Privacy & Data Removal
Last updated 2026-08-31 · Questions: hello@orefront.io
What we collect
When you sign up we store your email address, the page you signed up from, and, if you use the Claim Watch funnel, the claimant name you select so we can watch the right claims. API registration stores your email, non-secret account and key identifiers, a one-way credential hash, plan and balance records, aggregate endpoint usage, and security or payment audit events. Raw API keys are shown once and are not stored. Cloudflare provides us a country code and network address; API rate-limit identifiers are keyed one-way hashes, not raw addresses. Page-view counts are collected server-side without cookies or fingerprinting.
Where it lives and who processes it
Subscriber records are stored in Cloudflare KV. API account, usage, security, and payment-fulfillment records are stored in Cloudflare D1. Emails are delivered by Resend. Payments are processed by Stripe when a paid product is enabled. We do not sell or rent your personal information.
Retention and security
Short-lived key-claim and rate-limit records are pruned after they expire. Aggregate API usage and non-payment audit events are retained for up to 13 months for security, reliability, and product analysis. Payment records can be retained longer where accounting, tax, fraud-prevention, or legal obligations require it. Credentials are accepted only in authorization headers and are stored as keyed one-way hashes.
Unsubscribe and deletion
Every email includes a one-click unsubscribe that works immediately. To delete your records entirely, email hello@orefront.io and we will remove them promptly.
Public-record pages and takedown requests
Claimant and company pages republish public government records, with the source and retrieval date stated on each page. If a page about you contains an error, or you are an individual (not a company) and want your page reviewed for removal, email hello@orefront.io with the page link. We respond within a few business days and honor reasonable removal requests from individuals.