Legal
Last updated 12 September 2026
Stack Lookup is operated by Veridion (Soleadify Inc. and its EU entity), the data controller for the personal data described here. Contact: support@stacklookup.ai.
The product indexes technologies observed on public websites and resolves websites to companies. It stores and serves no names, emails, phone numbers or other data about individuals. Company records carry firmographics (country, sector, size bands, year founded) about organisations, not people.
A sole trader whose business name is a personal name may appear as a company record because the source data identifies the business that way. Write to us if you want such a record reviewed.
API and dashboard: your work email, name and company when you register, the hashed key, the tier, and per-request usage records (endpoint, time, status, credits, client IP, the MCP client name). Usage records are needed to meter credits, apply rate limits and detect abuse.
Website: server logs with IP address, user agent and pages requested, kept for security. A session cookie (sl_tok) that is a signed timestamp, holding no personal data, used to tell a browser session from a script. Optional analytics (PostHog) and a chat widget (HubSpot) run only when configured; inputs are masked in any session recording.
Contact form: what you type, sent to the team that owns the subject and to our CRM for follow-up.
To provide the service you asked for (contract): issuing keys, metering credits, answering requests, sending the verification email. To keep the service safe and fair (legitimate interest): rate limiting, abuse detection, security logs. To improve the product (legitimate interest, and consent where analytics cookies require it). To tell you about plan limits, changes to the API or offers relevant to your use (legitimate interest; you can opt out at any time).
Account data: for the life of the key and up to 12 months after revocation, to prevent immediate re-registration abuse. Usage records: 24 months in identifiable form, then aggregated. Server logs: 90 days. Contact enquiries: as long as the relationship lasts and 3 years after the last exchange.
Processors that run the service: hosting (EU region), email delivery for verification, error monitoring, analytics and CRM providers, each under a data processing agreement. Enterprise enquiries are shared with Veridion sales. We do not sell personal data.
Transfers outside the EU rely on the EU Standard Contractual Clauses or an adequacy decision.
Access, rectification, erasure, restriction, portability and objection under the GDPR, and the right to withdraw consent where processing is based on it. Write to support@stacklookup.ai; we answer within one month. You may also complain to your supervisory authority; ours is the Romanian ANSPDCP.
Strictly necessary: sl_tok (session, 2 hours), the admin session cookie for operators. Analytics and chat cookies are set only when the corresponding services are configured and, where required, after consent. There is no advertising tracking.
We update this policy when the service changes. The date at the top is the date of the current version; material changes are announced on the dashboard.