If a Report Names You

1. What this page is

You are most likely reading this because we emailed you to ask whether we may produce a report about you, and this page is linked from that email. A report about a named individual will not be produced unless the person it is about is the buyer, or has told us in their own words that they agree. Section 5 sets out that gate, what we do if you say no, and what we do if you say nothing.

This page tells you what we read, what we never read, what we write, who sees it, how long we keep it, and how to make us stop.

1.1 Why it is a public page as well as an email. It is also the notice the law requires when a company holds information about a person that it did not collect from that person. Publishing it means anyone named in a report can reach it, including in the case at 3.4 where no consent email is sent, and it means you can read it before you decide anything. So this page is open to search engines, sits behind no account, no payment and no barrier of any kind, and is linked from the footer of every page of this site and from our Privacy Policy. From the first report onwards it will also be linked from the footer of every report we generate, from every view of a report through a share link, and from the foot of every page of any file exported from a report, so that a person named in one can reach it from the document itself rather than having to know we exist. On every page rather than once at the front, because a single page can be forwarded on its own and whoever ends up holding it needs a way back to us. If a link to this page is broken, tell us at [email protected]: we will fix it and tell you when.

1.2 The state of the product, and how to read every verb on this page. The website exists. The rest does not: there is no checkout, no report has ever been produced or sold, and no consent request has ever been sent. This notice describes the service as it will run from the effective date at the top of the page, and it binds us from that date and not before. So a sentence written in the present tense here is a commitment about how the service will run once it runs, not a claim that it is running today, and nothing on this page should be read as evidence that any part of it has been built. Where the page says "will", it is marking something that must exist before the first report is produced. We say it in these words because a notice that borrowed the present tense for a system nobody has built is the first thing a complainant takes apart, and because you are entitled to know which of the promises below we have already had to keep and which are still ahead of us.

1.3 Nothing here needs an account, a payment, a form or particular words.

``

2. Who we are, and how to reach us

The company responsible for the information described here, and the company you can bring a complaint against, is:

LeMans Labs OÜ, a private limited company (osaühing) registered in the Republic of Estonia
Commercial Register code 16872044
Registered address: Valukoja 8/1, 11415 Tallinn, Estonia

2.1 We decide what is collected about you and why, so the responsibility is ours. The buyer decides none of it and cannot instruct us about you. Ask us, not them.

2.2 One address, and what happens if it fails. Write to [email protected] about anything in this notice. It will be monitored, routed to a named person accountable for answering it, and acknowledged. A message counts as received on the day it arrives, including outside working hours and at a weekend. If it ever bounces, or you get no acknowledgement within two working days, write to [email protected] and say so: every period in this notice still runs from the date of your first message, not the second.

2.3 Formal notices. Legal notices, including service of documents, may be sent to [email protected] and to the registered address above. We publish no separate legal-notice page: our provider details appear at the head of the Terms of Service and in section 1 of the Privacy Policy, and they are the same details set out here.

2.4 We are established in Estonia and nowhere else, and we answer requests from anyone, anywhere, on the same timescales.

3. What we do, in plain terms

We sell three written reports: one about a company, one about a named individual (the Founder X-Ray), and one that is both. A buyer types in a name and a link; automated systems search, fetch publicly available pages, and produce a written analysis with a score. Where the subject is a named individual, section 5 has to be satisfied before any of that starts.

3.1 Nobody here reads a report before it is delivered. The first person to read a finished report is usually the buyer.

3.2 This is profiling, and we call it that. A report evaluates personal aspects of you – how your professional work is described in public – and expresses part of the result as a number and a band. That is profiling whether or not anybody acts on it, and this is where you are told so.

3.2.1 What we do with the result. Nothing. We produce a document, deliver it to the one buyer who ordered it, and destroy it on the schedule in section 7. We take no decision about you, rank you against nobody, keep no score history about you, and sell no product that turns a score into an outcome about a person.

3.2.2 What a buyer might do, and what stands against it. A score, a band and a set of ranked recommendations is shaped like a decision even when it is not one. Our contract will therefore prohibit using a report to make or inform a decision about anybody's employment, engagement, promotion, credit, insurance, tenancy or housing, or passing it to anyone else for those purposes, and before paying a buyer will have to confirm that separately, in wording we store with their order. That confirmation is a record of what a buyer told us, not a guarantee of what they do, so it is not the only thing in the way.

The prohibition is printed on every page of a report about an individual and on every page of any file exported from it, not once at the front, because a page travels on its own and the person reading it is often not the person who bought it. A report about an individual reaches anyone else only through a link the buyer creates for a named recipient: we send that link ourselves, the recipient proves they hold the address it was issued to before the first view, every view is served and recorded by us, and we can stop all of them from the next request.

What we will not claim is a licence standing between you and your own document. A report about a named individual is sold to the person it is about, so the decision to show it is that person's own, and 6.2 says where that stops. Against a screening decision taken by somebody they showed it to, what stands is the sentence printed on every page telling that reader the report must not be used to decide anything about a person. That is weaker than a control, and we would rather say so than describe one we do not have. We do not market this product for those uses and name none of them as an occasion to buy. If you tell us a report about you was used for one of those decisions, we withdraw it, end that buyer's licence, decline to sell to them again, and tell you what we did.

3.2.3 What a report is not. It is not a background check and not a consumer report. We query no criminal record, no court record, no credit file, no licensing register, no sanctions or watch list and no identity verification service; we verify nobody's identity and never claim to have done so; and we read nothing behind a login. That is a list you can check rather than a label we have given ourselves.

3.2.4 The consequence we foresee. How the number is produced is at 5.11 and the rubric is public. The consequence we foresee, and the reason this notice exists, is that somebody forms a view of you from a document you were never shown. Section 5 exists so that, for a report about an individual, you see it coming.

3.3 Minors. We will not knowingly produce a report about a person under 18, at any price, for any buyer, for any reason. We do not verify age, and we would rather say so than imply a check we do not run. Three things stand behind the undertaking, none of them proof: a buyer must confirm separately that the subject is 18 or over; under section 5 a report about somebody else starts only after that person replies; and a Founder X-Ray will be refused where the public record cannot place the subject in adulthood. The order of those three matters, and we set it out because it is the kind of thing that otherwise goes wrong quietly. Where the report is about somebody other than the buyer, the check against the public record runs after you have replied and before anything is written, never before we have asked you: reading about a person in order to work out whether we may read about them would be the intrusion this section exists to prevent. Where the check refuses the report, nothing is produced and the buyer is refunded in full and told only that the report cannot be produced. If you tell us a report names someone under 18 we suppress it from the buyer the same day, asking you for no proof, not asking who you are and without argument, and we confirm that we have. Every share link ever created for it stops working in the same action. Where the report had already been exported to a file we tell you so, and how many times and when; we require the buyer in writing, that same day, to delete every copy, to tell anyone they gave one to, and to confirm to us that they have; and we tell you whether they did. We cannot reach that file ourselves, and we will not tell you that we have. We then delete the report and its evidence, unless we are holding that material for a live complaint, rights request or claim, in which case we keep only what section 7 allows, disclose it to nobody, and delete it when the matter ends. Suppression is immediate in every case; only deletion ever waits, and only for that reason. If you are that person, write to us yourself and we treat your message the same way.

3.4 When a report about a business is a report about you. If you trade as a sole trader, a named partnership or a one-person company, a report about "the business" is a report about you, and this page applies whichever product was bought. It is also the one case where no consent email is sent: the gate in section 5 attaches to the Founder X-Ray, and a Company X-Ray is bought about a legal person. Where we detect that a company report's subject is in substance an individual, we apply the individual rules to it: no assistant queries about you by name, no special-category material retained, and the same correction, objection and do-not-report routes.

``

3.5 Where we sell. Everywhere. There is no country we exclude, and no product we offer in fewer places than the others. None of that touches your rights, which do not depend on where a buyer is.

4. What we hold about you, and where it came from

4.1 What the buyer gave us. Your name as they typed it, a profile or website link, a short line such as a role, company or location, and – where the report is about somebody other than the buyer – an email address for you, so that we can ask you. A buyer may add up to 600 characters of their own notes. Our rule is that this text is never quoted, never cited as a source, never shown on a shared view and never served with the report data. It only steers what we look for.

4.2 What we retrieve. Search results for your name; pages we fetch and the readable text taken from them; news and long-form coverage; professional profiles and reference entries. Each item is stored with its address, the time we retrieved it and a fingerprint of what it said, so every statement traces back to its source.

4.3 What we write. Findings, each with a tone label and a confidence label; six dimension values from 0 to 100 with a note for each; a headline score and a band; and a short verdict. That is ours. We wrote it about you.

4.4 The distinction that governs this page. A report holds two kinds of statement: records of what others already published about your professional work, and our own assessment, which includes every score. If we recorded someone else's publication wrongly, we correct our record. If our own assessment is wrong, we change it or take it out. We do not dress the second up as the first. Section 13 says what happens in each case.

4.5 What we do not collect. We do not sign in to anything, we use nobody's account, we do not read private or restricted profiles, we do not defeat a paywall, and we buy personal data from no data broker. Those are exclusions applied at the moment material is collected, so excluded material never becomes evidence and is never stored.

4.6 What we retrieve and then throw away, said honestly. Searching your name returns what it returns, and we cannot decide in advance what a page will contain. So we do not promise that material outside your public professional record never reaches our systems. What we promise is what happens to it. Material revealing health, political opinions, religion, trade union membership, sex life, sexual orientation, race, ethnicity or biometric data, and material about your private life, your temperament or litigation you are involved in, will be discarded at the point of retrieval, before anything is written to evidence storage: it never becomes evidence, never reaches a report and never reaches a log. We keep a count of how often that happens and never the content. That is a prohibition rather than a permission we rely on, because no lawful basis for handling such material would be open to a product like ours.

``

``

5. Why a report about you can exist at all

5.1 The gate. A Founder X-Ray is produced in one situation only: the buyer is the person the report is about. At checkout the buyer confirms, as a separate unticked statement stored with the order, that the subject of the report is themselves and that they consent to the report about themselves. A report about somebody else is not offered, at any price, on any route. If the record we then read shows the subject is plainly not the buyer, the report is not produced and the order is refunded.

Amended 9 August 2026 by the founder's decision. The earlier text offered a second route - a report about somebody else, produced after that person confirmed by email - and clauses 5.2 to 5.5 specify that route's machinery. The route is withdrawn, not deleted: the clauses below are retained struck through in effect, the built machinery is dormant, and reintroducing the route requires counsel's confirmation on the open ePrivacy question they record.

5.2 Why a buyer's word is not enough. A buyer warrants to us that they have your permission, and answers to us if that is untrue. That is between us and them: it is invisible to you, and permission given to somebody else is not something we can demonstrate. So the warranty sits on top of asking you, never instead of it.

5.3 What we will send you, and what it will say. An email naming who asked for the report and the organisation they gave; what the report is and what it reads; what it will not read; how long it lasts; who is allowed to see it; that we will not produce it unless you reply; and a link to this page. Nothing is produced, and nothing about you beyond 4.1 is retrieved, before you reply.

5.4 Saying no, and saying nothing. You do not have to reply, you do not have to give a reason, and refusing costs you nothing. If you do not confirm within [Confirmation window – seven days as drafted, set before launch], the order is cancelled and the buyer is refunded in full, automatically, without you or the buyer having to ask. The buyer is told the report cannot be produced. We do not tell them whether you refused or simply did not reply, because that distinction is information about you. If you would rather settle it permanently than order by order, section 12 is the route.

5.5 What we hold before you answer, and what happens to it. To ask you we have to hold what the buyer typed, including your email address. We use it to ask you and for nothing else: no marketing, no list, no other product. If you refuse or do not reply, that material is deleted at the end of the window in 5.4. Two things are kept past that point and we name both rather than let you find them: the record that an order was cancelled, and a marker that lets us refuse the same buyer if they immediately re-order about you. That marker holds no readable name or address, it is never used to produce anything, it is disclosed to no buyer, and it is deleted six months after the window closes. It is listed at 7.3(i) with everything else that outlives a report.

``

5.6 The three situations, and what we rely on in each.

Asking you in the first place, which means holding your name and address for the length of the window in 5.4, rests on our legitimate interest in obtaining your decision rather than proceeding without it.

``

5.7 The weighing, for the one case that needs it. Where we rely on legitimate interests we have to weigh our interest against yours. In our favour: only professional material that you or a publisher already made public; no special category of material sought, and any that reaches us discarded before it is stored; no private accounts, no credentials, no paywall circumvention, no data brokers; no publication by us, and a contractual bar on publication, posting, supply to the press and public quotation by the buyer; delivery to the buyer who ordered it, for the audience 6.2 describes and nobody wider, which for a company report is the buyer's own people and the buyer's own professional advisers under a duty of confidence; the retention ceilings in 5.12 and section 7, which bind everything we hold; evidence behind every finding; and working routes to correct a report, to stop one and to prevent the next.

Against us: you did not choose to be assessed; a score attached to a name can be repeated out of context; a thin public record is more likely to be characterised on weak evidence; more than one buyer may order a report about you, and each order is weighed on its own rather than treated as settled by the first; the audience for a delivered report is wider than one person; and, since the export was released, the buyer can take a copy of the document out of our systems altogether.

That last one is heavier than the rest and we are not going to bury it. Everywhere else on this page a file leaving our systems is a person moving their own document, because a report about a named individual is sold only to its subject. Here it is not. You did not buy this report, you agreed to nothing, and a file we cannot recall is a worse thing to weigh than a screen we can switch off. There is no refusal in the product for this case: the file and the link are available for a company report whichever way 3.4 falls, and we say so here rather than let this page imply a protection we have not built. What we can do when you object is in 6.4, and section 11 is how to make us do it. The release of the export is itself one of the changes that requires the assessment in 5.8 to be redone rather than reread.

5.8 The assessment itself. That weighing is written down and dated, and it exists before the first report about a named individual is produced rather than after somebody asks. It is reviewed at least once a year and whenever anything it relied on changes, and the date it was last reviewed is on it. We will send you a written summary if you ask: what our interest is, what we weighed on your side, the limits we relied on, the conclusion we reached, and the date it was last reviewed. We do not send the document itself, because it also carries internal engineering and commercial material about people other than you, but the summary states every factor that bears on you and we will answer questions about it. A supervisory authority or a court that asks for the document gets the document.

5.9 What the score is not. Not a valuation, not a prediction, not a ranking, not a judgement of quality, not a reputation rating. It reads how legible and consistent your public professional record is, not how good you are, and scores produced under different rubrics cannot be compared. This description is not written one way for you and another for a buyer: the same words appear on the product pages, at /intelligence-score, in the AI Transparency notice and in every report immediately above the number. If you have seen us describe the score as more than this, tell us at [email protected]: one of those surfaces is wrong and we will correct it.

5.10 What is scored, and what the Reputation dimension actually reads. Six dimensions describe how the public record presents your professional work: how much of it there is, how consistent it is across sources, how recent it is, and how the sources that discuss it characterise it. One of the six is called Reputation. It is not a popularity measure and it records nobody's approval of you; it reads the tone of published coverage of your professional work, including critical coverage, and it reads lower where criticism sits high in results unanswered, where sentiment splits sharply by source, or where the most recent substantial coverage is old. We say so because the published rubric says so, and you can check. Your politics, your personal life, your health, your temperament and litigation you are involved in are not inputs and cannot become inputs. The full definition of every dimension, with what raises it and what lowers it, is published at /intelligence-score; where that page and this paragraph differ, that page governs and this paragraph is the defect.

``

5.11 The logic, in full. Six dimensions. Each dimension is five criteria drawn from the published "raises" and "lowers" text for that dimension. A language model judges each criterion on a five-point scale, and a fixed table converts each judgement to points, so five criteria give that dimension a value from 0 to 100. The headline is the plain unweighted average of the six dimension values, rounded once: no weighting, no curve, and no model is asked for the headline. The six values are printed in the report, so the headline can be checked by hand from the document itself. The rubric, the criteria and the points table are published at /intelligence-score and in the AI Transparency notice.

5.11.1 What is not reproducible. The arithmetic above is. The judgement underneath it is not: two runs over the same material can produce different criterion judgements and so different dimension values. We have not measured how often that happens and we publish no figure for it, because a number we could not stand behind would be worth less than saying so.

5.12 The limits that carry the weight, with their real ceilings. Public professional record only. Not published by us. Delivered to the buyer who ordered it, and beyond them only to a recipient the buyer names a link for, inside the audience 6.2 describes and nobody wider. And a bounded life, with a ceiling on everything we hold: the report, the evidence behind it and the files we generate from it are destroyed 90 days after the report is ready; every share link dies with the report, and sooner if it is revoked; the internal logs of the automated calls that produced it, which contain your name, are destroyed at 180 days; backups roll off within a further 35 days. Section 7 lists every class that outlives the 90 days.

One thing has no ceiling, and it belongs here rather than in a retention schedule you would have to go and find. A buyer can export the report to a file, and once that file is on their machine no period on this page reaches it. 6.4 says what that means and what we do instead.

Nothing about you is kept indefinitely except an entry you asked for under section 12, and no period is extended without publishing the change first.

6. Who sees a report

6.1 A report a buyer orders goes to that buyer. We do not publish it, do not index it, do not list it, do not place it in a directory and do not sell it on.

6.1.1 The one exception, named here rather than left for you to find. Demonstration reports are published at /samples and are open to search engines. They exist to show the format and the rubric, and every number in them was written to demonstrate the layout rather than to measure anything. If you are named in one you need none of the rights in the rest of this notice and you need give no reason: write to [email protected] and we remove it the same working day, without argument.

[GATE CLOSED 30 July 2026: this asked that every sample naming a real individual be replaced with a fictional subject before this page is published, because while one was live 6.1 could not be published in its absolute form. It has been done (ADR-050) – the person sample is an invented founder of an invented company. 6.1 therefore stands absolute, and 6.1.1 is kept not because a real person is named in a sample but because it costs nothing and it is the clause that catches the mistake if one ever is.]

6.2 Who a buyer may show it to, and it turns on whose report it is. There are two answers. They are written in the same words in clause 8.3 of the Terms of Service, clause 5.4 of the Acceptable Use Policy, clause 8.7 of the Intellectual Property notice and clause 4.6 of the Privacy Policy, because four different answers to the most common question after a sale is not a nuance, it is a defect.

A report about the buyer themselves is that person's own document about their own public record, and a report about a named individual is sold no other way (5.1). They may show it to whoever they judge fit, their investors and their board included. We do not stand between a person and information about themselves, and a licence pretending to do so would not survive the first argument about it.

A report about a company stays inside a narrow circle: the buyer's own people who need it for the buyer's own decision, and the buyer's own professional advisers, each under a duty of confidence and on the same restrictions that bind the buyer. It may not be published, posted, supplied to the press or quoted in public, credited or not. It may not be resold, syndicated or built into any product, dataset or service. Where 3.4 makes such a report, in substance, a report about you, that narrow circle is what protects you, and the licence also forbids showing it to your employer, your colleagues, your counterparties, your customers, your family or your associates, or to a company you are involved in, its board or its other shareholders. You did not choose to have that report written, and the audience for it is not the buyer's to widen.

One limit runs across both answers, and it is about use rather than audience: no report may be used to make or inform a decision about anybody's employment, engagement, promotion, credit, insurance, tenancy or housing, whoever is reading it and however they came by it. Widening who may read a self-report does not widen what any of them may do with it.

In every case the buyer may show the report to you. The buyer must withdraw and destroy it on our written request, and we can end the licence without getting a file back. This paragraph describes section 8 of the Terms of Service rather than summarising it; the two are written to say the same thing, and if you find that they do not, tell us at [email protected] – that is a defect for us to fix rather than an ambiguity for anyone to trade on. Nothing in a contract with a buyer widens what may be done with a report about a person who is not that buyer.

6.3 A report about a person can be exported and shared, and this is how far that goes. A buyer can export a report to a PDF file and can create a link that lets a named recipient read it. Both are new, and this clause replaces an earlier one that said neither would ever exist.

Who is doing the sharing decides most of it, so it comes first. A Founder X-Ray or an Executive Package is sold in one situation only: the buyer is the person the report is about, and confirms it at checkout in a separate box that starts unticked (5.1). So where a report about a named individual is exported or shared, the person doing it is that individual, with their own document. Where a company report turns out under 3.4 to be about a person who did not buy it, the file and the link are available to the buyer in the same way. That person is not our counterparty and has agreed to nothing, so the weighing in 5.7 is what has to carry it, and we would rather write that down than let you assume a refusal we have not built.

Permission to create a link is asked for at the moment a link is created, separately from anything the buyer agreed to at checkout, and it can be withdrawn.

What a link is, and who can open it. The buyer names one recipient and gives us their address, and we send the link – not the buyer, which is why we need the address at all. Before that recipient sees anything we email a code to that same address and they enter it, the same check the buyer signs in with. So the first view is by somebody who holds the address the link was issued to, and every view after it is served by us and checked at the moment it is asked for. There is no address in our storage that anyone can reach directly, so there is nothing that keeps working on its own. Every view is recorded. A link cannot outlive the 90-day window in 5.12 and usually dies sooner. Revoking a report extinguishes every link ever issued for it, from the next request, wherever that link has got to, with no cooperation needed from the buyer or the holder. There is no anonymous forwardable link, and there will not be one.

A link does not widen the audience. 6.2 says who may read a report and the answer does not change with the route it travelled: for a report about the buyer themselves the audience is theirs to choose, and for a company report, including one that 3.4 makes a report about you, it is the narrow circle 6.2 names.

Every page of an exported file, and every view through a link, carries the report version, the time it was generated, a confidentiality legend, the sentence prohibiting use for screening a person, and a link to this page. On every page, because a single page can be forwarded on its own, and whoever is holding it should be able to tell what it is, how old it is, and how to reach us.

One sentence about the limit of all this, and it belongs here rather than three clauses later. We can extinguish a link because we serve every view through it ourselves; we cannot reach a file that has already been exported, and killing the link does not bring that file back or change a word of it. 6.4 says what we do instead.

6.4 What our actions reach, and what they do not. When we suppress a statement, correct a report, delete it, or end a buyer's access because you asked us to, two things happen at once and without anybody's help. The report itself changes or goes. And every link ever created for it changes or stops, from the next request, because every view through a link is served by us and checked at the moment it is asked for. We can state that flatly because it is how the link is built, not a claim about how carefully a buyer behaves.

A file the buyer exported before we acted is a different thing, and we would rather you read it here than discover it later. Once that file is on their machine it is beyond us. We cannot change it, cannot expire it, cannot count the copies of it and cannot see where it has been sent. No period on this page reaches it, and no action of ours reaches it.

We will not tell you that we destroyed it. A company that wrote that it had recalled every copy would be reporting the one thing nobody can check, and it would be the sentence read back to us afterwards.

What we do instead, and every item is something we can actually perform. The buyer's licence to that file ends at the moment we act, so from that moment holding it breaks their contract with us. We require them in writing to delete every copy they control, to pass the same notice to everyone they gave one to, and to tell us they have done it. We tell you whether they confirmed. We tell you, from our own records, how many times the report was exported and on what dates, so that you know the size of what is outside rather than having to guess at it. And we tell you how many share links were issued, when each was issued and when each was used; the recipients' names are information about other people, and 14.1 says how we weigh them.

The older gap has not closed either: a buyer can read a report on screen and write down, screenshot or retype what it says. Their licence forbids the disclosures that would matter and requires them to destroy such copies when the licence ends, and we will enforce it. We cannot see that they made one.

``

7. How long we keep it

7.1 A report is available to its buyer for 90 days. Then it expires, and the material behind it – the pages we fetched, the text taken from them and the files generated from it – is deleted. The separate internal logs of the automated calls that produced it are kept for the period in 7.3 and are not part of the report.

7.2 Your own record with us, being your name, the link and the short context line, is deleted 90 days after the last report referring to it. If a second buyer orders a report about you, that record is reused and its life restarts from their report – and, where that buyer is not you, the consent step in section 5 runs again, so a second report is a second decision for you rather than a consequence of the first.

7.3 Everything that outlives the 90 days, listed rather than buried.

(a) The sale and accounting record, kept because tax and accounting law requires it. The copy of the buyer's brief held with that record contains your name; it will be redacted automatically when the report expires or is deleted, whichever comes first, whether or not anybody asks, so that from that moment the accounting record does not identify you.

(b) Internal logs of the automated calls made while producing a report, which contain your name, kept 180 days rather than 90.

(c) Our record of emails sent about a report, including any consent request sent to you, kept 2 years, with your name removed when the report expires or is deleted. Where no report was ever produced, because you refused or did not reply, your name is removed from that record at the end of the window in 5.4 instead, so that declining does not leave you in our email log for two years.

(d) Records that a report was delivered, opened and exported to a file, and that a share link was created, issued, confirmed by its recipient, followed or revoked, kept for as long as the payment for that report can still be reversed. They record that something happened and when, and each export is its own separate event, so a count of exports is something we hold rather than something we estimate. What this class does not hold is a recipient's name or address: those live with the report and are deleted with it, so that a record of who read about you does not quietly outlive the report it was about. Clauses 6.4, 11.6, 13.1 and 14.1 are the reason these exist for you as well as for us.

(e) The record of any request you make to us and what we did about it, kept 3 years.

(f) Your entry on the list in section 12, for as long as you want it to stand.

(g) Backups, which roll off within 35 days, so a deletion propagates as they expire rather than instantly.

(h) Material relevant to a live complaint, rights request or claim, until the matter ends. Holding it for that reason discloses nothing to anyone, including the person complaining.

(i) The re-order marker described in 5.5, where you were asked under section 5 and refused or did not reply, kept 6 months from the close of that window and then deleted.

The full schedule, class by class, is at /legal/data-retention, and that schedule governs if this section and it ever differ.

7.4 The periods above reach everything we hold, and every share link with it. They do not reach a file a buyer exported while the report was live: that file is not ours to delete, and no schedule of ours governs it. It sits outside our sight and inside their licence obligations, together with anything they transcribed or screenshotted; 6.4 is the honest statement of that and sets out what we do instead.

7.5 If this business is sold, whoever takes it on is bound by the commitments on this page, or the information is deleted first.

``

``

8. Who else handles your information, and where

8.1 We use service providers to run the product: web hosting; the database; object storage; job orchestration; a model router and the providers it routes to; a search provider, which receives your name as a query; email delivery, which handles the consent request sent to you; product analytics; error monitoring; and a payment processor, which handles the buyer's details rather than yours.

8.2 What we do not do with your name. For a report about a named individual we do not ask AI assistants about you by name, and no answer an assistant gives about you is retrieved, stored or scored. Your name still reaches a search provider as a query, and reaches the model providers that read the retrieved text and write the findings. That is the whole of where it goes.

8.3 Several of those providers are outside the European Economic Area. The list, with what each handles, where it runs and the safeguard relied on for each transfer, is at /legal/subprocessors, and it carries the date its rows were last checked. The rule is that the page changes before a new company receives anything about you. There is one exception: where a provider fails or is suspended part-way through work already in progress we may substitute another first, and we then publish the change, with its date and reason, within five working days. We will not produce a report about a named individual while the companies serving our model calls are chosen dynamically, because a recipient we cannot name is a recipient we cannot list, and a list that omits a recipient is not a list.

8.4 Your information is not sold, and goes to nobody who is not on that list.

8.5 Model training, stated at its weakest, because that is what we can support. We train no models of our own, on anything, and we sell nothing we collect. What happens to material we send a provider is governed by that provider's terms. Before the first report about a named individual is produced we will pin the permitted providers by name rather than accept whichever a router selects, execute an agreement with each, and route only to providers whose terms exclude our traffic from training, enforced by an automated check. Until that pin and that check exist we make no claim that what we send about you is excluded from training, because a promise nobody can verify is not worth reading. Where any other page of ours says that what we send is never shared with a third party or never used to train a model, that statement is wrong and this paragraph governs.

8.6 If something goes wrong. If information about you is exposed we will tell the Estonian supervisory authority, and the people affected where the law requires it. Where we hold an address for you, because you were asked under section 5 or wrote to us, we write to you. Where we hold none, we publish a notice on this site rather than go and find your address in order to send one.

``

9. Your rights

You can ask to see what we hold about you, to have it corrected, deleted or its use restricted while something is sorted out, to object to us processing it at all, and to complain to a regulator. Where we hold something because you agreed to it, you can withdraw that agreement at any time, and withdrawing is as easy as giving it was. Withdrawal and objection have their own section, because they do the most work.

9.1 No account, no fee, no particular form of words. Write to [email protected].

9.2 Send three things and nothing more: your name as it appears, the profile link if you know it, and what you want us to do. Do not send an identity document unless we ask.

9.3 One set of clocks, and they are the shortest we publish anywhere. We acknowledge within one business day of your message arriving. We answer within one month of receipt; if a request is genuinely complex we may take up to two further months, and we will tell you why before the first month is up. Inside that month these are the periods we hold ourselves to, and you are entitled to hold us to them: a statement about you that you tell us is wrong is suppressed within three business days (13.1); production of any report about you stops immediately on a withdrawal or an objection, and the deletion is completed, the buyer told and the outcome confirmed to you within fourteen days (11.3); a correction, an erasure or a restriction is completed within fourteen days; and the reasoned outcome of a re-examination reaches you within twenty-one days (13.5). Where any other page of ours states a different period for the same thing, the shorter period is the one that binds us.

9.4 Every period runs from the day your message arrives, not from the day we finish checking who you are.

9.5 If we refuse any part of a request we say which part, why, and what you can do about it.

``

10. How we check it is you

We have to be sure we are giving your information to you and not to somebody pretending to be you. We also do not want to demand a passport from a person exercising a right against a company they never chose to deal with.

10.1 The straightforward route. We accept a reply sent from an address we can see belongs to you personally, including the address a consent request was sent to; a change you make to the profile the report was bound to that we can see and that only the person controlling that profile could make; or a message from an address that already appears as yours in the sources a report used. We do not treat control of a shared or role mailbox as proof that you are the person named, because a colleague, an administrator or a former employer may control it, and we will not hand your information to them. Where the only route available to you is a shared address, we say so and ask for one further ordinary confirmation, chosen to be easy for you and hard for anyone else.

10.2 We ask for an identity document only where we genuinely cannot tell, and we say why. Declining to send one is not treated as a failure to prove who you are, and we look for another proportionate route.

10.3 We ask for no more than the request needs, and anything sent to prove identity is used for that and then deleted.

10.4 We will not create an account for you and will never require you to make one.

10.5 We disclose nothing, and correct, suppress or delete nothing, on the instruction of somebody who has not satisfied us that they are you or are authorised by you. That rule runs in both directions, and it is why 10.1 is drawn as narrowly as it is.

11. Withdrawing, and objecting

11.1 If you withdraw or object, we stop. Where we hold something because you agreed to it, you can withdraw at any time, for any reason or none, and it costs you nothing. Agreeing took one reply to one email; withdrawing takes one message to [email protected], in whatever words you like, and we will not ask you for anything the confirmation did not ask you for. Where we rely on legitimate interests you can object, and we do not run the compelling-grounds argument the law would let us try. On either, we stop any report about you that is in production, remove any report about you from our systems, extinguish every share link ever created for it, end the buyer's licence both to the report and to any file they exported from it, and record you on the list in section 12 so that no further report about you is produced. Ending a licence is not the same as reaching a file, and 6.4 says which of those we can do, which we cannot, and what we do about the one we cannot. Where your message asks us both to stop and to erase, we treat both as made and neither waits on the other. None of that waits on our establishing who you are.

11.1.1 What does not vanish at that moment, and you should hear it from us rather than find it later: any file the buyer exported before we acted, which is the item that matters most and which 6.4 sets out in full; backups, which roll off within 35 days; the classes in 7.3 that exist for tax, for our own logs and for the record of your request; and, where you have made a complaint or a claim, the material relevant to it. The exported file is in that list for a different reason from the rest. The rest is ours, and none of it is used to produce a report about you or disclosed to any buyer. The file is not ours at all, and it is named here because it exists, not because we keep it.

11.1.2 Our other documents say the same. We reserve no override against a report subject's withdrawal or objection anywhere. If you find a page of ours that reads otherwise, this paragraph governs and that page is the defect.

11.2 We do not treat a purchase as a reason to override you. A buyer's entitlement to the product they paid for is our own commercial interest wearing somebody else's name, and it is not a ground for continuing against you. Our contract with the buyer expressly lets us withdraw a delivered report and end the licence without their agreement, so acting on you breaches nothing we owe them. What it costs us is a question between us and them, and it is not a reason we will ever put to you.

11.3 Timing. We acknowledge within one business day. Production stops immediately. We complete the deletion, tell the buyer and confirm to you within fourteen days.

11.4 What the buyer is told. That a withdrawal or an objection was received, that the report is withdrawn, that every link they created for it has stopped working, and that their licence has ended, taking with it any licence to a file they exported. That they must stop using the report, delete every copy they control including that file, tell everyone they gave a copy to that it has been withdrawn, and confirm to us that they have done it. We do not pass on your correspondence and we do not tell them what you said. We tell you whether they confirmed.

11.5 What the buyer gets back is not your problem. Whether a buyer is refunded when a report is withdrawn is governed by the Refund Policy and is between us and them. It is settled after you have been acted on, never before, and it is never a reason to delay stopping, deleting or suppressing. We keep the two apart deliberately: a promise to move money on an unverified email would be an invitation to people who are not you, and what you are owed is the stopping.

11.6 What we can tell you, and what we cannot. We record, for every report, when it was delivered, each time it was opened, each time it was exported to a file, and each share link created, issued, confirmed by its recipient, followed or revoked. From that record we tell you honestly who reached the report about you and when: how many times it was exported and on what dates, how many links were issued and when, and when each of them was used.

A recipient's name we treat as 14.1 treats the buyer's, because it is information about another person and the same weighing applies. While the report is alive we hold that name and can give it to you on that basis; once the report is deleted the name goes with it and only the events and their dates remain, which is what 7.3(d) keeps.

What we cannot tell you is what became of an exported file: whether it still exists, whether it was deleted, or where it went. Nor can we tell you whether a buyer copied something out by hand while reading. We can give you the size of what is outside our reach. We cannot give you its location, and we will not pretend to.

``

``

12. Asking us not to produce a report about you

You do not have to wait until somebody asks you.

12.1 Write and ask, and we add you to that list. From the first sale, the check against it runs when a buyer submits a brief, before a payment session is opened and before any consent request is sent to you, and again at each stage of production. A request that matches is refused before anything is produced and before anything is charged. If a match is made only after a payment has been taken, the order is cancelled, nothing is produced, and the buyer is refunded in full: that is our fallback, not our design. The would-be buyer is told the report cannot be produced, and is not told why.

12.2 We do not publish that list and do not confirm to anyone else that a particular person is on it, including in reply to a question that looks harmless. Confirming that somebody had themselves excluded would itself disclose something about them, and the protection only works if it cannot be probed. We will confirm to you, once satisfied it is you, that we have acted.

12.3 The honest limit. Matching works on your name together with a strong identifier such as a profile address, and it is not perfect. If a report about you appears anyway, tell us: we treat it as an objection under section 11 and find out why the match failed.

12.4 Being on that list means we produce nothing about you and send you no consent request. It does not oblige us to tell you that somebody asked.

``

13. Correcting something that is wrong

Because a report holds two kinds of statement there are three possible answers, and we would rather set them out now than improvise when you write. 13.4a adds a fourth route for the score itself.

This route is printed on the report, not only here. Whoever is reading it – the buyer, someone reading through a share link, someone holding a file exported months ago – can see from the document that any assessment in it can be contested and re-examined by a person, and how to reach us to do it. A route that lives only on a legal page is a route the reader of the document never finds, and once a file has left our systems it is the one thing about that file we can still influence.

13.1 Suppress first, then examine. Where you tell us a statement about you as an individual is wrong, our default is to suppress it from the report while we re-examine it. Suppression reaches the report and every view through every share link, from the next request after we act, because we serve each of those views ourselves. It does not reach a file exported before you wrote to us. Where the report had been exported we tell you so when we confirm the suppression, with the number of exports and their dates; we require the buyer in writing to delete every copy, to pass the same notice to anyone they gave one to, and to confirm to us; and we tell you whether they did. We do not ask you first whether the statement is unfavourable and we do not weigh how damaging it is before we act, because deciding that for you is not our job and doing it slowly is the outcome we would be least able to defend. Suppression takes effect within three business days of your message. It is not an admission that the statement is wrong, and it is not evidence that you are. We tell the buyer that a statement has been suppressed pending review, that this is not a defect in what they bought and does not reduce it, and that whatever they are owed if a report does not match what we described to them is unaffected. Anything we owe a buyer about the size or contents of a report is measured at delivery, before any suppression under this clause, so that nothing we owe them can ever be a reason to leave a disputed statement about you in front of a reader.

13.2 We got it wrong. If the evidence does not support what we wrote, we remove or amend it, regenerate the report, and tell the buyer a correction was applied.

13.3 We recorded someone else's publication accurately, and your dispute is with them. If a named publisher said something and we recorded that they said it, our record is right even if theirs is not. We record your position alongside it and mark the statement disputed. We will not quietly rewrite the public record, and we will not pretend the dispute does not exist. Where such a statement is seriously damaging and you tell us it is false, 13.1 still applies while we look.

13.4 We find no error. We explain why, show you the evidence it rests on, and tell you about objecting under section 11 and complaining under section 15.

13.4a Disputing the score itself, and not only a statement. The three answers above are about statements. You can also dispute an assessment: the verdict, the band, the headline number, or any one of the six dimension values. Write in the same way, to the same address, on the same clocks in 13.5. A person re-examines it and tells you in writing what they concluded and why.

What that person can move, and what they cannot, is worth knowing before you write. The arithmetic does not move: the headline is the plain average of the six printed values (5.11), it is published, and you can check it by hand from the document. What moves is the judgement underneath a value – whether the evidence cited actually supports the criterion it was scored against. Where it does not, the value is corrected and the report is regenerated. Where the re-examination leaves the value where it was, your position is recorded against that value, so that a later reader sees the number and your disagreement with it in the same place.

Clause 7.4 of the Report Accuracy notice sets out the same route from the other side. This route is printed on the report itself, which is the point of it: somebody holding a file exported months ago can find it without first finding this page.

13.5 Timing. Acknowledged within one business day. Suppressed under 13.1 within three business days. Re-examined within fourteen days. Outcome within twenty-one. These are the periods in 9.3, and where the Report Accuracy notice or the Privacy Policy states a different one, the shorter applies to you.

13.6 A correction reaches the report itself and every view through every share link, from the next request. What it cannot reach is a file exported before the correction, or a note or screenshot made before it. Every report, and every page of every exported file, carries a report version and the time it was generated, so a superseded copy can be recognised as superseded on its own face, page by page, however far a page has travelled. We tell the buyer, and their licence requires them to stop using the superseded version, to delete the copies they control, to tell anyone they gave one to, and to confirm to us.

``

14. What we will not tell you, and why

Two refusals and one thing we may be unable to answer. All three are deliberate, and all three read as stonewalling unless explained.

14.1 We do not normally name the buyer. For a report you were asked about under section 5 the question rarely arises, because the request we sent you named who asked. Otherwise the buyer's identity is information about another person, and we treat it as confidential to them. We will tell you everything a report says about you, what sources it used, when it was produced, how long it lasts, each time it was opened, each time it was exported to a file and on what date, how many share links were issued for it, when each was issued and when each was used.

The names of the people those links were issued to are a separate question, and we will not pretend it is an easy one. A link recipient is another human being, usually somebody who has never heard of us, and their name is information about them in exactly the way the buyer's name is information about the buyer. So we weigh it the same way rather than handing it over because it happens to be easy for us: the counts and the dates you get whenever you ask, and a name we give where a court or a supervisory authority orders it, where that recipient agrees, or where we are satisfied both that you cannot exercise or defend a legal right without it and that your interest in having it outweighs theirs. We hold those names only while the report itself is alive, so ask early; after that the events and dates in 7.3(d) are what remains. If we refuse a name we tell you in writing, we tell you why, and we tell you that you may put the question to the authority in section 15 or to a court.

We will name the buyer where a court or a supervisory authority orders it, where the buyer agrees, or where we are satisfied both that you cannot exercise or defend a legal right without it and that your interest in having it outweighs theirs. If we refuse we tell you in writing, we tell you why, and we tell you that you may put the question to the authority in section 15 or to a court. We do not refuse on the ground that naming buyers would be bad for our business; 11.2 says why we do not run that argument.

14.2 An unauthenticated question gets the same answer whether or not a report existed. If somebody who has not shown us they are you asks whether a report about you was produced, we answer identically in both cases. If those two questions got different answers, the question itself would become a way to find out whether a named person had been reported on, turning our complaints route into a lookup service. That control protects far more people than it frustrates.

14.2.1 It does not apply to you once we know it is you. Where you have satisfied us under section 10 that you are the person named, we answer properly: whether we hold anything about you, and where a report about you was produced and has since been deleted, that it existed, when it was produced, when it was deleted and what was deleted. This is a control against strangers. It is never a reason to refuse you.

14.3 After 90 days the report is gone; the sale is not. The report, the pages behind it, the text taken from them and the files generated from it are deleted, and we will usually hold nothing that lets us reconstruct what a report said. What survives is listed in 7.3: the tax and accounting record, our email and access records, the record of any request you made, and your entry on the list in section 12. Those can still show that an order naming you was placed, and when, and we will tell you that much once we are satisfied it is you. What we will not be able to do is show you the findings or the evidence under them. That limitation used to cut against us at least as hard as against you, because after 90 days neither side could produce the document a complaint would turn on. Since the export was released it no longer does, and the change is in nobody's favour: a buyer who exported the report can still produce it, we cannot, and the only surviving copy may sit with the party least likely to produce it. We are still the side that has to answer for it. What we hold instead is the record in 7.3(d) – that the report existed, when, how often and on what dates it was exported, and how many links were issued and when each was used – and we give you all of it once we are satisfied it is you.

14.4 None of this reduces your right to complain to a regulator or to go to court, and we will say so at the time.

``

15. Complaining to a regulator

15.1 You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia, aki.ee. It supervises us because we are established in Estonia and have no other establishment.

15.2 You can also complain to the data protection authority where you live or work, or where you think the problem happened.

15.3 You do not have to come to us first, though we would rather you did, and doing so uses up no deadline. You can also take the matter to a court.

``

16. What our customer contract does not do to your rights

16.1 Nothing in our contract with a buyer limits or affects your rights.

16.2 Our terms of service contain limits on what we owe a buyer, a choice of Estonian law and a choice of forum. Those are between us and them. You are not a party to that contract and you are not bound by it: no limit, exclusion, cap, indemnity, choice of law or choice of forum in it applies to a claim you bring against us, and we will not argue otherwise. We say this rather than leave it to be inferred, because a document written for buyers should not be allowed to look as though it binds people who never saw it. This paragraph is about that contract and nothing else. It is not an admission that you have a claim, and it does not affect the ordinary defences available to us in one, including what we actually published, to whom it went, and what part of any loss was caused by what somebody else did with a report.

16.3 To raise something formally, write to [email protected], or to LeMans Labs OÜ at the registered address in section 2, which is also the address for service of documents.

``

---

This notice is part of the LeMans Labs legal set and should be read together with the Privacy Policy, the Data Retention notice, the Sub-processor list, the Report Accuracy notice, the Acceptable Use Policy, the AI Transparency notice, the Refund Policy and the Terms of Service, which carries our provider details and the address for formal notices. There is no separate legal-notice page: everything such a page would carry is in section 2 of this notice, at the head of the Terms of Service and in section 1 of the Privacy Policy.