This notice explains how unbackoffice ("we", "us") handles personal data on Media Terminal: this website and the adverse media API at https://media.unbackoffice.com. Contact us by email at [email protected], or on WhatsApp at +35797439775.

1. People who are searched

A search uses the name you enter and, if you add them, a country, a date of birth and some context (for example a role or employer). To answer it we look up recent news and web coverage of that name, and keep the articles that are about the person and report possible wrongdoing.

• What happens to the details: we send the name, with search terms such as "fraud" or "sanctions", to news and web search providers (GDELT, Brave Search and DuckDuckGo). We then send the details and the headlines and snippets found to Anthropic, whose Claude model decides which articles are about the person and what they report.
• What we keep: the report: the details searched, the risk level, the categories and, for each adverse article, its headline, source, date, link and a short summary. We keep it for 12 months so the account that ran the search can reopen it, then delete it automatically. We keep a copy in memory for a few hours so the same search returns the same report.
• Sources: published news and web pages. We do not buy data about people and we do not search social media accounts or private sources.

Searches a business runs through its account or key, on its customers or counterparties: that business is the controller and needs its own lawful basis, usually a legal duty to carry out due diligence. We process the data for it, only to run the search. Ask that business about your rights first; we will help it answer. Searches before sign-in: we are the controller, on the basis of our legitimate interest in showing what the service does; we keep only what the page showed (the risk level and categories, no articles).

If you were searched and want to know what we hold or object to it, contact us by email at [email protected], or on WhatsApp at +35797439775.

2. Your account

When you sign in with Google we get and keep your name, work email address, Google account ID and your company's Google Workspace domain; when you signed in, your IP address and your browser's identifying string; your referral code and who signed up through your link (shown to you masked, for example j•••@acme.com); the invite code you signed up with, if any (we see which accounts joined with each code); your keys, stored only as a one-way hash, with how many searches each has used and has left; and any paid tier or searches we add for you, with the invoice reference.

Why: to run your account and keys, count searches, handle referrals and purchases, and prevent abuse. Legal basis: performing our agreement with you, and our legitimate interest in keeping the service secure and fair.

3. Searches before you sign in

We keep what you searched, what the page showed, the time, your IP address and your browser's identifying string, for 12 months. To enforce the daily limit we keep a one-way hash of your IP address for two days. Before your first search, Cloudflare Turnstile checks that you are a person.

4. How the site is used

To improve the site, we count page views and the steps people take on it (for example: searched, clicked sign-in, signed in, requested a tier), with the website you came from, your country (as reported by Cloudflare) and, once you are signed in, your account. Visits before sign-in are counted with a code made from your IP address and browser that changes every day and can't be turned back into either. We don't store your IP address for this, set no cookies for it and share it with no one. Legal basis: our legitimate interest in understanding and improving the service.

5. Who we share data with

We don't sell personal data, show ads, or use third-party analytics or tracking. We use these providers:

• Hetzner: hosts our servers and database in the European Union.
• Anthropic (USA): reads the coverage found for a search, as in section 1. Anthropic does not use this data to train its models.
• Brave Search (USA), DuckDuckGo (USA) and GDELT (USA): receive the name searched, with search terms, to find coverage. They never receive anything about you.
• Webshare (USA): a proxy service some of those lookups pass through. It sees the same search terms.
• Google: sign-in.
• Cloudflare (USA): protects the site and runs Turnstile. It receives your IP address and browser details.
• WhatsApp (Meta): only if you choose to message us there.
• Telegram: when you request a tier, we send your account email and company domain, the tier and the time to our sales team's private Telegram group, so we can follow up.

We may also disclose data where the law requires it, or to protect our rights or the safety of others.

6. Transfers outside Europe

Anthropic, Brave, DuckDuckGo, GDELT, Webshare, Google, Cloudflare, Meta and Telegram may process data outside the European Economic Area, including in the United States and the United Arab Emirates. Those transfers rely on the safeguards each provider offers under data protection law, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Cookies

We only use cookies needed to sign in, to count free searches and to make referrals work. There are no analytics or advertising cookies.

8. How long we keep data

• Search reports, and the IP address and browser details logged at sign-in: 12 months, then deleted automatically. Sooner if you ask.
• Account and key records: while your account exists.
• Hashed IP addresses used for the daily limit: 2 days.
• Usage statistics: 12 months.

9. Your rights

You can ask to see, correct, delete, restrict or move your data, and object to processing based on legitimate interests. This includes people who were searched. Contact us by email at [email protected], or on WhatsApp at +35797439775. We will reply within one month. You can also complain to your data protection authority.

10. Changes

We may update this notice. The date above shows the latest version.