Legal center

Privacy

Privacy Policy

Version 1.0.0 · February 10, 2025

This Privacy Policy describes how GraphIQ, Inc. (“GraphIQ”, “we”, “us”, or “our”, “Company”) collects, uses and shares your personal information if you visit graphiq.ai, our applications or services that link to this Privacy Policy (collectively, the “Services”), contact us, receive our communications. We provide important information for individuals in Europe below.

GraphIQ is committed to protecting and processing your personal information responsibly. We value the data you share with us and treat it with respect.

Who is GraphIQ?

GraphIQ, Inc. (previously named GeoFlow AI, Inc.) is a Delaware corporation, with a registered office at 207 Mountain View Ave, Los Altos, CA 94024 (“GraphIQ,” “we,” “us,” etc.). GraphIQ is a Business Search Engine tool, powered by a Knowledge Graph, sourced from open web pages, business directories, news articles and third party data providers. By using our applications and APIs, customers are able to search for organizations, employee contacts, facts and organizational relationships. Our Services are designed to help our customers and partners in a wide variety of ways, including by helping them find companies to do business with and learn everything about them, including identifying contacts within those organizations, business news, etc.

What does this Privacy Policy apply to?

This Privacy Policy applies to information we collect, maintain and provide via our software application, application program interfaces (APIs) and other Services.

This Privacy Policy includes additional notices that may apply to you if you live in certain jurisdictions, such as residents of the European Economic Area, United Kingdom, Brazil, or California. These notices may include information on how to exercise certain rights you may have with respect to personal information. Please see the section below titled “Additional Notices for Specific Jurisdictions” for more details.

This Privacy Policy does not apply to the privacy practices of any companies we don’t control, including the privacy practices of our customers. For example, our customers may obtain information from GraphIQ about business contacts or prospects. We do not control their use and disclosure of this information. In certain circumstances, we act as a processor or service provider on behalf of our customers, and in those circumstances, it is the customer that is responsible for the processing of your personal information. For example, if we process personal information under an agreement in which GraphIQ acts as a processor or service provider to a customer, that agreement governs the processing of your personal information and not this Privacy Policy. If you have any concerns with the privacy practices of our customers or other third parties, we encourage you to review the privacy policies of those entities.

The Information We Collect

We collect information in the following ways:

• Information you provide directly to us
• Information we collect through our Services
• Information we collect through the use of technologies such as cookies
• Information we collect from third parties.

1. Information you provide directly to us

When you browse or visit our Site, contact us, set up a user account with us and use our products and services, we collect information that you voluntarily provide to us, such as through a web form, or during the account creation process. The information we or our vendors collect directly from you may include:

• Contact information, such as your name, business address, email address, and similar identifiers.
• Profile information, such as your username, password (encrypted) and account preferences for the Service.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us.
• Usage information, such as information about how you use the Services and interact with us, including information you provide when you use any interactive features of the Services.
• Marketing information, such as your preferences for receiving communications about our products, activities, and publications, and details about how you engage with our communications.
• Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

In accordance with applicable laws, we may record any calls, training sessions, webinars, or similar events that you participate in with us.

2. Information We Obtain When Customers Use Our Services

We may collect information when our customers use our applications in their business efforts. We may receive personal information about your online activity and commercial information based on your interactions with our customers.

Our user’s search queries, saved searches, tagged entities, etc. are considered confidential and sensitive, and are NOT shared with any external partner or entity.

3. Information from cookies, web server logs, and other technologies

Like many other commercial websites, we may also automatically gather information in connection with your use of the Site or Services through the use of “cookies” and other similar technologies such as web server logs, pixels, and end-user website activity (collectively, “Tracking Technologies”).

Information gathered through Tracking Technologies may include internet or other electronic network activity information, such as IP addresses, identifiers derived from email addresses for the purposes of cross-device tracking for targeted advertising, the date and time of visits, the pages viewed, links to/from any page, and time spent at a site.

We use third-party analytics services, such as Google Analytics and MixPanel. Google Analytics and MixPanel uses cookies to help us analyze how users use the Site and enhance your experience when you use the Services. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and processing of the data your use of the services generates by going to http://tools.google.com/dlpage/gaoptout.

4. Information from Third Parties

Publicly Available Information:

We or our service providers collect publicly available information about businesses and personnel who work or were previously employed with them. Such information could include identifiers, such as name, title, company or business, business contact information, email address, employment history, social media data, and similar information.

Third parties, including certain data vendors and our customers, may provide us with information through licensing, or other agreements. For example, we provide certain services to customers in which customers authorize us to collect certain information and data to develop professional profiles (“Business Profile Information”) that are compiled into our commercial database. We also obtain information from third-party providers, partners and integrators who gather data from a variety of sources including data co-ops or publicly available sources. Such information could include identifiers, such as name, title, department company name, company’s officers, and certain company employees, business and/or cell phone numbers, fax number, office address, email addresses, employment and education history, social media data, and similar information.

In addition, we may collect information from third parties such as customers, exchanges, aggregators, and publishers that is collected from their sites and properties, which might include identifiers such as IP address, cookie and other unique identifiers that might be considered personal information. The type of information collected via the identifiers might include information about online behavior, such as pages visited, time spent on a web page, session start/stop time, whether the visitor scrolled through or clicked on an ad or webpage, and referring to a website address, that is then associated with the company identified.

GraphIQ Open-Web Information Extraction

GraphIQ’s Business Knowledge Graph contains information about organizations and employees extracted from publicly available open-web sources.

Our open-web information extraction collects publicly available information from a variety of sources in order to compile “Attribute Data” about corporations, non-profits, and similar entities (“Companies”) and the professionals that work for them (“Professionals”).

Our Information Extraction collects a variety of information and data for purposes of creating our Knowledge Graph of entity facts, attributes and relationship data and for providing, improving, and maintaining the Services. We collect personal information as Attribute Data, and to help us compile, organize, and verify Attribute Data, in the following ways:

• from publicly accessible online sources or provided by third parties;
• through licensing agreements directly with data providers or other Companies.

We use Attribute Data to provide the Services, for internal research and development purposes, and to maintain and improve the quality of our Services. We may also use Attribute Data to collect additional metadata, such as company financials, certifications information, etc. We use this metadata to improve the quality of the GraphIQ Knowledge Graph, and to verify the accuracy, integrity, and completeness of our Attribute Data.

Our Services are designed to help our customers and partners in a wide variety of ways, including by helping them determine which Companies best fit their search criteria, identify company facts and relationships, and contacts within those organizations.

How We Use Your Personal Information

We may use the information we collect in the following ways:

• For our operational purposes, such as responding to your inquiries, routing you to the GraphIQ team member who can assist you, maintaining and servicing your account with us, providing customer service, processing or fulfilling your orders and transactions with us, verifying your information, processing payments, internal business functions such as accounting and forecasting, and similar purposes.
• For auditing, security, debugging, internal research and development, maintaining the quality and safety of our Services, and service performance purposes.
• To maintain, improve, and enhance the functionality and quality of our Application and Services.
• To communicate with you about your accounts and activities involving us and our services, including changes to our Application and Services.
• To enforce the legal terms that govern use of our Services, including to identify, prevent, and stop possible fraudulent activity.
• To comply with regulatory requirements.
• To provide the services you have requested.
• To better understand the sources of traffic and transactions on our Site.
• To personalize your experience and customize the Services.
• For internal research and development purposes.

Our Service Providers

We may share your personal information with third-party companies and individuals that provide services on our behalf or help us operate the Services (such as customer support, hosting, analytics, email delivery, marketing, and database management services). These third parties may use your personal information only as authorized by their contracts with us.

Our user’s search queries, saved searches, tagged entities, etc. are NOT shared with any external partner or entity.

Disclosures and Transfers

We may disclose information in the following situations.

With Customers

We disclose publicly available information in our Knowledge Graph, such as company and personnel data to our customers who may use this data for their internal business operations as part of our Services.

Governments, Law Enforcement, and Other Legal Requirements

We may disclose information about you to law enforcement, government officials, or other third parties if we believe in our sole discretion that it is absolutely necessary or appropriate in order to (i) respond to a subpoena, court order, or other binding legal process; (ii) comply with laws, statutes, rules, or regulations, including without limitation those designed to protect your privacy rights; (iii) prevent physical or other harm, financial loss, or infringement of your rights, GraphIQ’s rights, or the rights of anyone else; or (iv) report suspected illegal activity or investigate and pursue violations of our binding contractual agreements.

In addition, we may disclose personal information as necessary in the event of a contemplated or actual merger, acquisition, reorganization, bankruptcy, or similar event for purposes consistent with that transaction. Note that, in such an event, information in our possession may be transferred to our successor or assign.

Business Partners

We may disclose personal information (e.g. user name, email) to our business partners and affiliates to provide you with a product or service that you have requested.

Our user’s search queries, saved searches, tagged entities, etc. are NOT shared with any external partner or entity.

Your Data Rights

You have certain choices about your personal information. If you have questions or concerns regarding GraphIQ’s collection, use or disclosure of your personal information, or if you wish to exercise your rights, including the right to be removed from our Database, please contact us at [email protected]. Where you have provided opt-in consent to the use of your personal information, we will also give you the option to opt out in a similar manner, as required by law.

Opt Out of Cookies and Other Similar Technologies. Your browser or device can allow you to opt out of data collection through cookies or similar technologies. Please note that your experience using the Site or the Services might be degraded, or certain functionalities may not work, if you opt-out to such collection.

Opt Out of Marketing Communications. If you wish to opt out of our use of your contact information for our email marketing purposes, you can click the “Unsubscribe” button located within the most recent marketing email you received from us or submit your request to [email protected].

Your Data Subject Rights

The laws of your jurisdiction may give you the right to: be informed, access, rectify, or erase any personal information we have collected about you. You also have the right to data portability and the right to restrict or object to our processing of personal information we have collected about you. In addition, you have the right to ask us not to process your personal information (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us. If you choose to withdraw your consent, this will not impact the lawfulness of the data processing carried out up to that point.

To exercise any of these rights, please contact us as set out below and specify which right you are seeking to exercise. We will respond to your request in accordance with applicable law. Please note that certain information may be exempt from such requests in some circumstances, which may include needing to continue processing your information for our legitimate interests or to comply with a legal obligation. We may require specific information from you to help us confirm your identity and process your request, including, at a minimum, your name and email address. If personal information about you has been processed by us as a processor on behalf of our customer and you wish to exercise any rights you have with such personal information, please inquire with our customer directly.

If you have any issues with our compliance, you may contact us at [email protected]. You also have the right to lodge a complaint with the data protection regulator in your jurisdiction. However, we encourage you to contact us first, and we will do our very best to resolve your concern.

Protection and Retention of Information

GraphIQ considers the security of all the information and data within our control to be a top priority, and consistent with this we implement technical and organizational safeguards to protect from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, such information or data. However, no security system is impenetrable, and unanticipated system failures or the efforts of malicious actors are an unfortunate reality on the internet. Therefore, we cannot guarantee that the information and data within our control, including personal information, is absolutely secure.

GraphIQ retains the information described in this Privacy Policy for as long as is necessary to comply with legal obligations, enforce our agreements, maintain existing relationships with our customers, and otherwise as might be necessary for our legitimate business interests.

Our Policy Towards Children

GraphIQ provides business services, and as such we do not direct our services towards individuals under the age of 18. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from individuals under the age of 18, we take steps to delete that information in accordance with applicable law. If you become aware that GraphIQ has improperly collected information from individuals under the age of 18, please contact us immediately at [email protected].

European Data Protection Rights

European data protection laws give you certain rights regarding your personal information. If you are located within the European Economic Area and United Kingdom (collectively, “Europe”), you may ask us to take the following actions in relation to your personal information that we hold:

• Access. Provide you with information about how we process your personal information and give you access to your personal information.
• Correct. Update or correct inaccuracies in your personal information.
• Delete. Delete your personal information.
• Transfer. Transfer a machine-readable copy of your personal information to you or a third party of your choice.
• Restrict. Restrict the processing of your personal information.
• Object. Object to our reliance on our legitimate interests as the basis of our processing of your personal information that impacts your rights.

Please contact us at [email protected] to submit these requests. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction.

Cross-Border Data Transfer

If we transfer your personal information from the European Economic Area to a country outside of it and are required to apply additional safeguards to your personal information under European data protection legislation, we will do so. Please contact us for further information about any such transfers or the specific safeguards applied.

Retention

We retain personal information where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested; to comply with applicable legal, tax or accounting requirements; to establish or defend legal claims; or for fraud prevention). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Updates

We may update this Privacy Policy from time to time. If we make material changes to this policy, we will notify you, as appropriate, depending on the substance of the change, by email or by means of a notice on our website’s homepage.

Contact us!

If you wish to ask us any questions about this Privacy Policy, or to exercise any of your rights described in this Privacy Policy, we can be reached in the following ways:

Email us at [email protected].

You can reach us at:
207 Mountain View Ave, Los Altos, CA 94024.
If you write to us, please address it to our Privacy Team.

Terms

Terms of Service

These terms govern your access to and use of GraphIQ.ai. By creating an account or using the service, you agree to them.

Accounts

You are responsible for activity under your account and for keeping your credentials and API keys secure. You must provide accurate information and be authorized to bind your organization.

Acceptable use

You agree to use GraphIQ.ai for legitimate business purposes and in compliance with applicable laws, including data protection and anti-spam regulations. You may not scrape, resell, or redistribute the graph except as expressly permitted, or use the data to harass or unlawfully target individuals.

Subscriptions & billing

Paid plans are billed in advance on a usage or subscription basis as described at checkout. Fees are non-refundable except where required by law. We may change pricing with notice for future billing periods.

Intellectual property & API

GraphIQ.ai retains all rights to the platform, the graph, and our software. We grant you a limited, non-exclusive license to use the service and API within your plan limits. You retain rights to data you submit.

Disclaimers & liability

The service is provided "as is." To the maximum extent permitted by law, GraphIQ.ai is not liable for indirect or consequential damages, and our aggregate liability is limited to the amounts you paid in the preceding twelve months.

Termination & governing law

Either party may terminate per the applicable order or for material breach. These terms are governed by the laws of the State of Delaware, USA, without regard to conflict-of-law rules.

Security

Security

Security is built into how the graph is sourced, stored, and served. This is an overview of our practices — contact us for our full security package.

Infrastructure & encryption

GraphIQ.ai runs on hardened cloud infrastructure. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Networks are segmented and access to production is restricted and logged.

Access controls

We enforce least-privilege access, SSO and role-based permissions for the app, and scoped API keys. Employee access to customer data is limited to what's required to operate the service.

Compliance

We maintain a SOC 2 Type II program and align our data handling with GDPR and CCPA requirements. A Data Processing Addendum is available for customers who need one.

Vulnerability disclosure & incident response

We welcome reports from security researchers at [email protected] and maintain an incident response plan with defined notification timelines in the event of a breach.

Questions about any of this?

Privacy requests: [email protected] · Security: [email protected] · Legal: [email protected]

This page is provided for general information and is not legal advice.