Privacy policy | Inquire

Introduction

Inquire is an OSINT research platform for authorized subscribers. We provide tools that query publicly available information, breach corpora already in circulation, and consented third-party intelligence sources. This policy explains how we handle account data, what we do not do, and how GDPR and similar laws apply.

Lawful use — we do not break the law

Inquire is designed for legitimate research, security investigations, journalism, and compliance workflows. We do not offer hacking services, unauthorized access to private systems, malware distribution, doxxing-as-a-service, or tools intended to facilitate criminal activity.

No exploitation of vulnerabilities or credential stuffing against live services
No interception of private communications or illegal surveillance
No sale of stolen credentials as a product offering
No assistance with fraud, harassment, stalking, or identity theft

You must only use Inquire for lawful purposes in your jurisdiction. You are responsible for ensuring you have a legitimate interest or other legal basis to query a given identifier. Misuse may result in immediate termination without refund and, where required, cooperation with lawful authorities.

GDPR & data protection

Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we act as a controller for your account data (email, profile, billing metadata, usage logs). Search queries you submit may contain personal data of third parties; you act as an independent controller for those queries and must have a lawful basis to process them.

Lawful basis (account)

Contract (Art. 6(1)(b)) and legitimate interest for security/abuse prevention (Art. 6(1)(f))

Your role (queries)

You determine purpose & legal basis for OSINT lookups you run

International transfers

Hosting and providers may process data in EU / US with appropriate safeguards

DPO / inquiries

Contact support — we respond to access, erasure, and rectification requests

Data collected

Account

Email, password hash, name, username, plan, API key, language, optional OAuth IDs

Queries

Search terms, timestamps, user identifier, module used

Technical

IP address, user-agent, device binding, request logs

Payments

Email, plan, payment processor references (we do not store full card numbers)

How we use data

Provide and maintain the Service (console, API, Telegram bot)
Authenticate sessions (email/password or OAuth) and enforce plan limits
Process subscriptions and send transactional email
Prevent abuse, fraud, and unauthorized access
Respond to support requests and legal obligations

Third parties

Search queries are transmitted to external OSINT providers as required to fulfill requests. We do not control third-party retention policies. Payment processing is handled by NOWPayments / crypto rails. Email delivery uses our configured SMTP provider.

Retention

Account data

Duration of subscription + reasonable grace period

Search logs

Up to 90 days (unless required longer for abuse/legal)

Deletion

Available on request via support, subject to legal holds

Sharing

We do not sell personal information. Data may be shared only:

With OSINT providers to execute searches you initiate
With payment processors to complete purchases
When required by law or valid legal process
To protect the Service, users, and public safety

Security

Passwords are stored as salted PBKDF2 hashes. Sessions use HTTP-only cookies. API keys for REST automation are separate from console login and can be rotated. See the full Security page for controls and incident response.

Your rights

Depending on your jurisdiction you may request access, rectification, erasure, restriction, portability, or objection. You also have the right to lodge a complaint with a supervisory authority (e.g. an EU DPA). Details: GDPR.

Contact

Privacy & GDPR inquiries: Contact, Telegram @spyharver_help, or Data remover.