawful; where you withdraw your consent to our processing based on such consent; or where you have objected to our processing.

Restriction of Processing: You may request that we restrict processing of your personal information while we are processing a request relating to the accuracy of your personal information, the lawfulness of the processing, or our legitimate interests to process this personal information.

Withdrawal of Consent: If we rely on consent for the processing of your personal information, you have the right to withdraw it at any time and free of charge. When you do so, we will apply your preferences going forward and this will not affect the lawfulness of the processing before your consent withdrawal.

Right to Lodge a Complaint: If you are a resident in the European Economic Area and you believe we are unlawfully processing your personal information, you have the right to complain to your local data protection supervisory authority.

13. Do Residents Of Certain U.S. States Have Specific Privacy Rights?

Yes. If you are a resident of certain U.S. states (including California, Colorado, Connecticut, Virginia, and others with applicable privacy legislation), you may have specific rights regarding your personal information, including:

Request Deletion: You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law.

Access Information: You may submit a verifiable request for information regarding the categories of personal information collected, the purposes for which it is collected, the categories of sources, the categories of third parties with whom we disclosed it, and the specific pieces of personal information we have collected about you.

Portability: You may have the right to request a copy of the specific pieces of personal information that we have collected from you in the 12 months preceding your request.

Non-Discrimination: We will not discriminate against you if you exercise your privacy rights.

Opt Out of Sale: We do not sell personal information to data brokers or advertisers. If you wish to confirm this or exercise any opt-out rights, you can contact us at info@spidersight.com or use our opt-out form.

To exercise these rights, you can submit requests online, contact us by email at info@spidersight.com, or contact us at the address noted at the bottom of this document. Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have information in our system.

14. International Visitors

Our Services are hosted in the United States. If you choose to use the Services from the European Union or other regions of the world with laws governing data collection and use that may differ from U.S. law, then please note that you are transferring your personal information outside of those regions to the United States for storage and processing. Also, we may transfer your data from the U.S. to other countries or regions in connection with storage and processing of data, fulfilling your requests, and operating the Services.

If you are located in Europe, we will comply with applicable data protection laws when transferring your personal information outside of your jurisdiction. We may transfer your personal information to countries that have been found to provide adequate protection by the European Commission, use contractual protections for the transfer of personal information, or transfer to recipients who have adopted Binding Corporate Rules.

15. Updates

We may update this Privacy Policy from time to time. The updated version will be indicated by an updated “Effective Date” and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

16. Contact Us

Unless otherwise indicated, Umbrella Projects, LLC is the entity responsible for processing your personal information as described in this Policy. If you have questions or comments about this notice, you may email us at info@spidersight.com.

Umbrella Projects, LLC
Email: info@spidersight.com