Legal

Privacy Policy

Last updated: August 18, 2026

This Privacy Policy explains how Granularity, Inc. (“Granularity,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with our identity resolution platform, websites, and related services (collectively, the “Services”). It also describes the privacy rights and choices available to individuals who reside in the United States.

Granularity operates an identity graph. Our customers (businesses) install our tracking technology on their own websites so that visitors to those websites can be recognized and, where permitted, associated with business or consumer contact and firmographic information. This Policy covers both the people who use Granularity as a customer and the website visitors whose information may be processed through the Services.

1. Information We Collect

Information about website visitors (identity graph data)

When our tracking technology is active on a customer’s website, we and our data partners may collect or infer:

Online and device identifiers — IP address, browser and device fingerprint, user-agent, and cookie or local-storage identifiers.
Approximate location — city/region/country derived from IP geolocation.
Business (B2B) attributes — company name, industry, size, and role information associated with an organization or IP.
Consumer (B2C) and contact attributes — name, business or personal email, postal address, and, where the customer has enabled the phone-match add-on, telephone number, obtained through our enrichment partners.
Activity data — pages visited, referring URLs, and timestamps on the customer’s website.

Information about customers and account users

Account information — name, email, password (hashed), organization name, and role.
Billing information — subscription plan and payment status. Payments are processed by our payment provider; we do not store full card numbers.
Usage information — log data, feature usage, and support communications.

2. Sources of Information

We collect information (a) directly from customers and account users; (b) automatically from visitors’ browsers and devices via our tracking technology deployed on customer websites; and (c) from third-party data providers and enrichment partners that supply business and consumer identity attributes.

3. How We Use Information

To provide identity resolution — recognizing visitors and matching them to business or consumer records so customers can identify leads.
To operate, maintain, secure, and improve the Services.
To process subscriptions, prevent fraud and abuse, and enforce our Terms.
To communicate with customers about their account and provide support.
To comply with legal obligations and respond to lawful requests.

4. How We Disclose Information

To the customer whose website generated the data. Resolved visitor identities are made available to the customer operating the website on which the data was collected.
To service providers that host, process, or support the Services under contract.
To data and enrichment partners in order to match and append identity attributes.
For legal reasons — to comply with law, protect our rights, or respond to legal process.
In a business transfer — in connection with a merger, acquisition, or sale of assets.

Because our Services match online identifiers to contact and firmographic data and make that data available to customers, some of our processing may be considered a “sale” or “sharing” of personal information under certain U.S. state privacy laws. See our U.S. State Privacy Rights & Do Not Sell or Share Notice.

5. Permitted Uses and Prohibited Uses

The data available through the Services is not a consumer report and may not be used to determine eligibility for credit, employment, insurance, housing, or any other purpose covered by the federal Fair Credit Reporting Act (FCRA) or similar laws. Customers agree to the restrictions in our Acceptable Use Policy.

6. Your Privacy Choices

Depending on where you live, you may have rights to access, delete, correct, and obtain a copy of your personal information, and to opt out of the “sale” or “sharing” of your personal information and targeted advertising. We honor browser-based opt-out preference signals such as the Global Privacy Control (GPC). To learn how to exercise these rights, see our U.S. State Privacy Rights & Do Not Sell or Share Notice, or email [email protected].

7. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes, after which it is deleted or de-identified. Retention periods vary based on the type of data and the purpose for which it was collected.

8. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from individuals under 16 years of age.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, through additional notice.

11. Contact Us

Questions about this Policy or our privacy practices may be directed to [email protected], or by mail to Granularity, Inc., [insert registered business mailing address].