Privacy Policy

Adopted by QS GROUP LTD on 2026-10-27 for the invite-only trial, which has no payments. This page summarises the full text (version beta-2026-10-27-r7) that every invited user reads and accepts in the app.

1. Information we collect

• Account information: your email address and, if you sign in with Google, your Google account ID, whether Google has verified your email address and, for Google Workspace accounts, your organisation's domain. We do not store your name or photo from Google, we get no access to your Gmail, Contacts, Calendar or Drive, and we never see your Google password. When you create an account we keep a shortened form of your IP address (the network part only). If you use a password, we store it only as a salted hash.
• Workspace information you provide: your seller profile (for example, your company, your role and what you sell), the accounts you add or import, lists, saved searches, notes and feedback.
• Invitation requests: while access is by invitation, if you request one we keep your email address, what you sell and, if you give them, your company website and where you sell, to review the request and invite you.
• Workspace history: earlier versions of your own statuses, feedback, draft edits, saved searches and account settings, so your workspace keeps its history. It is private to you, included in your data export and deleted with your account.
• Usage records: research you request, credits granted, used and refunded, and the settings you choose, such as email digest preferences.
• Security records: limited technical data, such as IP addresses used for rate limiting and abuse prevention, and an audit log of security-relevant account events.

2. Business information we process

CompanyCurrent is about businesses. We collect information from public business sources: business listings from the Overture Maps Foundation, City of Vancouver business licences, company websites and announcements, US federal contract awards (FPDS / USAspending), SEC filings, legal-entity records (GLEIF), Wikidata, news coverage indexed by GDELT, and companies’ own job boards. These sources can mention people in their business roles, such as an executive named in a press release. Named contacts are switched off at launch: we do not show customers a person’s name. We do not build databases of personal email addresses or personal phone numbers, and we do not sell contact data.

3. How we use information

• To provide the service: run your searches and research, monitor your accounts, and show what changed.
• To send service emails: account verification, password resets and, only if you turn it on, a digest of updates.
• To answer your invitation request.
• To send occasional product-update emails, only if you ticked the separate, optional box for them (it is never ticked for you). We record the wording you agreed to and when. You can unsubscribe at any time.
• To keep the service secure, prevent abuse and fix problems.
• To improve the quality of findings, including reviewing problems you report.

We do not sell personal data. We do not upload contact lists to advertising platforms. If you allow it (see section 5), we tell Meta when someone who came from one of our ads signs up or finishes setting up, so we can measure which ads work.

4. Your workspace is private

Your profile, the accounts you track, your lists, saved searches and notes are private to your workspace and are not shown to other customers. Verified facts about companies, which come from public sources, may be reused to serve other customers; who you are tracking and why is never shared.

5. Cookies and tracking

The CompanyCurrent app uses one essential session cookie to keep you signed in. It is marked secure and HTTP-only and is not used for tracking.

Campaign measurement. When you arrive on one of our landing pages, your browser stores a random identifier (not linked to your name or email) and the campaign labels in the link you followed (for example, which ad). We count the visit, and if you sign up we record those campaign labels with your account so we can see which campaigns bring customers. We do not store your IP address or the advertising click identifier for this.

Meta pixel (optional). On our landing pages we may ask whether you allow a Meta pixel. It is off unless you choose Allow. If you allow it, Meta's script loads on that page, and when you later sign up or set up your profile we send Meta the event with a one-way hash of your email address and account id, so Meta can match it to the ad. You can decline, or withdraw by clearing this site's storage in your browser; ask us at the address below to stop any further sharing.

Apart from that optional pixel, this public website loads no third-party scripts, fonts or images.

6. Sharing and service providers

We use service providers to run the service: Cloudflare (hosting and database), Google (only if you choose to sign in with Google), Anthropic (an AI web search in Deep Research, sent the researched company’s name, website, location and industry and a short description of what you sell, never your account details, and only within fixed spending limits) and, once email is switched on, an email delivery provider. They process information only to provide those services to us. We may disclose information if required by law, or to protect the safety and security of the service and its users. If the business is ever transferred, this policy will continue to apply to information collected under it.

7. Retention

We keep your workspace information while your account is active, and delete it when you delete your account (credit records are kept without your identity, for accounting). Operational records are removed on a schedule: rate-limit records after 2 days; used or expired sign-in and reset links after 7 days; undelivered emails after 7 days; expired sessions after 30 days; error reports after 30 days; usage-cost records after 400 days; security audit records after 730 days; invitation requests we have not acted on after 180 days (a request is deleted with the account it led to).

8. Your choices: export and deletion

• Export: you can download your data from the Sales Playbook page in the app (Download my data).
• Deletion: you can delete your account from the Sales Playbook page in the app (Delete my account).
• Email: the digest email is off until you turn it on, and you can turn it off at any time.

To ask for a copy or deletion by email, or for any other request about your information, write to hello@companycurrent.com.

9. Where we operate

CompanyCurrent covers business listings in every US state and Canadian province, and lets you research companies by name or website. The service is not intended for children, or for consumers acting outside a business context.

10. Changes and contact

We will update this page when the policy is finalised and when it changes, and show the date it takes effect. Questions: hello@companycurrent.com.

CompanyCurrent is owned and operated by QS GROUP LTD, British Columbia, Canada. Address: Unit 3040 - 2337 King George Blvd, Surrey BC V4A 5A4, Canada. Email: hello@companycurrent.com.

11. Past account-audit orders

CompanyCurrent previously sold a one-time account audit. That offer is closed. Information from orders already placed (order, payment status from our payment processor, and the intake form you submitted) is kept to deliver, refund or support those orders and for our accounting records, under the privacy notice shown at the time of purchase. Write to hello@companycurrent.com about any past order.