How we handle your data.

Scan input data. When you run a free scan, we collect your first name, last name, city, state, and optionally your email address. This data is used solely to query data broker sites on your behalf.

Account data. If you create an account (for paid plans), we store your email address, name, and authentication credentials via our identity provider (Clerk).

Payment data. Payment information is processed and stored by Stripe. We do not store credit card numbers, bank account details, or other financial instruments on our servers.

Usage analytics. We use PostHog for privacy-first product analytics. We do not sell analytics data. Session recordings use data masking to exclude personal information.

We use the information we collect to:

• Run privacy exposure scans across supported data broker sites
• Generate evidence-backed reports showing where your data appears
• Submit lawful opt-out and data deletion requests on your behalf
• Monitor for re-listings and alert you when data reappears
• Process payments and manage your subscription
• Send transactional emails about your scan results, removals, and account
• Improve our service through aggregated, anonymized usage analytics

We share your personal information only with:

• Data brokers — only the minimum information needed to identify and remove your listing (as part of the opt-out/removal process you authorized)
• Stripe — for payment processing
• Clerk — for authentication and identity management
• Resend — for transactional email delivery
• Vercel — our hosting provider (infrastructure only)

We do not sell your personal information. We do not share it with advertisers or data brokers for marketing purposes.

Free scan data is retained for 30 days to allow you to review your report, then automatically deleted. Paid account data is retained for the duration of your subscription plus 90 days. You can request deletion of all your data at any time by contacting support.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of data sales (we do not sell data, so this is already satisfied)
• Receive a portable copy of your data

California residents have additional rights under the CCPA and the California DELETE Act. To exercise any of these rights, contact us at privacy@deletemytrace.com.

We use industry-standard security measures including encryption in transit (TLS), encryption at rest, role-based access controls, and regular security audits. No system is perfectly secure, but we take reasonable measures to protect your data.

For questions about this privacy policy or to exercise your data rights, contact us at privacy@deletemytrace.com.