Privacy Policy

Effective July 20, 2026 · PearFare LLC · legal@trypearfare.com

01Who we are and scope

PearFare LLC ("PearFare", "we", "us") is a Wisconsin, USA limited liability company. We run a batch data-extraction service. Clients upload pages they have already collected, or direct us to collect publicly accessible pages for them (Managed Collection), and we convert those pages into schema-validated JSON on GPU servers we own, at a single private facility in Wisconsin. We use no public-cloud compute.

This policy covers three properties and one service:

• trypearfare.com and app.trypearfare.com: static websites hosted on Cloudflare Pages.
• api.trypearfare.com: our batch API, authenticated by API key.
• The PearFare extraction service itself, governed also by our Terms of Service.

We handle information in three distinct contexts, and this policy keeps them separate throughout:

• Website visitors. People who browse our sites. We collect very little information in this context.
• Clients and account holders. Businesses that open an account and use the service. We collect the account and billing information described below.
• Client Data. The pages our clients upload for processing, and the JSON we extract from them. Those pages may contain personal information about other people. For that data we act only as a service provider on our client's instructions. Section 4 explains this in full.

Questions about anything in this policy go to legal@trypearfare.com.

02The short version

03Information we collect

The table below lists everything, grouped by the three contexts from Section 1. If a category is not listed here, we do not collect it.

04Client Data: our role as processor

Pages that clients upload, or direct us to collect, often contain personal information about people who are not our clients: names, titles, phone numbers, and similar details found in directories and public listings. For that information:

• The client is the controller. The client is responsible for having a lawful basis to collect and process the data, for giving any required notices to the individuals in it, and for responding to those individuals' privacy rights requests.
• We are the processor. We process Client Data solely to provide the service and to tune that client's own dedicated extractor, on the client's documented instructions. This includes pages we collect through Managed Collection: we collect them as your service provider, at your instruction, and you remain the controller for the personal information they contain. We never use one client's data for any other client or any other purpose, and we never use it to train models for any other party.
• We assist with individual rights. If someone contacts us about personal information contained in Client Data, we will refer them to the relevant client where we can, notify that client, and honor deletion through our retention system on the client's instruction. Our short retention windows mean most Client Data is already gone.
• Clients must supply data lawfully. By uploading pages, or by directing us to collect pages through Managed Collection, a client represents that the pages were collected lawfully or that its collection instructions are lawful, and that it has the right to have us process them. Our Terms of Service set out these obligations in full.

Managed Collection

Some clients direct us to collect publicly accessible pages for them instead of uploading pages themselves. Under Managed Collection the only thing that changes is who fetches the pages; every commitment in this policy applies the same way:

• We collect only as your processor. We collect pages only at the client's documented instruction, acting as the client's service provider and processor. We never collect pages for our own purposes, we choose no collection targets of our own, and we hold no independent interest in the personal information the pages contain.
• Collected pages become Client Data at the moment of collection. From that moment they carry the same use limits, the same protections, and the same retention schedule as uploaded pages, including the 14-day purge and the zero-retention option.
• The client is the controller of collected pages exactly as it is of uploaded ones. The client is responsible for the lawful basis for collection, for any notices owed to the individuals in the data, and for responding to those individuals' rights requests. The client warrants that its collection instructions are lawful.

05How we use information

We use information for these purposes and no others:

• Providing the service. Running batch extractions, performing Managed Collection at a client's documented instruction, delivering JSON output, and operating the API and client portal.
• Tuning your extractor. Client Data is used to tune that client's own dedicated extractor. It is never used to train or tune anything for any other party.
• Accounts and authentication. Verifying API keys and portal logins, and managing your account.
• Billing. Metering usage, issuing invoices, and processing payments through Stripe when payments are live.
• Communication. Answering support requests and sending service notices to the email on your account.
• Security and abuse prevention. Reviewing access logs and traffic metadata to keep the service safe.
• Legal compliance. Keeping the tax and accounting records the law requires, and responding to valid legal process as described in Section 6.

06How we share information

We share information only with the service providers below, each for a single narrow job, and in the limited circumstances described after the table: legal process and business transfers. We do not sell or rent information to anyone, and we do not share personal information for cross-context behavioral advertising, as the California Consumer Privacy Act defines selling and sharing.

GPU marketplace tenants and Client Data

We rent spare GPU capacity to third-party marketplace tenants. Tenants run only on hosts that are not processing Client Data, and they can never access Client Data. Client Data lives on encrypted volumes available only to the hosts doing client work; tenant hosts have no path to those volumes. Tenants are not a recipient of any information covered by this policy. See our Security page for how this isolation works.

Legal process

We disclose information in response to legal process only when we are required to. When a demand covers a client's data, we notify that client before disclosing, unless the law prohibits notice. We push back on requests that are overbroad and disclose only what the process compels.

Business transfers

If PearFare is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, information we hold may be transferred to the successor as part of that transaction, including during due diligence under confidentiality obligations. Any successor takes the information subject to this policy as it applied when the information was collected. Client Data remains subject to the retention limits in Section 8 and to our contracts with clients, including any data-processing addendum, and a transfer does not enlarge how Client Data may be used. If a transaction leads to material changes to this policy, we will provide notice as described in Section 14.

07What we never do

• We never sell personal information, and we never have.
• We never share personal information for cross-context behavioral advertising, as the California Consumer Privacy Act defines that sharing.
• We run no advertising, no ad networks, and no ad tech of any kind.
• We never give or sell data to data brokers.
• We never use one client's data to train or tune models for any other party. Client Data is used only to tune the extractor of the client that supplied it or directed its collection.
• We run no analytics or trackers on our websites. The only cookies that can appear are the portal's strictly necessary sign-in cookie and security cookies set by Cloudflare, and none of them track you across sites.

The statements in this section are binding commitments.

08Retention and deletion

• Client Data, standard: purged 14 days after we deliver your results. The window exists so you can verify output and request re-runs.
• Client Data, zero-retention option: purged immediately on delivery confirmation. Choose this for your account if you do not want a verification window.
• Account and billing data: kept for the life of the account. After closure, we keep only the records we are required to retain for tax and accounting, then delete them.
• Access logs: kept about 90 days, then deleted.
• Correspondence: kept as long as needed to handle the matter and to keep a record that we did, then deleted.
• Payment card data: never stored by us. Stripe holds it under its own retention rules.

You can request deletion of your account data at any time by emailing legal@trypearfare.com. Deletion of Client Data flows through the retention system above, and clients can instruct earlier deletion of any batch. Purging is final: once Client Data is purged, we cannot restore or retrieve it.

09Security

Processing happens on GPU servers we own, at a single private facility in Wisconsin, and runs continuously. We use no public-cloud compute. Client Data sits on encrypted volumes available only to the hosts doing client work; GPU marketplace tenants run only on separate hosts that never process Client Data and have no access to those volumes. The API requires key authentication, connections to our sites and API use HTTPS, and passwords are stored only as hashes.

No security measure is perfect. We describe our controls in detail, including the isolation model for rented GPU time, on our Security page.

10Your rights and choices

If you are in the United States, we honor these rights for the account, billing, visitor, and correspondence information we control, regardless of which state you live in. Some state privacy laws apply only to businesses above certain size thresholds; we do not condition these rights on whether a given law technically applies to us. For personal information inside pages a client submitted or directed us to collect, the client controls that data. Section 4 explains our role, and on request we will pass your inquiry to the relevant client and confirm to you that we have done so.

• Access: ask what information we hold about you.
• Correction: ask us to fix inaccurate information.
• Deletion: ask us to delete your information, subject to records we must keep for tax and accounting.
• Portability: ask for a copy of your information in a usable format.

How to exercise them

Email legal@trypearfare.com. We verify requests with reasonable steps: usually by asking you to write from the email address on your account, or by asking for enough information to match you to our records. We never ask for more than we need to verify you, and we use the information you provide for verification only for that purpose. An authorized agent may submit a request for you if the agent provides your written permission; we may still verify your identity with you directly.

We confirm receipt of a request within 10 business days and respond within 30 days of receiving it. If a request is unusually complex, we may take up to 30 additional days, and we will tell you within the first 30 days why we need the extension. We will not discriminate against you for exercising any right. If we decline a request, we will tell you why, and you can ask us to reconsider.

Because our retention windows are short, the data a request concerns may already be gone. If it has been deleted under Section 8, we will tell you so. Purged data cannot be recovered, so a deletion request for it is already satisfied, and an access or portability request for it will return nothing.

If your request concerns personal information inside Client Data, the client that supplied it or directed its collection is the controller. We will refer you to that client where we can and notify them, as described in Section 4.

Global Privacy Control and Do Not Track

Global Privacy Control is a browser signal that tells businesses not to sell or share your data. Because we do not sell or share data or track visitors, the signal does not change how we handle a visit. Visits with GPC enabled are treated the same as all other visits and are not tracked. We treat Do Not Track signals the same way.

11Data breach notification

Wisconsin's breach notification statute, Wis. Stat. § 134.98, requires an entity to make reasonable efforts to notify each affected person within a reasonable time, not to exceed 45 days after the entity learns that personal information has been acquired by someone unauthorized to have it. Notice may be delayed at the request of law enforcement, and if a single incident affects 1,000 or more people, the statute also requires notice to the nationwide consumer reporting agencies. We will comply with this statute, and with other breach notification laws that apply to the incident.

We also commit to more than the statute requires. If we confirm a security incident affecting your Client Data or your account information, we will notify you without unreasonable delay and no later than 72 hours after confirmation. We will tell you what happened, what data was involved, and what we are doing about it. The statute excuses individual notice where the acquisition creates no material risk of identity theft or fraud. Even in that case, we will still tell affected clients.

12Children

PearFare is a business-to-business service. Our sites and service are not directed to children, and you must be at least 18 to open an account. We do not knowingly collect personal information from anyone under 18. If you believe we have, email legal@trypearfare.com and we will delete it.

13International use

All processing happens in the United States, at our single Wisconsin facility and with the US service providers listed in Section 6. We have no establishment in the EU or UK. If you access the service from outside the United States, your information will be transferred to and processed in the United States.

Any client that needs a data-processing addendum, including EU or UK clients, can request one by email at legal@trypearfare.com.

14Changes to this policy

When we change this policy, we will post the new version at this page and update the effective date at the top. If a change is material, we will email account holders before it takes effect. We will never change this policy to permit selling personal information or to weaken the Client Data commitments in Section 4 retroactively.

15Contact

PearFare LLC, Wisconsin, USA.

Email legal@trypearfare.com for privacy questions, rights requests, data-processing addendum requests, or anything else in this policy. For support and everything operational, email pilot@trypearfare.com. Our Terms of Service and Security page cover the rest.