Privacy policy
Last updated
This policy explains what Driven Success LLC collects when you use Directories, why we hold it, who else sees it, and how long it stays.
Who is responsible
Directories is run by Driven Success LLC, and Driven Success LLC decides how the information described here is used. To reach a person about anything on this page, write to [email protected].
What we collect
Four kinds of information.
- Your account: the name and email address you register with. If you sign in with Google we receive your Google account identifier and the email address on it, and never your password.
- Your subscription: the customer and subscription identifiers our payment provider gives us, stored encrypted. Card numbers stay with the payment provider.
- Your directory content: everything you type into a directory, including the businesses you list, their website addresses, categories, descriptions, and the email address of any business owner you invite to edit their own listing.
- Verification records: what happened each time we fetched a listed website, and every enforcement decision that followed.
We also keep ordinary server logs, which record the request, the response code, and how long it took. We collect nothing else.
Why we hold it
We use account information to sign you in, to show you your directories, and to email you about the service, including when a linkback breaks and your policy acts on it. We use subscription information to bill you and to know which plan limits apply. We use directory content to publish the directory and to run the checks it depends on. We use logs and verification records to keep the platform working and to answer the question of why a listing changed.
What the checker fetches
The checker is the part of the platform that visits the websites in a directory, so it is worth being exact about what it does.
- It fetches only the URLs an operator explicitly listed. It never follows links to find new pages, and it never crawls a site.
- It reads robots.txt first, and does not fetch a path that robots.txt disallows.
- DirectoriesBot — It identifies itself under this name in every request, so you can recognise it in your server logs.
- It opens one connection to a host at a time, gives up after fifteen seconds, and stops reading after five megabytes.
- It refuses to connect to private, loopback, or link-local addresses, both before the first request and again after every redirect.
- It records what happened, not what the page said: the URL requested, the URL it ended on, the HTTP status, how long the fetch took, how many links the page held, and, when it finds the linkback, that link's address, its anchor text, and its rel attribute. It does not keep a copy of the page.
If your website is listed in somebody's directory and you would rather the checker left it alone, disallow it in your robots.txt or write to [email protected].
Claimed business owners
A business you list can be invited to edit its own listing. That person gets a record of their own with us: the email address they sign in with, the listings they were granted, and the history of their claim. It is separate from the operator account that invited them.
Because it is separate, it can be deleted separately. Removing a business owner's record does not remove the listings they edited, and closing an operator's account does not leave a business owner's details stranded.
Who else sees it
We use three providers to run Directories, and each one sees only what it needs.
- Cloudflare serves and caches public directory pages and issues the TLS certificate for each custom domain. It sees visitors' requests to those pages.
- dodopayments is the merchant of record for subscriptions. It runs the checkout, holds card details, and issues invoices; it tells us only whether a subscription is active.
- Google is involved only if you choose to sign in with a Google account, and only to confirm who you are.
Beyond those three, we share information when the law requires it and not otherwise. We do not sell information about you, we do not pass it to advertising networks, and we do not profile the people who visit a directory.
Anything you publish in a directory is public by design. A listing is a page on the open web, so treat what is on it as published rather than confidential.
Where it is kept
Data is stored in a single region in the European Union. Traffic is encrypted in transit and the database is encrypted at rest. The values that would do the most damage if they leaked, such as claim verification tokens, business-owner sign-in links, and payment identifiers, are encrypted again by the application before they are written.
An account is a hard boundary. Every query is scoped to one account, and a request for another account's data comes back as not found rather than refused, so the existence of other accounts is never revealed.
How long we keep it
Different things are kept for different lengths of time.
- Check detail, the individual record of every fetch, for thirteen months. After that it is reduced to aggregates.
- Aggregated check history, which holds counts and rates but no individual URLs, indefinitely, so long-running verification trends survive.
- Enforcement events, the record of why a listing was flagged, demoted, or unpublished, for as long as the listing exists. They are the audit trail for a destructive action.
- Server logs for thirty days.
- Account data for ninety days after you cancel, so you can come back to it, and then we delete it.
If you ask us to delete your account sooner, we purge your directories, listings, and check history within thirty days.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. A business owner who was invited to edit a listing has the same rights over their own record, independently of the operator who invited them.
Write to [email protected] and we will answer within thirty days.
Cookies
This site sets one cookie that keeps you signed in and one that records your cookie choice. Public directory pages on customer domains set no cookies at all. Our cookie policy names every one of them and lets you change your choice.
Changes to this policy
We may change this policy. When we do, we update this page and move the date at the top of it. If a change materially affects how we handle your information, we will tell you at the address on your account.
Contact
Driven Success LLC is responsible for the information described here. Write to the address below with any question about this policy, or to exercise any of the rights above.