Privacy.

Your business name, address, phone number and website address as they appear in Overture Maps, an open dataset published under an open licence. Where open data had a gap we may have filled it from Google Places, in which case we store Google’s place identifier and nothing else, as Google’s terms require.

Plus facts we read from your own public website — whether it offers online booking, for instance — together with the page address each fact came from and the sentence that showed it.

We do not keep copies of your pages. We store the extracted fact and the quote that supports it, not the page. We hold no personal data about your customers, no analytics about your visitors, and nothing from behind a login.

Politely, and identifying ourselves honestly. We honour robots.txt, make one request at a time per domain, and send a user agent that says who we are and links to a page explaining it — rather than pretending to be a browser. We measured what that costs: presenting as a browser would let us read one more site in 78. It is not a trade worth making.

Use the removal form, or email getsmallfish@gmail.com. Give the website or the phone number on your listing and it will find every listing we hold for you, including other branches.

We confirm through the contact already on your listing rather than the one you give us, because your website and phone number are public and anyone could type them. An opt-out anyone could file for anyone else would be a way to erase a competitor. Once confirmed you are gone from every future search and export within 7 days.

What we cannot undo, and will not pretend otherwise: if a customer has already exported a row about your business it is in their spreadsheet or their CRM and we cannot reach it. Removal stops future exports; it cannot recall one that has happened. We can tell you the date each export occurred if that helps you follow it up, and we will.

We do not send you email, and we do not send email on a customer’s behalf. We do not sell your details as a list. We do not scrape Google Maps. We do not guess: if we could not tell whether something was true of your site, the product says “couldn’t tell” rather than filling the gap.

Your email address and name, held by Clerk, who run our sign-in. Your workspace, your credit balance and every line of your billing ledger, held by Supabase in a Postgres database in the United States. If you pay us, Stripe handles the card — we never see or store card details.

We record product events — a search was confirmed, an export was downloaded — to know whether the thing works. Those events carry counts and reasons and are stripped of identifying fields before they are stored; the database rejects an event carrying a business name, address, phone, email or website outright.

Every charge, refund and grant is a line that cannot be changed or deleted — the database refuses both. A correction is a new line, so the history still shows what happened. If you close your account we keep that ledger and remove what identifies you, because destroying the record of what you were charged would remove the one thing a billing dispute needs.

You can export your data, ask for a copy of what we hold, or close your account, at getsmallfish@gmail.com. Depending on where you live you may have rights to access, correct, delete or port your data, and to object to how it is processed; we will honour those requests whether or not they apply to you by law.

Only the companies that run the product: Clerk (sign-in), Supabase (database), Stripe (payments), Vercel (hosting) and Anthropic (reading and judging websites). Each sees only what it needs. We do not sell data to anybody, and we do not share it for advertising.

If this page changes in a way that affects what we hold or who sees it, the date at the top changes and customers are told by email. A silent edit to a privacy policy is the same kind of thing as a silent edit to a benchmark, and this project has rules against the second.