Privacy notice
This notice is given under Article 14 of the GDPR to people whose data Resolve402 returns without having collected it from them, mainly company officers listed in the French official registry.
Controller and contact
Controller: Resolve402 (https://resolve402.dev). Contact for any privacy question or request: privacy@resolve402.dev.
Data and sources
- Officers of French companies: first name, last name, role, birth year (the birth date is never returned), as published in the official registry (INSEE Sirene / INPI RNE, via recherche-entreprises.api.gouv.fr).
- Probable business email: deduced from the officer's name and the email pattern the company publishes on its own public pages (contact, legal notice, press, team; robots.txt honoured). It is a deduction, marked as not verified unless a mailbox check is stated in the response.
- Company contact details: only shared mailboxes (contact@, press@...) published by the company on its own site. Personal addresses found there are counted, never returned.
- Counterparty checks: officers as published in the registry, insolvency notices (BODACC) and the French national asset-freeze register (DG Trésor).
Purpose and legal basis
Purpose: let businesses and their software agents identify who runs a company and how to reach it professionally, and check a counterparty before invoicing or paying it. Legal basis: legitimate interest (Article 6(1)(f) GDPR) of the users in B2B prospecting and counterparty due diligence, limited to professional data already made public.
Recipients
The paying user who calls the API, directly or through an AI agent or a marketplace that relays the call. Our host (Vercel) processes requests as a processor.
Retention
Responses are computed on request and not stored in a database. Technical request logs are kept by the host for the short retention period of its log service. Objection requests are kept as long as needed to honour them.
Your rights
You can ask for access to, rectification or erasure of your data, restriction of its processing, and you can object at any time to its processing, by writing to privacy@resolve402.dev. To stop your address being returned, you can also send POST https://resolve402.dev/api/opt-out {"email":"you@company.com"}: it takes effect within 72 hours. Registry data must be corrected at its source (INPI / INSEE); Resolve402 reflects the correction on the next call. You can lodge a complaint with the CNIL (www.cnil.fr) or with the supervisory authority of your country.