Log In Get Started

Privacy Policy

Last updated: September 23, 2026

This document is a thorough starter draft covering the sections a service like this typically needs, written to be genuinely useful -- but it is not a substitute for review by a licensed attorney. Privacy law varies significantly by state (e.g. California's CCPA/CPRA, Virginia's VCDPA, Colorado's CPA, Connecticut's CTDPA, and others) and by country (e.g. GDPR outside the US); before relying on this commercially, have it reviewed and adapted to your actual data practices, the states/countries your users are in, and the entity operating this service.

1. What We Collect

When you register and use DNC Boss, we collect:

  • Account information — your name, email, phone number, company name, and password (stored as a salted hash, never in plain text).
  • Phone numbers you submit for single or bulk DNC checking, via the web app or API.
  • Usage and device data — API request metadata, login times, IP addresses (used for security purposes such as failed-login protection), and general browser/device information.
  • Billing information, if you're on a paid plan — invoices and payment status are recorded on your account; card numbers, if collected, are handled by our payment processor and are not stored on our own servers.
  • Support and job application content you voluntarily submit — messages sent through our contact/support forms, and, if you apply to a position through our Careers page, your name, contact details, resume, and any other information you include in that application.
  • Cookies — see Section 5.

2. How We Use It

We use this information to operate the Service: performing the DNC checks you request, enforcing your subscription's usage limits, securing your account and detecting abuse, generating invoices, providing customer support, and, where applicable, evaluating job applications. We do not sell your personal information, and we do not use the phone numbers you submit for checking to build profiles for advertising.

3. Phone Numbers You Submit

Numbers you check via single search, bulk upload, or the API are logged to your account's search history so you can review past results, and counted against your plan's usage limits. They are not shared with other customers of the platform, and are not merged into the underlying DNC dataset itself — the dataset is maintained separately from your search activity.

4. Data Retention

We retain account and search history data for as long as your account is active, and for a reasonable period afterward as required for legal, billing, or security purposes. Uploaded bulk files are deleted from storage once processing completes; only the results and summary counts are retained. Job application materials (including resumes) are retained for as long as reasonably needed to evaluate the application and for a limited period afterward, then deleted. You may request earlier deletion — see Section 9.

5. Cookies and Similar Technologies

We use a minimal set of cookies: a session cookie to keep you logged in, and a CSRF-protection cookie required for the security of form submissions. We do not use third-party advertising or cross-site tracking cookies. If that changes, this Policy will be updated accordingly.

6. Data Sharing and Service Providers

We do not sell or "share" (as that term is defined under laws like the CCPA) personal information for cross-context behavioral advertising. We share data only with service providers who help us operate the platform under contractual obligations to protect it and use it solely to provide their service to us — for example, infrastructure hosting, transactional email delivery, and payment processing — or when required by law, subpoena, or to protect the rights, property, or safety of us or our users.

7. Tenant Isolation

Your company's data — users, searches, files, API keys, and billing — is isolated from other companies on the platform at the database level, not merely hidden in the interface.

8. Security

We use industry-standard practices including encrypted password storage, role-based access control, and audit logging of administrative actions. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

9. Your Privacy Rights

Depending on where you live, you may have rights to know what personal information we hold about you, to request a copy of it, to request correction of inaccurate information, to request deletion, and to opt out of having your information sold or shared — we do not sell or share personal information as described in Section 6, so there is nothing to opt out of on that front. Residents of California, Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws have specific statutory rights along these lines; residents of the EU/UK have similar rights under the GDPR (including rectification, erasure, restriction, and portability) if applicable to you. We will not discriminate against you for exercising any of these rights. To exercise a right under this section, contact us as described in Section 12 — we may need to verify your identity before acting on a request.

10. Children's Privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us and we will delete it.

11. International Users

The Service is operated primarily for a U.S. audience, and the underlying DNC dataset is specific to U.S. calling compliance. If you access the Service from outside the United States, your information will be processed in the United States, which may have different data-protection laws than your home jurisdiction.

12. Contact / Exercising Your Rights

Questions about this Policy, or requests to exercise a privacy right described in Section 9, can be sent via our Contact page.

13. Changes to This Policy

We may update this Privacy Policy from time to time; material changes will be reflected by an updated "Last updated" date above.