Privacy Policy
This policy details exactly what we collect, why we collect it, and how we get rid of it. Our business model relies on discretion. We collect the minimum information necessary and delete it after your service is complete.
1. Introduction
Unfind.io ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose your personal information when you use our website and services.
Effective Date: January 2, 2026
2. Information We Collect
We collect information in three ways: what you provide, what is collected automatically, and what is publicly available (for removal purposes).
Information you provide:
- Contact Information: Name, email address, and phone number when you inquire or sign up.
- Payment Information: Credit card details and billing address (processed securely via our payment processor; we do not store full card numbers).
- Removal Details: Addresses, aliases, dates of birth, and copies of ID documents strictly for the purpose of verifying your identity with data brokers.
Information collected automatically:
- Usage Data: Pages visited, time spent, and referral sources (for basic site analytics).
- Device Data: IP address, browser type, and operating system for security and troubleshooting.
We explicitly DO NOT collect:
- We do not sell your data.
- We do not share your information with data brokers (except to tell them to delete you).
- We do not use invasive tracking pixels from advertising networks.
3. How We Use Your Information
Your data is used solely to deliver the service you paid for:
- To Provide Services: Scanning for your data, submitting opt-out requests, and communicating with webmasters.
- To Communicate: Sending you verified exposure reports, status updates, and support responses.
- To Process Payments: Handling transactions for our service tiers.
- To Improve Services: Internal analysis to make our removal automation faster and more effective.
- To Comply with Law: Meeting legal obligations (e.g., tax records).
4. How We Protect Your Information
We treat your data as a liability, not an asset. Our security measures include:
- Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256).
- Access Control: Only specific specialists assigned to your case can access your personal removal details.
- Secure Deletion: We employ cryptographic erasure to permanently delete files after the retention period expires.
5. Data Retention
We operate on a "delete-by-default" cycle:
- Active Clients: We retain your specific removal data (e.g., ID scans, list of addresses) for the duration of your service plus the monitoring period (90 days or 6 months).
- Completed Clients: After the monitoring period, sensitive personal identifiers are purged from our active systems. We retain basic transaction records (invoice data) for 7 years as required by tax law.
- Upon Request: You may request full deletion of your client profile at any time, subject to legal record-keeping requirements.
6. Your Rights
Regardless of where you live, we extend these rights to all clients:
- Access: You can request a copy of the personal data we hold about you.
- Correction: You can ask us to fix inaccurate or incomplete data.
- Deletion: You can request that we delete your personal data (Right to be Forgotten).
For California Residents (CCPA/CPRA):
You have the right to know what personal information is collected, the right to delete it, the right to opt-out of its sale (we do not sell data), and the right to non-discrimination for exercising these rights.
For EU/UK Residents (GDPR):
We process your data based on Contractual Necessity (to perform the service) and Legitimate Interests (fraud prevention). You have the right to restrict processing, object to processing, and data portability.
7. Third-Party Services
We use trusted third-party processors to handle specific functions. We do not share your data with them for their own marketing purposes.
- Payment Processing: Stripe (Privacy Policy available at stripe.com)
- Email Service: Postmark / Google Workspace (for client communication)
- Hosting: Vercel (for website delivery)
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child, we will delete it immediately.
10. Changes to This Policy
We may update this policy to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated "Effective Date." We encourage you to review this page periodically.
11. Contact Us
If you have questions about this policy or our privacy practices, please contact us:
- Email: privacy@unfind.io
- Response Time: We aim to respond to all privacy-related inquiries within 48 hours.