Privacy policy

1. Information we collect

Information you choose to provide. A research request includes a part number and may include a manufacturer, category, description, specifications, product or datasheet links, application details, requirements, and an optional email address. We retain the request, its status, timestamps, notification preferences, email-confirmation status, and records of your agreement to the Terms of Use. We also receive information you send when contacting us.

Technical information. Our hosting and security providers process information needed to deliver and protect the service, which may include IP addresses, browser and device information, requested URLs, timestamps, referring pages, and diagnostic logs. Our request service uses a hashed browser identifier and a daily hash derived from an IP address or browser identifier for duplicate detection and abuse limits. Hashing does not necessarily make information anonymous.

Searches and links. Search text generally runs in your browser against our index, but part numbers may appear in page URLs, requests, and hosting logs. Do not put personal, confidential, or proprietary information in search fields or URLs.

2. How we use information

We use this information to provide search and research services; prioritize requested parts; review specifications and supporting evidence; maintain request tracking; send requested confirmations and part-specific updates; respond to inquiries and privacy requests; detect abuse; maintain security; and meet legal obligations. We do not use research-alert email consent for marketing emails.

3. What becomes public

Part numbers, manufacturers, published cross references, technical comparisons, public source links, and coverage statistics may become publicly searchable, including by search engines and AI search services. We do not intentionally publish your email address, private tracking tokens, identifying submission information, or private application notes. Published findings should omit identifying information from submissions. Public information may be copied or cached by others.

For contributed cross-reference files, public records are labeled “User provided”; we do not publish the original file or identifying provenance. Do not submit confidential drawings, trade secrets, export-controlled information, sensitive personal information, or material you lack authority to share.

4. Service providers and other disclosures

Authorized operators and service providers may access information as needed to operate the service. These include our website platform and hosting providers (ChatGPT Sites/OpenAI and Cloudflare), database and security providers, and, when email delivery is enabled, Resend for confirmation and research notifications. Email delivery providers receive recipient addresses, message content, and delivery information. Our administrative research tools can expose request details to authorized operators through connected AI tools; do not include information you do not want processed in that workflow.

We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights or safety, investigate abuse, or complete a business transfer subject to applicable privacy protections. We do not sell personal information or share it for cross-context behavioral advertising, and do not embed advertising trackers in our application. Providers may process technical information for their own security and service operations under their applicable terms and policies.

5. Browser storage, cookies, and tracking choices

The research form uses local storage named exactcross-request-client for a browser identifier and exactcross-requests for up to 30 recent request part numbers and private tracking tokens. This data stays in that browser until cleared or removed by browser settings. Anyone with access to the browser profile may be able to open those tracking links. Clearing storage may remove your convenient access to them; it does not delete server records.

Hosting, security, or administrative sign-in services may use cookies or similar technologies for their functions. We do not currently embed third-party advertising or behavioral analytics scripts in the application. We do not change essential processing in response to browser Do Not Track signals. Because we do not sell personal information or share it for cross-context behavioral advertising, Global Privacy Control signals do not currently change those practices. You may use browser settings to limit storage or cookies; some functions may be affected.

External manufacturer, search, specification, and other linked sites have their own privacy practices and may collect information when you visit them. Their policies govern those visits.

6. Retention and security

We retain request information while needed to provide and track research, manage notification preferences, maintain appropriate consent and security records, resolve disputes, or comply with law. Retention depends on the record and purpose; the current service does not automatically delete research requests on a fixed schedule. You can request deletion using the contact below. Some information may remain in backups or restricted records where retention is necessary or legally permitted. Published nonpersonal product facts may remain in the database after a request is deleted.

We use reasonable technical and organizational safeguards, including restricted administrative access and private tracking tokens. No system or transmission is completely secure. Treat your tracking link as a secret: anyone with it can view request status and change notification preferences. Do not email the full link unless needed to verify a privacy request.

7. Your choices and privacy requests

You can browse without supplying an email, submit a research request with only the required part number and agreement, decline optional details, and stop research emails using your private tracking page. Where delivery is enabled, part-specific alerts require email confirmation. Unsubscribing stops those alerts; it does not itself delete the request.

Email privacy@exactcross.com with “ExactCross privacy request” to request access, correction, deletion, or a copy of your personal information, or to ask about our practices. Identify the relevant request without sending unnecessary sensitive information. We may ask for reasonable verification to protect your information. Depending on your location and which laws apply, you may have additional rights, including objection, restriction, portability, withdrawal of consent, an authorized-agent request, or a complaint to a data protection authority. We will handle requests as applicable law requires and will not discriminate for exercising applicable privacy rights. Withdrawal does not affect processing already lawfully completed.

8. International visitors and children

ExactCross is operated from the United States. Our providers may process information in the United States and other countries with different data protection rules. Where applicable law requires it, processing and transfers must have a lawful basis and appropriate safeguards. Contact us for information about your circumstances.

The service is intended for adult engineers, buyers, and other business users, not children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can investigate and take appropriate action.

9. Policy updates and contact

We will post updates here and change the effective date. For material changes, we will provide a prominent site notice or another appropriate notice, and obtain consent where required before a new use. Questions and privacy requests: privacy@exactcross.com.