Privacy Policy

Last updated: 13 July 2026

This policy explains what personal information we handle, why, and what you can do about it. It covers two very different groups of people, and we treat them differently: our customers (the people who sign up and use Govarova) and business contacts in our database (people whose professional contact details appear in our B2B data, usually without them ever having heard of us). If you are in the second group, section 8 is the one you want.

1. Who we are

Govarova is a trading name of Randoye LLC, a limited liability company registered in Wyoming, United States. We are the controller of the personal information described in this policy.

Randoye LLC, a Wyoming limited liability company, trading as Govarova.
30 N Gould St, Ste 5275
Sheridan, WY 82801
United States
legal@govarova.com

We are a fully remote company. The address above is our registered address for legal correspondence; we do not operate a public office and cannot receive visitors.

2. What we collect

From customers: the name, work email, company, and billing details you give us when you create an account; the content you put into the product (your lists, campaigns, and templates); and technical data such as IP address, browser, and pages visited.

From business contacts: professional contact information — name, work email address, job title, employer, professional social profiles, and publicly listed business phone numbers. This is business-context data. We do not knowingly collect special category data, and we do not want it: no health, biometric, political, religious, or sexual-orientation data, and no data about children.

From the free tools: nothing. The 109 tools at /free-tools run entirely in your browser. What you paste into them is not transmitted to us and is not stored.

3. Where the data comes from

We do not invent contact data. It is obtained from: publicly accessible web pages and company websites; public professional profiles; public business registries and newly registered domain records; information customers voluntarily upload for enrichment or verification; and licensed third-party data providers who warrant that they collected it lawfully.

4. How we use it

To provide and operate the platform; to authenticate and support you; to bill you; to verify and enrich records at customer request; to detect fraud and abuse; to comply with law; and — with your consent or where permitted — to send you product and marketing email, which you can stop at any time.

5. Our legal basis (EU, UK, Switzerland, EEA)

Where the GDPR or UK GDPR applies, we rely on:

Contract — to give you the service you signed up for.
Legitimate interests — to operate, secure, and improve the platform, and to process B2B contact data for business-to-business marketing purposes. We have balanced this against the rights of the individuals concerned; that assessment is available on request.
Consent — for non-essential cookies and, where required, for marketing email. You can withdraw consent at any time.
Legal obligation — where we are required to retain or disclose information.

See our GDPR notice for the full picture, including transfers out of the EEA.

With sub-processors who run parts of the service for us — hosting, email delivery, payments, analytics, and support tooling. They act on our instructions and are bound by contract. The current list is at /legal/subprocessors.

We also disclose information where we are legally required to, and to a buyer in the event of a merger or acquisition (in which case this policy travels with the data).

7. Do we sell personal information?

This is the question that matters most, so we will answer it plainly.

We do not sell our customers' personal information, and we never sell the data you upload into the platform. That is yours.

However: under the broad definitions in the CCPA/CPRA and the other US state privacy laws, our provision of B2B contact data to customers for valuable consideration may constitute a "sale" or a "share". We would rather over-disclose than hide behind a narrow reading. If you are a US resident and you want to opt out of that, you can do so at any time, with no account and no identity verification: Do Not Sell or Share My Personal Information.

We do not knowingly sell or share the personal information of anyone under 16.

8. If you are in our B2B database and did not sign up

You have the same rights as everyone else, and you do not need an account to use them. You can ask us what we hold about you, correct it, or have it deleted, and we will do it.

Remove me: email legal@govarova.com from the address you want removed, or use the opt-out form. No account, no verification hoops.
Stop the email: every message a Govarova customer sends through our platform carries a working unsubscribe link. Using it stops that customer contacting you. To be removed from our database entirely, use the option above.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to our processing of your personal information, and to opt out of its sale, sharing, or use for targeted advertising or profiling. See GDPR (EU/UK/Switzerland/EEA) and CCPA & VCDPA (US states) for how to exercise them, or just email us. We will not discriminate against you for exercising a right.

10. How long we keep it

Customer account data: for as long as the account is open, and up to 24 months afterwards, unless a longer period is legally required (tax records, for example). Uploaded lists: until you delete them or close the account. B2B contact records: while they remain accurate and useful, reviewed periodically; suppression records — the fact that you asked to be removed — are kept indefinitely, because that is the only way to make sure you are not re-added.

11. Cookies

See the Cookie Policy. In short: essential cookies always; analytics and marketing cookies only with your consent, which you can change at any time.

12. Security

Encryption in transit, access controls, and least-privilege internal access. See Security. No system is perfectly secure, and we will not pretend otherwise; if a breach affects you we will notify you and the relevant regulator within the time the law requires.

13. Changes to this policy

If we make a material change we will update the date at the top and, for customers, notify you by email before it takes effect. Continuing to use the service after that means you accept the updated policy.

14. How to reach us

Privacy questions and data requests: legal@govarova.com.