Seldon Ventures, L.L.C., doing business as Endless Data ("Endless Data," "we," "us" or "our"), 131 Continental Dr Suite 305, Newark, DE 19713, United States, is a data broker. We collect, aggregate and license operational datasets about companies and other organizations, and we sell those datasets to customers such as AI research laboratories, model developers and enterprises.
This Privacy Policy explains how we collect, use, disclose and protect personal data in three contexts:
- Website visitors and customers — people who visit endless-data.com, request information, create an account, or buy our Data Products on behalf of their organization.
- Individuals who appear in our Data Products — people whose personal data (typically professional contact details or roles at a business) is contained in the operational company datasets we license to customers. You may be one of these individuals even if you have never interacted with us directly.
- Suppliers and partners — people at organizations that supply data to us or otherwise work with us.
We are the "controller" (or "business") of the personal data described here, as those terms are used under the EU and UK General Data Protection Regulation ("GDPR") and U.S. state privacy laws. Our customers decide how they use the Data Products once licensed and are separately responsible for that use.
This Policy should be read together with our Terms and Conditions and Cookie Policy.
1. Personal data we collect
From website visitors and customers
| Category | Examples |
|---|---|
| Identifiers and contact data | Name, work email, phone number, employer, job title, postal address |
| Account and commercial data | Username, hashed password, API keys, Order Forms, purchase history, billing contact, payment method details (processed by our payment provider; we do not store full card numbers) |
| Verification data | Information you provide so we can confirm your organization and intended use of the data, including compliance questionnaires |
| Communications | Emails, support tickets, meeting notes, sales calls |
| Technical and usage data | IP address, device and browser type, pages viewed, referring URL, API call logs, timestamps, approximate location derived from IP (see Cookie Policy) |
| Professional and employment data | Role, organization, LinkedIn or company profile URL, where provided to us |
In the Data Products we license
Our Data Products describe organizations, not consumers. They may nevertheless contain personal data about individuals acting in a professional capacity, such as:
| Category | Examples |
|---|---|
| Business contact information | Name, business email address, business phone number, job title, department, employer, work location |
| Professional and role data | Officer, director or registered-agent status, ownership or signatory role, public professional history |
| Public-record identifiers | Names appearing in corporate filings, licences, permits, court records, procurement awards, patents or regulatory disclosures |
| Operational data linked to a person | Attribution of a transaction, filing, shipment or other business event to a named individual at an organization |
We do not knowingly collect, and our Data Products are not designed to include, sensitive personal data such as government ID numbers, precise geolocation, health, biometric or genetic data, financial account numbers, racial or ethnic origin, religious beliefs, sexual orientation, or data about children. Where such data is incidentally present in a public record we obtain, we apply filters to remove it before licensing.
2. Where personal data comes from
- Directly from you — when you fill in a form, create an account, sign an Order Form, contact us or attend an event.
- Automatically — through cookies, server logs and similar technologies when you use our Site or APIs (see our Cookie Policy).
- Public sources — government and regulatory filings, corporate registries, company websites, press releases, procurement databases, court records, professional licensing bodies, patent and trademark offices, and other publicly available records.
- Commercial data partners — third-party data providers, aggregators and data contributors from whom we license or acquire datasets under contract, including contractual commitments that the data was lawfully collected.
- Our customers and partners — for example when a customer provides contact details for its own personnel, or a supplier provides details of its staff.
- Inference and processing — we derive data (for example, matching a name to a company, standardizing a job title, or deduplicating records) from the sources above.
3. How we use personal data and why
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Compile, clean, deduplicate, enrich and license Data Products to customers, including for AI model training | Data Product categories (Section 1) | Legitimate interests (operating a lawful B2B data business; customers' interest in accurate company data); public-record processing under applicable national law |
| Provide the Site, accounts, APIs and deliveries; process orders and payments | Identifiers, account and commercial data, technical data | Performance of a contract |
| Verify customer identity and intended use; screen against sanctions and export-control lists | Identifiers, verification data | Legal obligation; legitimate interests (preventing misuse) |
| Respond to enquiries, support requests and data subject requests | Contact data, communications | Legitimate interests; legal obligation |
| Send marketing about our Data Products to business contacts | Contact data, professional data | Legitimate interests (B2B marketing), with opt-out; consent where required by local law |
| Monitor, secure and improve the Site and APIs; detect fraud, abuse and unauthorized distribution (including watermark detection) | Technical and usage data, account data | Legitimate interests (security and IP protection) |
| Comply with law, respond to lawful requests, enforce our Terms, and defend legal claims | Any category as needed | Legal obligation; legitimate interests |
| Corporate transactions (financing, merger, sale) | Any category as needed | Legitimate interests |
Where we rely on legitimate interests, we have assessed that the processing is necessary for those interests and that they are not overridden by your interests or rights, taking into account that the data concerns professional, largely public-record information about business roles. You may object at any time (Section 6).
Automated decision-making. We do not make decisions about individuals that produce legal or similarly significant effects based solely on automated processing.
4. How we disclose and sell personal data
We sell personal data. As a data broker, our core business is licensing Data Products, which may contain the categories of personal data listed in Section 1, to customers for money. Under the CCPA and similar U.S. state laws this is a "sale" of personal information. We have sold the following categories in the preceding 12 months: identifiers (name, business email, business phone), professional or employment-related information, and public-record data linked to an individual. You may opt out of the sale of your personal data as described in Section 6.
Categories of recipients
| Recipient | What is disclosed | Why |
|---|---|---|
| Customers (AI research labs, model developers, enterprises, research institutions) | Data Product categories in Section 1 | Licensing of Data Products under written agreements restricting use, redistribution and re-identification |
| Service providers and processors (cloud hosting, data storage, payment processing, CRM, email, analytics, customer verification, security) | Categories necessary for the service | To operate our business on our behalf under contracts limiting their use of the data |
| Data partners and contributors | Matching keys or record identifiers | To reconcile, deduplicate and correct records |
| Professional advisers (lawyers, accountants, auditors, insurers) | As necessary | Professional services and compliance |
| Public authorities, regulators, courts, law enforcement | As required | Legal obligation, response to lawful requests, protection of rights |
| Successors in a merger, acquisition, financing or asset sale | Any category | Business continuity; the successor is bound by this Policy |
We do not sell or share personal data of individuals we know to be under 16. We do not license Data Products for use as consumer reports, for employment, credit, insurance, housing or similar eligibility decisions, or for targeting individuals with advertising. We do not "share" personal data for cross-context behavioral advertising, except as described for website cookies in our Cookie Policy.
5. How long we keep personal data
| Data | Retention period |
|---|---|
| Data Products (including personal data within them) | For as long as the record remains current and commercially relevant; records are reviewed on a rolling basis and stale records are refreshed or removed. Records suppressed following an opt-out or deletion request are kept only on a suppression list so they are not re-added. |
| Customer account and contract data | Duration of the relationship plus 7 years, for tax, audit and legal-claims purposes |
| Verification and sanctions-screening records | 5 years after the relationship ends |
| Marketing contact data | Until you opt out or 3 years after last meaningful interaction |
| Website and API logs | 13 months, unless needed longer for a security investigation |
| Data subject request records | 24 months from the request (CCPA record-keeping) |
We may retain data longer where required by law, to resolve disputes, or in anonymized form.
6. Your rights and choices
How to exercise your rights. Email hello@endless-data.com or write to the address above. We will need enough information to verify your identity and locate your records (typically your name, business email and employer). You may use an authorized agent; we may ask the agent for proof of your written permission and may verify your identity directly. We will not discriminate against you for exercising your rights.
Opt out of sale (all U.S. residents). Regardless of which state you live in, you may ask us to stop selling your personal data by using the methods above or the "Do Not Sell or Share My Personal Information" link on our Site. We honor Global Privacy Control signals from your browser for data collected through the Site. Once you opt out, we add your record to a suppression list so it is excluded from future Data Product deliveries and is not re-added from new sources.
Rights under U.S. state privacy laws. If you are a resident of California, Colorado, Connecticut, Delaware, Oregon, Texas, Virginia or another state with a comprehensive privacy law, you may have the right to:
- know whether we process your personal data and access it;
- receive a copy of your personal data in a portable format;
- correct inaccurate personal data;
- delete your personal data (subject to exceptions, for example where the data comes from public records or is needed for legal compliance);
- opt out of the sale of personal data, targeted advertising, and certain profiling;
- in California, know the categories of personal information we collected, sold or disclosed, the sources, the purposes, and the categories of recipients, and limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require this limit).
We will respond within 45 days (extendable by 45 days where reasonably necessary, with notice). If we deny your request, you may appeal by replying to our decision email or writing to hello@endless-data.com with "Appeal" in the subject line; we will respond within 45 days (60 days in some states). If your appeal is denied you may contact your state attorney general.
California residents: deletion through the Delete Request and Opt-out Platform (DROP). California residents may also submit a single deletion request through the California Privacy Protection Agency's DROP platform at privacy.ca.gov. As a registered data broker we check the platform at least every 45 days and process verifiable requests received through it.
Rights under GDPR / UK GDPR. If you are in the European Economic Area, United Kingdom or Switzerland, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. In particular, you may object at any time to processing based on legitimate interests, including the inclusion of your data in Data Products, and to direct marketing; on objection to direct marketing we stop without exception. We respond within one month, extendable by two months for complex requests. You may lodge a complaint with your local supervisory authority; in the UK this is the Information Commissioner's Office.
Transparency for individuals in our Data Products (GDPR Article 14). Because we obtain personal data from public and third-party sources rather than from you, this Policy serves as our notice to you of the source, purposes and recipients of that data. Providing individual notice to every person in a dataset of this scale would involve disproportionate effort; we therefore publish this Policy and make the request mechanisms above available.
Marketing. You can unsubscribe from marketing emails using the link in each message or by contacting us.
7. International transfers
We are based in the United States and store and process data there. Our customers and service providers may be located in the United States or other countries. Where we transfer personal data originating in the EEA, UK or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), together with supplementary measures where appropriate. You may request a copy of the relevant clauses by contacting us.
8. Security
We maintain administrative, technical and physical safeguards designed to protect personal data, including encryption in transit and at rest, access controls and logging, customer verification before data release, contractual restrictions on customers and processors, and watermarking of Data Products to detect unauthorized distribution. No system is completely secure; if we become aware of a breach affecting your personal data we will notify you and regulators as required by law.
9. Children
Our Site and Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal data from children, and our Data Products are not designed to include it. If you believe a child's data has been included, contact us and we will remove it.
10. Third-party sites
Our Site may link to third-party websites. Their privacy practices are their own, and this Policy does not apply to them.
11. Changes to this Policy
We may update this Policy from time to time. We will post the revised version with a new effective date and, for material changes, notify account holders by email or a notice on the Site. We review this Policy at least every 12 months.
12. Contact us
Privacy questions, requests and complaints:
- Email: hello@endless-data.com
- Post: Seldon Ventures, L.L.C. (Endless Data), Attn: Privacy, 131 Continental Dr Suite 305, Newark, DE 19713, United States