What a company can and cannot see

Once you grant a company access, something of yours appears on their screen. This page is exactly what that is: what they can see, what they never see, and what is left of it once you end their access.

What they see

A row, and the state it is in. Your name, the address they know you by, whether they invited you as one of their own people or from outside, how many contacts you hold, whether you have linked a Spherum token, when you last changed anything, and whether your access is live. Contacts is a count and stays a count — it tells a filled-in card from an empty one without showing anything inside it.

Your card, once you have granted access. The fields they asked for, as you filled them in, together with any field you chose to add beyond what was asked. Their form is the question; it does not limit your answer.

What is true right now. A card is loaded at the moment it is opened. Change a number tonight and they read the new one tomorrow. There is one record — yours — and everyone you have granted reads its current state.

Whenever they want to look. While your access is live, the people there who have been given that job can open your card, and you are not told when they do.

What they never see

Anything before you grant. Nothing beyond what the company typed itself when it invited you — a name and an address. Come through a shared link and there is not even that until you join.

How you sign in. If your employer invited you as one of their own people, it knows you by your work address and never sees the email or phone you sign in with. If someone invited you from outside at your own email or phone, they know that one — but not an email or phone you add or change later.

Another company’s card. Each company asks its own questions and you answer each separately. A field one company asks for does not appear on another’s card, a field you added for one stays with that one, and nobody you have granted can see who else you have granted.

What used to be there. No earlier versions, no record of what you corrected. A card is a current state, not a file on you.

When they stop seeing it

The moment you revoke. The card closes at once. Your row keeps its place in their list and shows as revoked, and nothing from the card is kept on their side. Revoke access covers how.

Thirty days later, their record of you is emptied. The window is there for a revocation you did not mean: inside it, a re-invitation simply reopens the same row. After it, the name and address the company held are cleared, and what is left is the record that you granted and that you revoked.

When the company ends it instead. A company can end its own connection to you — someone leaves, a contract finishes. That is recorded as the company’s doing, not as your revocation, and its record of you is cleared ninety days later. Your own details are untouched: they were never the company’s to clear.

Getting access back means giving it again. A new invitation, a card to fill in, a new grant. Nothing resumes, and no previous consent carries over.