Some data cannot be listed on DataStoa under any plan, in any country. We check for it in review, and anyone can report a listing they believe breaks this policy.
Prohibited data
- Data obtained through hacking, breaches, leaks or other unlawful access
- Login credentials, passwords, payment card numbers or bank account details
- Government identifiers (passport, national ID, social security numbers)
- Health, genetic or biometric data about identifiable people
- Precise location histories of identifiable people or devices
- Data about children under 16
- Data revealing race, religion, sexual orientation, political opinions or union membership of identifiable people
- Criminal records of identifiable people
- Named shipment-level customs records from jurisdictions that prohibit publishing them (for example India, Customs Act s.135AA)
- Data collected by bypassing logins, paywalls or technical protections, or with fake accounts
- Data you do not have the right to license or resell
- Sanctioned-party data offered to sanctioned buyers or jurisdictions
- Personal data sold for stalking, harassment, discrimination or surveillance of individuals
- Malware, exploits or tools for unauthorized access
- Content that infringes copyright or database rights
Restricted data
These categories are allowed only with extra declarations and a moderator's review:
| Category | Conditions |
|---|---|
| Business contact data (work email, phone, job title) | Legitimate-interest assessment, source and notice described, a working opt-out, and a documented lawful basis for contacts in the EU and UK |
| Aggregated or anonymised consumer data | De-identification method and minimum aggregation level declared; no re-identification |
| Web-collected and social data | Collection approach described: sites, terms, rate limits; no logged-in or fake-account collection |
| Aggregated location and mobility data | No precise individual locations and no visits to sensitive places |
| Financial alternative data | Attestation that it contains no material non-public information |
| Trade and customs data | Country-by-country source and legal basis; category rules apply |
| Aggregated health or payment statistics | Aggregation level and source declared |
What happens if prohibited data is found
- The listing is removed at once and the provider is told why.
- Serious cases, such as leaked or hacked data, lead to immediate suspension and may be reported to the authorities.
- Buyers who contacted the provider about the listing are informed.
Questions
If you are not sure whether your data is allowed, ask us before you list it: [email protected].
Questions about this policy? Write to [email protected] or use the contact form.