Security, privacy & compliance

Access controls

• The HeyAlbert app sits behind Google sign-in through an identity-aware proxy. Only accounts that have been granted access get past sign-in.
• A second allowlist inside the app checks every request, so access is enforced twice.
• Access is per named user. Shared logins are not permitted.
• Editing is limited to HeyAlbert editors and administrators. Subscribers can read and export; they cannot change records.

Audit and governance

• Every editorial change is logged with who made it, when, what changed and the source, and any change can be reverted.
• Exports are logged with the user and the filters used.
• Verification follows a fixed four-level process with second-editor sign-off before a profile is marked Verified.

What data we hold

HeyAlbert compiles information from public sources only. We do not collect information from private databases, people-search sites or data brokers, and we do not hold contact details such as home addresses or personal phone numbers. Children are never shown. Research articles publish aggregates only, never individuals, and suppress any group of fewer than 10 people.

Data rights

Anyone can ask to review, correct or remove information about themselves using our review and removal form. Residents of some states, including California, have rights under state privacy law regarding personal information, such as the right to request deletion. Our Privacy Policy explains how we handle personal information.

Retention

Profiles are refreshed on a schedule, and the change log keeps the history of each record so edits can be reviewed and reverted. When information is removed after a request, it is taken out of the subscriber-facing profile. Our Data Retention Policy sets out every retention period.

Subscriber obligations

Subscribers agree to use HeyAlbert lawfully, including privacy, anti-spam and fair-lending rules, and not to use it for credit, employment, insurance or housing decisions. See the Fair use and acceptable use terms and data licensing.

Questions from security and procurement teams

Email albert@heyalbert.site with your questions and we will answer them directly.