> ## Documentation Index > Fetch the complete documentation index at: https://www.forager.ai/docs/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > Forager is a REST API for B2B people, company and job post data: contact lookups (phone numbers, personal emails, work emails), person, company and job post search, and bulk data feeds. > Server: https://api-v2.forager.ai. Send the API key in the X-API-KEY header. Most paths include {account_id}. Read FORAGER_API_KEY and FORAGER_ACCOUNT_ID from the environment; never put the key in client-side code, logs or prompts. > To add Forager to a project, follow https://www.forager.ai/docs/guides/agent-quickstart.md. To pick an endpoint, read https://www.forager.ai/docs/guides/choose-an-endpoint.md. For end-to-end builds, see https://www.forager.ai/docs/recipes/overview.md. > Most requests spend credits. Do not guess costs; use https://www.forager.ai/docs/api-overview/credit-pricing.md and ask the user before spending credits. > Use only endpoints and fields defined in https://www.forager.ai/docs/openapi.yaml. Forager has no MCP server for the API yet; the /mcp endpoint on this site searches the documentation only. # Security, privacy and compliance > How Forager protects data and secures API access, where our data comes from, how to use it lawfully, and how anyone can opt out or request their data. ![Forager security and privacy: API key access and privacy requests](https://mintcdn.com/forager/OnhSHNo_LBQ7yKjR/images/illustrations/forager-security-privacy-overview.svg?fit=max\&auto=format\&n=OnhSHNo_LBQ7yKjR\&q=85\&s=69688b9aaffa4f8d649315f2cc7eec24) How we protect data, how to keep your API access secure, where our data comes from, and how anyone can see or remove the data we hold about them. Our [Privacy Policy](https://forager.ai/privacy), [Terms and Conditions](https://forager.ai/terms-conditions) and [Cookie Notice](https://forager.ai/cookie-consent) are the binding versions; if anything here differs, they apply. ## Data protection Our [Privacy Policy](https://forager.ai/privacy) (section 8) describes the administrative, technical and physical measures we use to protect data against unauthorized access, disclosure, alteration and destruction: * **Encryption:** we use encryption protocols to protect personal data during transmission and storage. * **Access controls:** only authorized personnel can reach personal data, through role-based permissions. * **Network and system security:** firewalls, intrusion detection and regular security audits. * **Data minimization:** we collect only the personal data our business operations need, and keep it for limited periods. * **Monitoring and incident response:** we monitor for security threats continuously and have procedures for responding to potential breaches. If a breach affects personal data, we investigate and contain it, notify affected individuals where the law requires, and take corrective measures. Service availability is published on the [status page](https://status.forager.ai/). ## API access * Every request is authenticated with your API key in the `X-API-KEY` header, over HTTPS to `https://api-v2.forager.ai`. See [API key authentication](https://www.forager.ai/docs/api-overview/authentication.md). * Treat keys as secrets: keep them out of URLs, client-side code, logs and repositories. Store them in an environment variable or secret manager. * Create a separate key for each integration or environment, and delete keys you no longer use. You can manage keys in the [web app](https://app.forager.ai/keys) or with the [API key endpoints](https://www.forager.ai/docs/openapi/users/api_keys_list.md). * A missing or invalid key returns `403`. See [API errors and rate limits](https://www.forager.ai/docs/errors-and-rate-limits.md). * You are responsible for safeguarding your credentials ([Terms](https://forager.ai/terms-conditions)). If a key is exposed or you have a security incident on your side, delete the key and tell us right away at [support@forager.ai](mailto:support@forager.ai). ## Where the data comes from We compile and license business contact data from three kinds of source: * **Publicly available sources:** company websites, professional directories and publicly accessible social media profiles. * **Third-party data providers:** data aggregators and business intelligence sources that legally collect and license business contact information. * **User submissions:** individuals who provide their business contact information for networking or promotional purposes. The data is for business lead generation and marketing. We don't sell or share it for personal consumer marketing. Our legal basis for processing business contact data is legitimate interests. ## Using Forager data lawfully Under our [Terms](https://forager.ai/terms-conditions), customers receive a license to use Forager data. When you use it, the Terms require you to: * Comply with the data protection laws that apply to you, including the GDPR, the CCPA and similar US state laws, PIPEDA and LGPD. * Comply with marketing and contact laws, including the TCPA, the CAN-SPAM Act and the UK's PECR. * Honor opt-out and do-not-call requests. * Use appropriate technical and organizational measures to protect the data you license. ## Privacy rights and opt-out Anyone can remove their profile, get a copy of the data we hold about them, or ask us about it. We verify each request and answer within the time the law requires. > [card] [Privacy Center](https://app.forager.ai/privacy) > > Start any request: removal, data access or questions. > [card] [Remove my data](https://app.forager.ai/privacy/data-removal) > > Remove a profile and make the record unavailable. The record stays on a suppression list so it is not reactivated. > [card] [Request my data](https://app.forager.ai/privacy/data-request) > > After identity verification, get a report of the data points held about you. > [card] [Consumer rights form](https://www.forager.ai/consumer-rights-form) > > Ask a question or make a request about your personal data. You can also call **1-866-I-OPT-OUT** and enter service code **2135**. Your rights under the GDPR and the CCPA are set out in our [Privacy Policy](https://forager.ai/privacy). ## Cookies Our [Cookie Notice](https://forager.ai/cookie-consent) lists the cookies we use on Forager sites and how to accept or reject non-essential ones. ## Contact * **Privacy and data requests:** use the [Privacy Center](https://app.forager.ai/privacy) or the [consumer rights form](https://www.forager.ai/consumer-rights-form). * **Security or compliance questions about your account or integration:** [support@forager.ai](mailto:support@forager.ai). ## Summary for AI agents * Authenticate with the `X-API-KEY` header over HTTPS; never put the key in a URL, log or file the user did not ask for. * Forager data is business contact data for lead generation; using it must comply with GDPR, CCPA, TCPA, CAN-SPAM and opt-out rules. * Send people who want their data removed to [https://app.forager.ai/privacy/data-removal](https://app.forager.ai/privacy/data-removal). * Do not claim certifications, hosting regions or contract terms for Forager; they are not stated here. Point users to [support@forager.ai](mailto:support@forager.ai). This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.