Security at NameToProfile
We treat your data and the data you process with care. Here's how.
Our practices
Encryption
Data is encrypted in transit (TLS) and at rest.
No data selling
We never sell personal data. Sub-processors are used solely to deliver the service, under contract.
Least privilege
Access to production data is restricted and logged.
Secrets stay server-side
API keys never reach the browser; the client holds only an httpOnly session cookie.
Session integrity
CSRF protection on mutating requests; session tokens are never exposed to client JavaScript.
Resilient by design
Validated inputs and graceful degradation keep the service stable under failure.
How we handle the data you process
Our tools are read-only and work from data you choose and public web sources. They read only what you point them at and return structured data — nothing runs in the background, we don't act on your behalf on any platform, and we never send connection requests, messages, comments or posts for you. Every output is text you review and use yourself.
Data is encrypted in transit (TLS) and at rest. The records you upload for batch processing or submit for resolution are used only to deliver the result back to you — never sold, and never shared except with the vetted sub-processors needed to run the service, under contract. Where AI assists (for example, ContactHarvest's optional verification), only the minimum needed — a short snippet and the page URL — is sent, and never full page HTML, cookies or form fields.
Your account and credentials
API keys never reach the browser — the dashboard holds only an httpOnly session cookie, mutating requests are CSRF-protected, and session tokens are never exposed to client JavaScript. You can rotate or revoke your API key at any time from your dashboard, which immediately invalidates it everywhere it was used.
Retention and deletion
Working data is short-lived by design: single-resolution history is kept briefly for your convenience and batch output files are available to download for a limited window before they expire. For account data, retention periods, your rights and how to request deletion, see our Privacy Policy, Data Processing Addendum and Acceptable Use Policy. Questions? Contact our team.