Privacy Policy
Last updated 29 October 2026. WeekOneHQ works with public company records. This page explains what we collect, why, who helps us run the service, and how to ask us to remove something.
Public records, handled responsibly
Introduction
WeekOneHQ helps businesses find and contact companies in their first days after incorporation. To do that we process publicly available company registration records from the Connecticut Secretary of the State, the Norwegian Brønnøysund Register Centre and the Finnish Patent and Registration Office, plus business contact details that companies publish on their own websites or give the registry for publication.
By using WeekOneHQ you agree to the collection and use of information as described here and in our Terms of use.
Data we collect
Registry records
Company name, registry number, incorporation date, registered address, industry codes, a description of the business where the registry gives one, officer names and roles, and any business email, phone number or website the registry publishes with the filing, exactly as published. We never store officers' birth dates or home addresses.
Enrichment data
Company websites, the description on the company's homepage, and business contact emails and phone numbers published on the company's own site, and links to the company's own social media pages that its site shows, each stored with a confidence score, verification status, the page it was published on and the date we found it. For registered officers we may also keep a link to a public LinkedIn, Facebook, Instagram or X profile that a web search returns, when it names both the person and the company, shown as a possible match. We never collect anything else from those profiles.
Your account
Your email address, plan and usage counts, so we can sign you in, keep track of exports and drafts against your plan, and send the saved-search alerts you turn on.
Your outreach profile
Business name, offer, proof points, website, signature and postal address you enter, used only to write drafts in your voice and add your sender details to them.
How we use data
We use the information we hold to run and improve WeekOneHQ. Specifically:
Matching new companies
Notify customers about newly registered companies that match their saved searches.
Showing company facts
Display registry facts and contact candidates on each lead, with a link to the original record.
Drafting outreach
Generate optional AI-assisted email drafts. You review and send every message yourself.
Keeping things safe
Enforce usage limits, prevent abuse and honour suppression requests across exports and drafts.
Lawful basis
In Norway, Finland, Denmark and Belgium we rely on legitimate interests (GDPR Article 6(1)(f)) to process business contact information for B2B prospecting. We have written a legitimate interests assessment and review it when the product changes. We limit processing to business information, keep a record of where every contact came from, and make it easy to object. We only list companies, never sole proprietorships, and never a Danish company that has opted out of marketing in the CVR register.
In the US, our customers send their own messages and must follow CAN-SPAM, including a valid postal address and a working opt-out in every email.
You may object or request suppression at any time using the form at the end of this page.
Where contact details come from
When we look for a way to contact a new company, we:
- Only keep contact details published on the company's own website or on its public registry filing
- Never collect addresses from directories or other third-party lists
- Prefer role inboxes such as info@ or hello@ over named people
- Skip a site entirely if it says it does not want unsolicited email
- Record the page each address came from and the date we found it
- Respect robots.txt and keep each website visit small
How long we keep data
Company records
WeekOneHQ is about a company's first weeks. Company records are deleted 30 days after incorporation, with their contacts and officers, and are not archived. Companies that asked not to be contacted stay on our suppression list.
Suppression list
Removal requests are kept for as long as we operate, so a suppressed company or address never reappears.
Account data
Kept while your account is open and deleted within 30 days of closing it, except where the law requires us to keep billing records.
Service providers
We never sell personal data. A small number of providers help us run WeekOneHQ and only process data on our behalf:
Hosting
The application and its scheduled jobs run on Vercel.
Database
Company, contact and account data is stored in a Postgres database hosted by Neon.
AI drafting
Draft requests are sent to language models through OpenRouter. Only the lead and profile details needed for the draft are included.
Officer search
Tavily or Brave Search, with Exa as a backup, looks for an officer's public LinkedIn, Facebook, Instagram or X profile. We never search for a company's website: we only use the website or email domain the company gave the registry.
Email delivery
Saved-search alert emails are delivered by Resend. Each one has a one-click unsubscribe.
Your rights
Depending on where you are, you can ask us to:
- Tell you what data we hold about you or your company
- Correct information that is wrong
- Delete your contact details from WeekOneHQ
- Stop using your data for outreach
- Restrict how we process your data
- Send you a copy of your account data
Once we suppress a company or contact, it is excluded from exports and drafts for good, even if it appears again in a future registry update.
Request removal
Ask us to stop processing a company or contact. Tell us the email address or registry number and we will suppress it from exports and drafts.
Questions about our privacy practices? Read the Terms of use or email privacy@weekonehq.com.