Privacy Policy
Last Updated: August 5, 2026
Findings24 ("Findings24," "we," "us," or "our") operates an international product discovery and navigation platform at https://findings24.com (the "Service"). This Privacy Policy explains what personal information we collect, why we use it, when we share it, how long we keep it, and the choices and rights available to you.
By using the Service, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please stop using the Service. This Policy does not replace any more specific notice shown when you use a particular feature.
1. Data Controller and Contact
For personal information processed through the Service, the controller or equivalent responsible party is:
- Name: Findings24
- Website: https://findings24.com
- Privacy contact: contact@findings24.com
For privacy questions, rights requests, correction or deletion requests, and complaints, email us at contact@findings24.com. Please include enough information for us to identify the relevant account or request, but do not send passwords, payment card numbers, or other unnecessary sensitive information.
2. Information We Collect
We collect information that you provide, information created when you use the Service, and information obtained from public or authorized sources.
2.1 Account and Authentication Information
When you create or use an account, we may collect:
- Name, email address, profile image, and account identifier.
- Email-verification status and authentication activity.
- Password-related information, such as a password hash, when email and password sign-in is enabled. We do not intentionally store passwords in plain text.
- Third-party sign-in information, such as a Google or GitHub account identifier and basic profile information, when you use that provider.
- Session, login, security, and account-status records.
2.2 Product Owner and Submission Information
When you submit, claim, edit, or manage a product, we may collect:
- Product name, website URL, tagline, description, categories, product features, and other listing information.
- Logos, screenshots, thumbnails, social links, badge information, ownership evidence, and verification details.
- Submission status, review notes, moderation history, and communications about the submission.
- Information about your relationship to the product, company, or organization.
Some of this information is published publicly as part of the listing. Do not submit confidential information or information that you do not have the right to publish.
2.3 Article and Contributor Information
When you contribute an article or other editorial content, we may collect your display name, biography, website, company, role, email address, article title, excerpt, content, cover image, categories, related products, original publication URL, disclosure information, AI-assistance disclosure, confirmation of rights and originality, and review history.
Published contributor information and articles may be publicly displayed. We may edit, translate, format, summarize, or otherwise process submissions as described in our Terms of Service.
2.4 Payment and Credit Information
If paid features or credit packages become available, we may collect the package selected, order or transaction identifier, credit amount and balance, payment status, refund or chargeback status, billing country, tax information, and other information needed to provide the purchase. Full payment card numbers are handled by the payment processor identified at checkout and are not intentionally stored on our application servers unless we expressly say otherwise.
2.5 Communications
If you contact us, we may collect your email address, message, attachments, support history, and any information you choose to include. We use this information to respond, investigate reports, provide support, and maintain business records.
2.6 Automatically Collected Information
When you access the Service, we and our service providers may collect:
- IP address, approximate location inferred from IP, browser type, operating system, device information, language, time zone, and referring URL.
- Pages and product listings viewed, searches, navigation paths, clicks, outbound-link interactions, session timing, and other usage events.
- Request timestamps, response status, error details, security events, performance information, and diagnostic logs.
- Cookie identifiers, local preferences, session identifiers, and similar technical information.
2.7 Public and Third-Party Sources
Findings24 may collect product information from publicly accessible websites, public product pages, public social profiles, public directories, and other authorized sources. We use this information to research, organize, verify, and publish product listings. We may also receive information from sign-in providers, product owners, contributors, reviewers, and other users.
3. How We Use Information
| Purpose | Typical information | Legal basis where applicable |
|---|---|---|
| Provide, operate, and maintain the Service | Account, content, device, and usage information | Contract, legitimate interests |
| Create and manage accounts and sessions | Name, email, provider data, authentication and session records | Contract, legitimate interests |
| Review, publish, translate, classify, and improve listings and articles | Product, contributor, submission, and public-source information | Contract, legitimate interests, consent where required |
| Verify product ownership, badges, links, and submitted information | Product, claim, website, and verification information | Contract, legitimate interests |
| Process optional paid features, credit packages, refunds, tax, and accounting | Order, credit, payment-status, billing, and transaction information | Contract, legal obligations, legitimate interests |
| Respond to support requests and content complaints | Contact details and communications | Contract, legitimate interests, legal obligations |
| Protect the Service and prevent fraud, abuse, and security incidents | IP address, logs, account and usage information | Legitimate interests, legal obligations |
| Understand performance and improve the Service | Analytics, usage, device, and diagnostic information | Consent where required, otherwise legitimate interests where permitted |
| Send essential service messages | Email, account, submission, and security information | Contract, legitimate interests, legal obligations |
| Meet legal, regulatory, accounting, and enforcement obligations | Information relevant to the request or obligation | Legal obligations, legitimate interests |
We may use aggregated or de-identified information for statistics, quality measurement, research, and product improvement. We will not attempt to re-identify information that has been de-identified, except where necessary to test or protect our systems.
4. Cookies and Similar Technologies
Cookies and similar technologies help us remember preferences, maintain sessions, protect accounts, and understand how the Service is used.
| Category | Examples and purpose | Can it be disabled? |
|---|---|---|
| Strictly necessary | Authentication/session cookies, security controls, and the NEXT_LOCALE language preference | Usually not without affecting core features |
| Functional | Language, display, and other preferences | Yes, through browser or device settings |
| Analytics | Page views, navigation, outbound links, performance, and product improvement when configured | Yes, by blocking cookies/scripts, using browser controls, or using provider opt-out controls |
| Advertising | We do not intentionally use advertising cookies for behavioral advertising as part of the current Service | Not applicable |
Depending on the deployment configuration, the Service may load one or more of the following analytics tools:
- Google Analytics may process page views, device information, and usage events.
- Umami may process privacy-focused website analytics when enabled.
- OpenPanel may process product analytics and outbound-link or screen-view events when enabled.
Analytics configuration can vary by environment and may be changed without changing the core Service. You can use browser settings, content-blocking tools, device controls, or provider opt-out mechanisms to limit analytics. Blocking necessary cookies may prevent sign-in or other features from working correctly.
5. How We Share Information
We do not sell your personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. We may share information in the following circumstances:
- Service providers and infrastructure: With providers that host, store, secure, authenticate, analyze, deliver, or support the Service. This may include Cloudflare infrastructure, database and object storage, email or notification providers, monitoring, content-processing providers, and payment processors when paid features are available.
- Sign-in providers: With Google or GitHub when you choose to use their sign-in flow, subject to the provider's own privacy policy and your settings.
- Analytics providers: With Google Analytics, Umami, OpenPanel, or another tool only when that tool is enabled for the relevant deployment and subject to its own privacy practices.
- Public disclosure: Product listings, public product information, published articles, contributor display information, and other content you submit for publication may be visible to anyone and may be indexed, cached, copied, or shared by others.
- Legal and safety reasons: When reasonably necessary to comply with law, legal process, government request, court order, enforceable request, or to protect the rights, safety, security, and property of Findings24, users, or the public.
- Business transfers: In connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to continued protection of personal information.
- With your direction or consent: When you ask us to share information or otherwise provide permission.
Service providers may process information only as needed to provide services to us, under contractual or other appropriate confidentiality and data-protection obligations, unless the provider acts as an independent controller under its own policy.
6. Security
We use reasonable technical and organizational measures appropriate to the nature of the information, including HTTPS/TLS in transit, access controls, authentication safeguards, hashed or encrypted credentials where applicable, restricted administrative access, logging, backups, and security monitoring.
No method of transmission, storage, or authentication is completely secure. You are responsible for protecting your credentials and should notify us promptly if you believe your account or information has been compromised.
If we discover a security incident that requires notice, we will notify affected individuals and regulators as required by applicable law and within the time required by law.
7. Data Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including service operation, security, dispute resolution, enforcement, and legal obligations.
As a general guide:
| Data type | Typical retention approach |
|---|---|
| Account and authentication data | While the account is active and generally for up to 90 days after a verified deletion or closure request, unless retention is required for security, legal, or dispute purposes |
| Product claims and owner submissions | While needed to manage the request, verify ownership, maintain the listing, prevent abuse, or keep required moderation records |
| Published product listings and contributor articles | While published or until removal is requested and approved; public archives, backups, and legal records may remain longer |
| Drafts, review notes, and moderation history | While needed for the workflow and generally for up to 2 years after the last activity, unless a longer period is required |
| Orders, credit balances, payment status, refunds, and tax records | While needed to provide the paid feature and generally for the period required by tax, accounting, consumer-protection, or dispute-resolution laws |
| Security, authentication, and diagnostic logs | Generally up to 12 months, with shorter or longer periods where needed for an active incident or legal obligation |
| Analytics data | According to the configured provider's retention settings; we seek to use aggregated or de-identified information where practical |
Actual retention depends on the type of data, how the feature is configured, whether the information is part of a public archive, and applicable law. Deletion from an active database may not immediately remove copies from backups, caches, logs, or third-party systems.
8. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
- Know whether we process your personal information and request access to it.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal information, subject to legal and operational exceptions.
- Request restriction of processing or object to processing based on legitimate interests.
- Withdraw consent where processing is based on consent.
- Receive certain information in a portable, machine-readable format.
- Opt out of marketing communications, if any. Essential account, security, legal, and transactional messages may still be sent.
- Lodge a complaint with your local data protection authority.
To exercise a right, email contact@findings24.com. We may need to verify your identity and may ask for additional information to protect your account. We generally respond within 30 days, or within the period required by applicable law. Where permitted, we may extend the response period for complex requests and will explain why.
9. European Privacy Rights
If the GDPR, UK GDPR, or a similar law applies to you, we process information using the legal bases described in Section 3. You may contact us first so we can address your concern. You may also complain to the supervisory authority in the country where you live, work, or believe an infringement occurred.
Where information is transferred outside the European Economic Area, the United Kingdom, or Switzerland, we use a lawful transfer mechanism where required, such as an adequacy decision, standard contractual clauses, or another legally recognized safeguard.
10. California and Other U.S. State Privacy Rights
Depending on the state where you live, you may have additional rights to know or access the categories and specific pieces of personal information we collect, request correction or deletion, obtain information about disclosures, and appeal a denied request. We do not discriminate against you for exercising a privacy right.
For purposes of these rights, our current categories may include identifiers and account information; commercial or submission information; internet or other electronic network activity; approximate geolocation inferred from IP; professional or contributor information; and inferences used to organize or improve the Service. We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you.
We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by applicable law. We may disclose information to service providers and contractors for the business purposes described in Section 5. To submit a request, email contact@findings24.com with the subject "Privacy Request" and specify whether you are requesting access, correction, deletion, or another right.
11. International Data Transfers
Findings24 and its service providers may process information in countries other than the country where you live, including countries where our infrastructure or providers operate. Those countries may have data-protection rules different from yours. We apply appropriate contractual, technical, and organizational safeguards as required by applicable law.
12. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If the law in your country sets a higher minimum age, that higher age applies. If you believe a child has provided personal information to us, contact contact@findings24.com so we can investigate and take appropriate action.
13. Third-Party Services and Links
The Service may link to third-party websites and may use third-party sign-in, analytics, hosting, storage, content, or other services. This Policy applies to Findings24's processing, not to the independent privacy practices of those third parties. Review their policies before using their services or providing information to them.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in the Service, technology, law, or our practices. We will post the new version on this page and update the "Last Updated" date. If a change materially affects how we use personal information, we will provide additional notice when reasonably practicable. Your continued use of the Service after the effective date means that you acknowledge the updated Policy.
15. Contact Us
For privacy questions, data-rights requests, security concerns, or complaints, contact:
- Findings24
- Email: contact@findings24.com
- Website: https://findings24.com
This Privacy Policy should be read together with the Terms of Service.