What happens to your inputs
Request metadata is the endpoint, time, status, duration and credit count shown on your dashboard. Finowl does not keep the inputs you send or the results it returns.
Your responsibilities
Tell users about the lookup
Tell users about the lookup
Email breach checks and gender predictions process personal data. Mention these lookups, and their purpose, in your privacy notice. Finowl intelligence may use vetted sub-processors; contact support@finowl.co if you need details for a data processing agreement.
Sanitize breach descriptions
Sanitize breach descriptions
The
Description field of each breach contains HTML. Render it as text or run it through an HTML sanitizer before putting it in a page.Treat predictions as estimates
Treat predictions as estimates
A gender prediction is a statistical estimate from a name, not a fact about a person. Do not use it for decisions that significantly affect people, such as eligibility, pricing or access. Let people state their own gender wherever it matters. See Reading predictions.
Keep passwords out of your logs
Keep passwords out of your logs
Finowl never stores passwords, but your own stack might. Make sure request bodies sent to
breaches/password are excluded from application logs, APM traces and error reports.