NECRONOMICOMM
Privacy Policy
Effective / last updated: 2026-07-03
NecronomiComm is a service operated by Basement Yeti LLC, a Georgia limited liability company ("we", "us"). This Privacy Policy explains what we collect, why, the legal bases we rely on, and your choices. We aim to collect as little as possible and to hold nothing we don't need. For any privacy question or request, contact support@necronomicomm.com.
1. Information we collect
- Account details — your email address, an optional agency/org name, and an optional logo you upload for white-labelling client documents.
- Authentication — a securely hashed password (we never see or store your plaintext password), or, if you use Google sign-in, the email address Google confirms. We also record which version of our terms you accepted, and when.
- Usage & diagnostics — product events such as sign-ups, logins, scans, audits, pitches, subscription changes, and errors, plus short-term IP-based rate-limiting records, used to operate and secure the Service.
- Research data you generate — the areas you scan and the leads you save, which include publicly available business information (name, public address, phone, website, and similar) drawn from OpenStreetMap and public websites.
- Billing status — your subscription state via Stripe. We do not store your card number or full payment details; Stripe does.
2. What we do NOT collect
We do not store your payment card details, we do not ask for or hold any API keys, and we do not sell your personal information or share it for advertising.
3. Legal bases for processing (EEA/UK)
Where the EU or UK GDPR applies, we rely on these legal bases:
- Performance of a contract — to create and run your account, deliver scans and generated materials, and manage your subscription.
- Legitimate interests — to secure the Service, prevent abuse, keep diagnostics, and improve the product, balanced against your rights.
- Consent — where you give it (e.g. optional Google sign-in); you may withdraw consent at any time.
- Legal obligation — to keep minimal billing/tax records and to respond to lawful requests.
4. Cookies
We use only strictly necessary cookies: a secure, HttpOnly session cookie to keep you signed in, a CSRF-protection token, and a short-lived state cookie during Google sign-in. We do not use third-party advertising or cross-site tracking cookies, so no cookie-consent banner is required.
5. Service providers (sub-processors)
We share the minimum necessary data with providers who help us run the Service, each bound by its own terms and data-protection commitments:
- Stripe — subscription billing and payment processing.
- Google — optional sign-in, and PageSpeed website audits.
- Anthropic — generating outreach copy; we send a lead's public business details and the computed findings to produce the text.
- Email delivery provider — sending verification, password reset, and account emails.
- Hosting & CDN providers — running the app and providing DNS/TLS security.
6. Information about businesses (the leads)
The Service processes publicly available, business-level information about businesses and organizations, sourced from © OpenStreetMap contributors (ODbL) and public websites. If you are a business and want your information removed from a report, contact support@necronomicomm.com.
7. How long we keep data (retention)
- Account & research data (saved leads, notes, branding) — while your account is active; erased when you close or erase your account.
- Diagnostic/usage events & rate-limit records — kept for a limited period for security and troubleshooting, then deleted or aggregated.
- Minimal billing record (email + paid-through date) — kept if you close your account so paid time is honored; removed if you erase. Payment records held by Stripe follow Stripe's own retention.
From Settings you can close your account (erases operational data, keeps the minimal billing record) or erase everything permanently. Retaining the minimal billing record is permitted as necessary for our legal/tax obligations and to perform our contract with you.
8. Your rights
Depending on where you live (including under GDPR, UK GDPR, and CCPA/CPRA), you may have the right to access, correct, delete, restrict, or port your personal data, object to certain processing, withdraw consent, and lodge a complaint with your data-protection authority. We do not sell or share personal information as those terms are defined under U.S. state privacy laws, and we will not discriminate against you for exercising a right. You can Close or Erase your account yourself in Settings, and export your saved leads any time via CSV. For any other request, email support@necronomicomm.com; we verify and respond within the time required by applicable law (generally within 30 days, or 45 days under CCPA).
9. International data transfers
The Service is operated from and hosted in the United States, and our providers may process data in the U.S. and other countries. If you use the Service from the EEA, UK, or a similar jurisdiction, your information will be transferred to and processed in the United States; where required, we and our providers rely on appropriate safeguards (such as the EU/UK Standard Contractual Clauses) for those transfers.
10. Security
We protect data with measures including scrypt password hashing, encryption in transit (HTTPS/TLS), session tokens stored only as hashes, CSRF protection, per-account access isolation, least-privilege access, and logging/monitoring. No method of transmission or storage is perfectly secure, and we do not guarantee absolute security; we deliberately hold little of value — no card numbers, no API keys.
11. Data breach notification
If a security incident affecting your personal data occurs that is reportable under applicable law, we will notify affected users and any required authorities without undue delay and as required by law.
12. Children
The Service is for business use and is not directed to children. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.
13. Changes & contact
We may update this policy; material changes update the date above and, where required, we will provide notice. Questions or requests: support@necronomicomm.com.