Privacy
Escendo is a website visitor identification service. Our customers install a first-party script on their own websites. This page describes what that script collects, what we do with it, and how to stop it.
Pending counsel
Effective date, legal entity name, and jurisdiction of incorporation.
This website
We run Escendo on escendo.co itself. If you are reading this, the script described below is running on this page, and everything here applies to your visit as much as to anyone else’s.
Concretely: we record the pages you view, how long you spend on them, where you arrived from, and any UTM parameters. Your IP address is used briefly to look up the company you may be visiting from and, for United States visitors only, to match you to business contact information from a third-party provider. The IP address itself is never stored. We do not record what you type, your keystrokes, or the contents of any form.
You can stop this at any time at escendo.co/optout, or by enabling Global Privacy Control in your browser, which we honour automatically and before any lookup is paid for.
What we process
For every visitor to a customer’s site, in every country, we record the pages viewed, time on page, referrer and UTM parameters, clicks on named calls to action, and whether a named form was started or abandoned.
We do not read form field values. We do not record keystrokes. There is no session replay and no heatmap. Query parameters that look like contact details are stripped in the browser before transmission, and again on our server.
A visitor’s IP address is used transiently to look up an organisation and, for a filtered subset of visits, a person. It is never written to storage and never logged.
Person-level identification runs only for visitors in the United States. Visitors in the EU, the UK, Canada, and any visitor whose country cannot be determined, are organisation-level only. Where we identify a person, we may process their name, job title, employer and business email address, obtained from a third-party data provider.
Our role
We act as a service provider and processor, on the documented instructions of the customer whose website you visited. That customer decides why the data is collected. We make no independent use of it.
Customers must tell their visitors
Every customer that installs Escendo must publish a notice in their own website’s privacy policy saying that they use Escendo, what is collected and how to opt out, and keep it published for as long as our tag is on their site. We give them the wording when they set up. This is a condition of using Escendo.
Publishing that notice, and having a lawful basis to collect data on their own website, is the customer’s responsibility. Escendo is not responsible for a customer’s failure to publish it or to keep it accurate.
Data is never pooled
Data collected for one customer is never combined with another customer’s data, never used to build a shared identity graph, and never resold. Isolation is enforced in our database, not only by policy.
Retention
Raw IP addresses are never retained. Behavioural records are retained for as long as the customer’s account is active, and are deleted when their account is terminated.
Pending counsel
A specific retention period, rather than “while the account is active”, if counsel advises one is required.
Sub-processors
- Cloudflare, for edge delivery and request processing
- Supabase, for database hosting
- Resend, for email notifications to our customers
Pending counsel
The identity data supplier, named once selected. LEGAL.md §5 requires the supplier agreement to be signed before this page is published.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we honour it automatically. Your visit is still counted as first-party analytics for the site you are on, but we attempt no identification and contact no data provider. You can enable it at globalprivacycontrol.org.
Opting out
You can opt out permanently at escendo.co/optout. Opting out applies across every site that uses Escendo. We keep only what is needed to keep honouring it, and it is never surfaced to a customer.
Your rights
You may request access to, correction of, or deletion of personal information we hold about you. Because we act on our customers’ behalf, we may need to refer your request to the operator of the site you visited, and we will tell you when we do.
Pending counsel
The specific rights language for CCPA/CPRA, and the response windows and verification procedure counsel requires.
Contact
Pending counsel
A real postal address, which several statutes require, and confirmation that privacy@escendo.co is a monitored inbox.