Legal

Privacy policy

Effective 30 September 2026.

What this covers

Two things: the personal data of people who use Locomint (customers), and the data about businesses that our products return, some of which can relate to an identifiable person (a sole trader, for example).

Customers

When you email us or request an API key we hold your name, email address and the messages you send us. When you call the API we log the request path, your key, timestamps, response codes and the IP address the request came from, for security, metering and support. Logs are kept for 90 days. We use no advertising trackers on this site. The status widget on this site calls our own API and nothing else.

Payments

This website takes no payments, and we never receive or store card details. Paid use is bought on the Apify Store. Apify Technologies s.r.o. processes your Apify account and your payment as an independent controller, under its own privacy policy, which is published with Apify’s legal documents.

When you run one of our listings, Apify shares limited run information with us as the developer, such as run status and usage. We use it to operate the listings and to answer you when you write to us about a run.

Business data

Our products fetch publicly visible business listings and the public pages of business websites, on a customer’s request, and return them to that customer. We keep a short-lived cache (website enrichment for up to 30 days, listings snapshots for change detection) and no permanent directory of people.

We collect only contact points a business has published on its own website. That means three kinds of contact, and we keep them apart:

• Company mailboxes such as info@, sales@ or bookings@, returned in emails. These identify a business, not a person.
• Work addresses and profile links of named staff that the business itself publishes on its own site, such as a named agent on a staff page or a link to a team member’s LinkedIn profile. Since 24 September 2026 these are returned to customers, marked so they cannot be mistaken for company mailboxes: named addresses in named_emails (and in emails, after the company mailboxes), profile links in named_profiles. We return the link the business published and never open the profile behind it. Named details are not written into our permanent history of business records; they are held only in a short-lived cache of what a website said, for at most 30 days.
• Phone numbers the business publishes on its own website as a number to call (a tel: link) or in the structured data of its pages. Since 30 September 2026 these are returned in phones, or website_phones on a map record, whose own listed number stays in phone. A sole trader’s business number is sometimes their own mobile, so these are treated like named details: never written into our permanent history, held for at most 30 days, and removable one number at a time.

We do not guess or generate addresses or numbers, and we do not collect owner names as a separate field, home addresses, numbers that appear only in the running text of a page, or anything from inside a social media profile. A named address on another company’s domain, such as the web designer credited in a site’s footer, is not returned, because it is not a way to reach that business; an unnamed address on another domain is kept only when it names a business function.

If you are a person whose work address, phone number or profile link appears in our data and you would rather it did not, use the removal form or write to info@locomint.io. We honour that within 7 days, across the API and the Apify products. You can ask us to stop returning a single address, phone number or profile link, every contact point from one website, or a whole business listing — and it does not have to be all three.

Because our records are read live rather than served from a stored directory, honouring a request means we refuse to return that item at all. Once an entry is on that list every API response drops it, whichever product the request came through.

A named staff address or profile link is personal data, and so is a phone number that turns out to be a person’s own, and so can be a business record that identifies a sole trader. Our lawful basis for returning them is legitimate interest in providing business-to-business contact information that the business has itself published on its own website so that it can be contacted. This page is how we make that known; we do not write to each person whose published work address we read. You can object at any time, and we stop returning your details within 7 days.

Your rights

Whether you are a customer or a business owner, you can ask what we hold about you, ask us to correct or delete it, or object to processing. Business owners, and anyone whose work address, phone number or profile link appears in our data, can use the removal form; removals are honoured within 7 days across the API and the Apify products. Everyone else: info@locomint.io. If you are in the EU/UK you also have the right to complain to your supervisory authority.

Where data lives

Our servers are in the European Union, in France. Apify (Czech Republic) processes data for the Apify products, and your Apify account and payments, under its own privacy terms.

Changes

We will post changes here with a new effective date. Material changes are also announced to customers by email.

Contact

info@locomint.io