Spectrm — Privacy policy

Spectrm Ltd ("Spectrm", "we") is a company registered in England and Wales (company no. 16866662). We provide a company-search, verification and enrichment platform for professional use. Contact for anything in this policy, including data-rights requests: Manojj Mohanaranjan, manojj.ranjan@outlook.com.

• Account information: your name, work email address, and password (stored hashed), and your firm's name.
• Search inputs and outputs: the investment criteria, search descriptions, and any example companies you provide, and the result lists the product generates for you.
• Usage data: interactions with the product and website (pages viewed, features used), collected via privacy-conscious analytics. Session recordings, where used to improve the product, mask the content of your search inputs.

To provide the service (running your searches and emailing you results), to operate, secure and improve the product, and to communicate with you about your account. We do not sell personal data, and we do not use your data for third-party advertising.

Your investment criteria, search definitions and result lists are ring-fenced to your firm. They are never shared with, shown to, or reused for any other customer, and never used to populate examples, defaults or suggestions for anyone else. Where data is used to improve the product, it is anonymised and aggregated first, so that your identifiable inputs are never used.

In providing the service, Spectrm collects and processes publicly available business information — including from company websites, news sources, Companies House, and public professional profiles (such as LinkedIn company pages) — some of which relates to identifiable individuals (for example, company directors and officers). We process this information as a controller, on the lawful basis of legitimate interests, for the purpose of providing professional company-search services. If you are such an individual and wish to query or object to this processing, contact us at the address above.

We use a small number of service providers (subprocessors) to run the product — cloud hosting, email delivery, and analytics — under contracts that restrict their use of data to providing those services to us.

Client-level data isolation, encryption in transit and at rest, role-based access controls, least-privilege access, and audit logging.

Account data and search data are retained while your account is active. On verified deletion request or account closure, we delete your data within 14 days, save for routine backup copies retained only as long as strictly necessary and standard legal requirements.

Under UK data protection law you may request access to, correction of, or deletion of your personal data, object to or restrict processing, and request portability. You may also complain to the Information Commissioner's Office (ico.org.uk). To exercise any right, contact us at the address above.

We'll post any changes to this policy on this page with an updated date.