Privacy Policy

Version 2026-10-17, in force since October 17, 2026

This policy explains what AntSpace ("we") collects when you use antspace.ai, why, who else handles it, how long we keep it, and the choices and rights you have. For questions or requests, email privacy@antspace.ai.

What we collect

When you have an account

• Account details: your email address, your password (stored only as a one-way hash), and, if you add them, your name, job title and username.
• Your company and your role on its team, and when you agreed to the terms, with the version you agreed to.
• If you sign in with Google, Microsoft, GitHub or Apple: your account id at that provider, the email address it shares and whether it confirmed it, and your name if it shares it. We never see your password there.
• If you turn on two-step sign-in: your authenticator secret (encrypted) and one-way hashes of your recovery codes.
• Security records: the browsers your account signed in from and when, so we can warn you about a sign-in from a new one. The warning email also says the network address it came from.
• Your settings, such as your notification choices and Browse privately.

What you publish and send

• Company profiles and everything on them, posts, reviews, questions and replies, with your name where the page shows its author.
• Requests you send to companies (demo, pricing, sales): your name, email, job title, company, timeline and message, your phone number if you give it, and your consent to share them.
• Requests to add a company to AntSpace, claims of company profiles, and requests to correct or remove a profile: the name, email and details you give.
• With requests to companies and requests to correct or remove a profile, a keyed hash of your network address, to stop abuse (the address itself isn't stored).

When you browse

• Profile analytics: which company profiles and sections are viewed, for how long, and where the visit came from (the referring site, the kind of device and the country). We don't store your network address or browser details for this. Visitors who aren't signed in are counted with a key that changes every day, so their visits can't be linked across days.
• A random id for each browser tab, kept in your browser's session storage, so a visit is counted once (see the Cookie Policy).
• Ordinary server logs (network address, time, page asked for, browser) to keep the Service running and secure.

Payments

For AntSpace Verified, Stripe collects your card or other payment details. We receive and keep the Stripe customer and subscription ids, the plan, price, billing period, status and renewal date, and who started the subscription. We never see full card numbers.

How we use it, and why we may

• Running your account (signing in, confirming your email, password resets, your company's team): to provide the Service you asked for (contract).
• Keeping accounts and the Service secure (rate limits, a human check after repeated failed sign-ins, security notices): our and your legitimate interest in security.
• Showing company profiles, posts, reviews and discussions to visitors: to provide the Service (contract), and companies' legitimate interest in being found.
• Passing your demo, pricing or sales request to the company you chose: your consent, given with each request.
• Showing companies who viewed their profile (see below): our and companies' legitimate interest. You can opt out at any time.
• Starting company profiles from public information, and drafting profiles with AI: our legitimate interest in a useful directory (see the Pre-seeded profiles notice).
• Sending the notifications and emails you chose: contract, and your choices in Settings.
• Taking payments for paid plans: contract.
• Meeting legal duties and handling disputes: legal obligation and legitimate interest.

We don't sell personal data, we don't use it for advertising, and we don't let advertisers track you on AntSpace.

What companies see about you

• When you view a company's profile while signed in, that company can see your name, job title, company and work email, and what you looked at. Personal email addresses (such as Gmail) are never shown. Turn on Browse privately in Settings to be counted without your name; your earlier visits are then hidden from companies too.
• When you send a request to a company, the members of its team who handle requests see the details you sent. We record each time one of them views or exports requests.
• What you post in reviews and discussions is public, with your name and, when you answer for a company, that company.

Who else processes it

We use these companies to run AntSpace. Each gets only what it needs for its job, under a contract that requires it to protect the data.

• Amazon Web Services (AWS), United States (Ohio): hosts the site, the database and uploaded files (Amazon EC2, RDS, S3 and CloudFront), so it handles everything stored in AntSpace.
• Amazon Simple Email Service (Amazon SES), part of AWS, United States: sends account emails, notifications and digests, so it handles your email address and what the emails say.
• Stripe, United States and the other countries Stripe uses: takes payments for AntSpace Verified, so it handles payment details, the billing name and address, and an email address.
• OpenRouter, United States, and the AI providers it sends requests to (today Google's Gemini models, and Exa for web search): AI autofill, drafting offerings, and researching companies people ask us to add. They get company names, websites, public web pages and what you type into AI-assisted forms, never your account details.
• Cloudflare (Turnstile), United States and Cloudflare's global network: the check that you're a person, shown after repeated failed sign-ins. It sees your network address and browser signals during the check.
• Google, Microsoft, GitHub and Apple, in their own locations: signing in, when you choose one of them. They handle what they share when you sign in with them.

Your browser also fetches the site's typeface from Google Fonts directly (Google sees your network address; it sets no cookies). Links to videos and other sites that companies add open those sites, under their own policies.

We may also share data when the law requires it, to protect people or the Service, or with a buyer of AntSpace's business, who would have to keep to this policy.

Where your data is

AntSpace keeps its data in the United States (AWS, Ohio). If you're outside the United States, your data is transferred there. Where the law requires it, we rely on safeguards such as the European Commission's standard contractual clauses in our providers' contracts.

How long we keep it

Your choices

• Change your details, password and sign-in methods in Settings.
• Choose which notifications you get in the app and by email in Settings. Every email that isn't essential has an unsubscribe link.
• Turn on Browse privately in Settings.
• Withdraw a request you sent to a company in Your requests.

Your rights

Depending on where you live, you may have the right to see the personal data we hold about you, get a copy of it, correct it, delete it, restrict or object to how we use it, and withdraw consent you gave. Email privacy@antspace.ai from your account's address and we'll answer within 30 days. You can also complain to your data protection authority.

Children

AntSpace is for professionals and isn't meant for anyone under 16. We don't knowingly collect their data; if you think we have, tell us and we'll delete it.

Security

Passwords are hashed, authenticator secrets are encrypted, connections use HTTPS, and each part of AntSpace can reach only the data it needs. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Changes

New versions are posted here with their date. If a change matters to you, we'll tell you in the app or by email before it takes effect.

Contact

privacy@antspace.ai