Privacy
A privacy policy for a privacy company should be readable in one sitting. This is not the full legal document — that comes with the entity, before we take payment — but nothing in it will contradict this.
What we collect
Names you have used, addresses, phone numbers, email addresses and your year of birth — the identifiers a broker needs to find and delete your record. Nothing else.
Never: your Social Security number, your full date of birth, government ID, or card details.
How long we keep it
| What | How long |
|---|---|
| An anonymous scan | 24 hours |
| Your removal profile | While subscribed, plus 30 days |
| Evidence files | 12 months after a case closes. The hash is kept, so old receipts still verify. |
| Abuse audit log | 24 months, last four digits only |
| Billing records | As tax law requires |
Deleting your account
One button in settings. There is a seven-day grace period, because the alternative is that anyone who takes over your account can destroy everything irreversibly before you notice. After that we destroy the encryption key for your record, which makes every identifier unrecoverable in one step, and delete the rows.
Who else touches your data
- Cloudflare — hosting, database and file storage.
- Stripe — payments. They see your card; we never do.
- An identity-resolution provider — runs the exposure search. Named here once the contract is signed.
- Data brokers — we send them your identifiers, because that is how a deletion request works. There is no version of this product that avoids it.
No advertising networks, no analytics that identify you, and no Google Analytics. We use Cloudflare's cookieless analytics instead. A privacy company running Google Analytics is an own goal.
What encryption does and doesn't do
Your identifiers are encrypted with a key belonging to your record alone. A stolen copy of our database, a leaked backup or a misrouted export is useless without it.
It does not mean we cannot read your data. We have to, in order to tell a broker whose record to delete. Anyone in this category claiming zero-knowledge removal is describing something that cannot work.