Privacy & data practices

What we do

OpenData is a business-to-business (B2B) database of ecommerce stores. We scan publicly accessible store websites and record factual, publicly visible information about those businesses — for example, which ecommerce platform and payment providers a store uses, which apps it has installed, and how the business can be contacted through addresses it publishes for that purpose. We sell access to this business information to companies that build apps, provide services, or process payments for online stores.

We do not collect data about consumers. We do not profile shoppers, track individuals across websites, or buy or sell lists of private individuals.

The data we collect

For each store, we may record:

• Store name and public website address (domain)
• Ecommerce platform, theme, and installed apps/plugins detected from publicly visible code
• Payment providers and other technologies publicly visible on the store's pages
• Business attributes the store itself publishes, such as country of operation, language, currency, and product categories
• Role-based business contact addresses only — generic mailboxes a business publishes for contact, such as sales@, info@, support@ or contact@
• The source where each item was observed and the date it was last verified

We deliberately exclude:

• Personal email addresses of named individuals
• Private phone numbers, home addresses, and other non-business contact details
• Any information behind a login, paywall, or other access control
• Data from markets that are outside the declared scope of this product
• Data about children or consumers in any form

Where the data comes from

All store data is collected by our own scanners from publicly accessible web pages and from public indexes of the web. We do not purchase store databases from third parties, and we do not copy competitors' databases. Every record keeps its provenance: the public source and the date it was observed. The verified records published today derive from archived public captures dated September 2026; each record is described by its last-verified date.

Legal basis (GDPR / UK GDPR)

Where the EU or UK GDPR applies, we process the limited business-contact information described above on the basis of legitimate interests (Article 6(1)(f)): helping B2B companies find and contact relevant businesses, in a way those businesses would reasonably expect given that they publish the information for business contact. We have balanced this interest against the rights of the businesses and individuals concerned: the data is business data, kept minimal (published business addresses only), and any business can have its record removed, permanently, at any time. Where another law gives you stronger rights, we honor those rights.

How we use the data

• To operate the database our customers search, filter, and export
• To keep records accurate (we re-scan stores on a recurring cycle and timestamp every record)
• To provide change alerts (e.g., a store adopting or dropping a technology)
• To enforce removals and our permanent suppression list

We do not sell the data to data brokers for consumer marketing, and our license terms prohibit customers from using it for consumer profiling or unlawful marketing.

Retention & your rights

• Store records are refreshed on a recurring cycle; a record that can no longer be verified against a public page is retired.
• Removal requests are honored within 48 hours; the removed domain is kept only on our permanent suppression list (domain + request date) so it is never re-added.
• Customer account data is kept while the account is active and deleted or anonymized after account closure, except where law requires longer retention.

If your business appears in our database, you may request access, correction, or removal at any time — see the Data Removal page. For any other privacy question, use the contact page.