Privacy Policy

Who we are

DataRemoval ("we", "us") is a service operated by DataRemoval.ai. You can reach us at support@dataremoval.ai about anything in this policy, including a request to delete everything we hold about you.

The exposure scan

The scan on our homepage takes a first name, a last name, and a US state. Here is exactly what happens to them.

• The three values are sent to our server, and from there to our search provider, which runs a web search for public people-search listings matching that name.
• The result is returned to your browser and rendered there.
• The name is not written to any database. It is not written to our application logs. When a scan fails, we log the failure reason and never the query.
• We keep a per-session counter of how many scans you have run, and a per-IP rate-limit counter, so the shared API key is not abused. Neither contains your name.
• The scan creates no account and sets no cookie identifying you.

Because your name passes through our search provider, that provider processes the request under its own terms. We do not send it anything beyond the name, surname and state you typed.

The scan requires you to confirm that you are searching for yourself or have the person's consent. We ask you not to use it to look up anybody else. That is not a legal disclaimer, it is the point of the product.

Your account

When you create an account, we store:

• Your email address.
• A confirmation code, until you use it.
• The source: which button on which page you clicked.
• Any utm_source, utm_medium and utm_campaign parameters that were in the URL, so we know which campaigns bring people who actually confirm.
• Your IP address, for abuse prevention.
• The timestamps of the signup and the confirmation.

We use it for one thing: to email you about your DataRemoval account. We do not sell it, rent it, share it with advertisers, or add you to any other list. A company that sells the email addresses of people who signed up for a data removal service would deserve everything that followed.

Ask us to delete it and we delete it, from the live database and from the next backup rotation. No verification hoops, no retention offer.

What the rest of the site collects

If you write to us in the chat window, we keep the messages and any email address you give us there, so we can answer you. There is no other contact form on this site. We run no analytics tags. The advertising tags we use are described in the next section.

Our web server keeps standard request logs (IP address, URL, timestamp, user agent) for security and debugging, on a short rotation. Session cookies are strictly functional: they keep the signup modal working and protect forms against cross-site request forgery.

Advertising measurement

We advertise on Google Ads and Microsoft Advertising (Bing). When you arrive from one of our ads, we keep the ad click identifier (gclid, gbraid, wbraid or msclkid), the campaign parameters (utm) and the page you landed on in a first-party cookie for up to 90 days, and store them with your signup and account, so we know which ads lead to signups and purchases. Public pages of this site load the Google Ads tag and the Microsoft Advertising UET tag, which set their own cookies and tell Google and Microsoft when a signup or a purchase happens, with the plan price as the value. We send them no names, email addresses, scan details or payment details, and the pages of your account do not load these tags. You can block these cookies in your browser settings without losing access to the site.

Spam protection

The signup form is protected by a honeypot: a field a human never sees and never fills, plus a check that the form was not submitted within a second of loading. If a submission trips either check, we silently discard it. No row is stored and no email is sent.

Your rights

Depending on where you live, you have a legal right to see the personal data we hold about you, correct it, have it deleted, or object to how we use it. In 20 US states a comprehensive privacy law grants those rights directly; in California the CCPA, as amended by the CPRA, and the Delete Act do so; in the EU and UK, the GDPR does.

In practice, until you set up removals we hold one thing about you: an email address you gave us on purpose. Write to support@dataremoval.ai and it is gone. We will not ask you to prove anything beyond control of the mailbox.

Data we need to remove you

A broker cannot find your listing without the details it lists, so when you set up removals on a paid plan we ask for the ones it needs: typically your name, current and past addresses, phone numbers and email addresses. We use them to file and verify your removals and for nothing else, and we delete them when you close your account. Card payments are handled by our payment processor, and we never see or store your full card number.

Changes

If this policy changes in a way that affects data you have given us, the new version is published here first and we email everyone with an account about it before it applies.

Contact

support@dataremoval.ai, operated by DataRemoval.ai.