.env.example

# visitor-signal-engine configuration. Copy to .env and fill what you use.
# EVERYTHING is opt-in. With nothing set, the engine runs anonymous/company-level only.

# ── Company-level identification (reverse-IP firmographics; org-level, names no person) ──
# Your IPinfo token. Without it, company-level is disabled.
VSE_IPINFO_TOKEN=

# ── First-party known-contact resolution (consent-based; recognizes people who gave YOU
#    their info via a tokenized link from your own email/CRM) ──
VSE_TOKEN_SECRET=            # HMAC secret your campaign system uses to sign link tokens
VSE_CONTACTS_JSON=contacts.json   # {token-subject: {full_name,title,company,email,linkedin_url}}

# ── Person-level de-anonymization (the VACANT vendor slot) ──
# off | mock | vendor.  'off' (default) = never. 'mock' = fake demo data. 'vendor' = a
# LICENSED third-party de-anon service YOU connect and are legally responsible for
# (US-only, consent-gated, opt-out honored). See docs/privacy-and-legal.md.
VSE_PERSON_LEVEL=off
VSE_PERSON_VENDOR=
VSE_PERSON_API_KEY=

# ── Social / professional enrichment (VACANT; attach a licensed data API, never a scraper) ──
VSE_SOCIAL_API_KEY=

# ── Delivery ──
VSE_SLACK_WEBHOOK=           # Slack incoming-webhook URL
VSE_CRM_WEBHOOK=             # any JSON webhook (HubSpot/Zapier/Make/n8n/custom)

# ── State ──
VSE_CONSENT_STORE=consent_optouts.json