Legal

Privacy

What we collect, where it sits, and who else touches it. Written to be read, not to be skimmed past.

Last updated 2026-05-25 · Valor Hart LLC, Huntsville, Alabama

1. What we collect

If you join the waitlist or start a trial, we collect your email address and the date you signed up. That is the account record. Nothing else is required to use the tool.

If you email us, we keep the thread so we can answer you.

DataWhyWhere it lives
Email addressAccount, billing, run summaries if you enable themOur records
API keysRunning your pullsYour browser only
ICP profiles and filtersScoring your leadsYour browser only
Pulled lead resultsThe list you asked forYour browser, plus wherever you export

2. Your API keys

Google Places, Hunter.io, and Airtable credentials are stored in your browser's local storage on the device you entered them on. They are sent directly from your browser to those vendors when a pull runs. They are not transmitted to us and we cannot read them.

Two consequences worth knowing. Clearing your browser data deletes your keys, and a second device starts empty. Also: restrict your Google key to an HTTP referrer. An unrestricted key pasted into any browser tool can be used by anyone who gets it.

3. Lead data you pull

The businesses you pull are companies, not consumers. The fields we handle are the ones Google publishes on a business listing: name, address, phone, website, category, rating, review count, and review text. Contact enrichment returns work email addresses and job titles from Hunter.io.

Results stay in your browser session and in whatever you export. We do not build a shared database out of what our customers pull.

4. Third parties

  • Google Places API — business sourcing and review text. Called with your key, under Google's terms.
  • Hunter.io — contact enrichment. Optional. Called with your key.
  • Anthropic Claude — the scoring model. Receives the lead fields and your ICP text so it can produce a score and quoted evidence.
  • Airtable — only if you connect a base and push records.
  • Prospect websites — fetched for signal evidence by our own server, not by your browser. Most small-business sites send no CORS headers, so the browser cannot read them. The prospect URL is sent to our fetch service, which returns stripped page text; we do not retain the URL or the text. See section 6.

Each of these has its own privacy terms, and your use of your own keys is governed by your agreement with them.

5. What we never do

  • We do not sell, rent, or share your email address.
  • We do not scrape private, gated, or login-protected data.
  • We do not buy consumer data or build consumer profiles.
  • We do not resell the lead lists you generate.
  • We do not run third-party advertising trackers on this site.

6. Prospect data and the people in it

This tool finds businesses and, if you supply a Hunter.io key, work contact details for people at those businesses. Those people did not ask to be found. The rest of this policy is about you; this section is about them, because it would be dishonest to leave it out.

  • We are not the source and we are not a database. Every lookup runs live against Google, the prospect's own website, and Hunter, using your keys. We do not buy, build, sell or retain a contact database. There is no stored list of people here to search.
  • What transits our systems. Prospect URLs pass through our own fetch service, because most small-business sites send no CORS headers and a browser cannot read them. Lead fields and your ICP text go to Anthropic Claude for scoring. Neither is retained after the request completes. Results land in your browser.
  • Under GDPR you are the controller, not us. If you prospect into the UK or EU you decide who is contacted and why, so the Article 14 notice, the lawful basis, and any erasure or objection request are yours to answer. We process only on your instruction and hold nothing to erase.
  • If a prospect contacts us instead of you. Write to hello@intentscoring.app. We will tell them plainly that we hold no record of them, explain that the data was retrieved from public sources using a customer's own API keys, and where we can identify the customer involved we will pass the request on.
  • Suppression is yours. Excluding a business you should not contact is managed in the tool. We do not keep a global suppression list on your behalf.

7. Your rights

Ask and we will tell you exactly what we hold on you, correct it, or delete it. Since the only record is your email and billing history, that is a short conversation. Deleting your keys and local data is a button in the tool's settings screen and does not require us at all.

Marketing email, if we ever send any, will have an unsubscribe link that works on the first click.

8. Contact

Privacy questions go to hello@intentscoring.app, which reaches Ryan Roderick at Valor Hart LLC, Huntsville, Alabama. If this policy changes we will update the date at the top and note what changed.

Last updated 2026-05-25.