Privacy Policy

We collect information you provide directly to us, including:

• Email address: Required to send you data breach alerts and updates
• State/Location: Used to filter alerts relevant to your area
• Sector preferences: Used to personalize breach notifications
• Company names: Optional, to alert you about specific companies
• Phone number: Optional, only collected via intake forms for potential legal consultations
• Uploaded documents: Breach notification letters, PDFs, or images submitted via BreachBrief for AI analysis

When you use the BreachBrief tool, you may paste text or upload documents (PDFs, images) containing breach notification letters. These documents are:

• Processed by AI (Google Gemini) to extract structured information such as company names, dates, and exposed data types
• Stored temporarily for analysis and optionally saved to your account if you provide an email
• Not shared with third parties except as necessary for AI processing
• Used to improve our breach detection capabilities in aggregate (no individual identification)

You should not upload documents containing personal information of others without their consent.

We use the information we collect to:

• Send you timely alerts about data breaches relevant to your preferences
• Improve our breach detection and notification services
• Connect you with legal resources if you've been affected by a breach
• Communicate important updates about our service

We do not sell your personal information to third parties.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encrypted data transmission (HTTPS/TLS)
• Secure database storage with row-level security
• Regular security audits and monitoring
• Limited access to personal data on a need-to-know basis

Data Shield requires an identity profile so broker removal requests can be matched to your listings. That profile may include your legal name, aliases, date of birth, current and previous addresses, phone numbers, email addresses, and the names of household relatives, along with your signed third-party authorization.

We keep that information only while it is needed to file on your behalf. Ninety days after your Data Shield plan is cancelled or expires, or after you revoke your authorization, we automatically purge the identity profile and delete the stored signature and authorization documents. Billing and dispute records are retained without that personal detail.

Data Shield is available only to people aged 18 or over, signing for themselves. To deter signer fraud we require an explicit attestation of identity, age, and authority, and we record the signing time, IP address, and device details with each authorization. Signing on another person's behalf without their permission is prohibited and may be unlawful.

We may share information with trusted third-party service providers who assist us in:

• Email delivery (Resend)
• Database hosting (Supabase)
• AI document analysis (Google Gemini, via Lovable AI)
• Analytics (to improve our service)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your personal data
• Unsubscribe: Opt-out of email communications at any time

To exercise these rights, visit our Email Preferences page or contact us directly.

We use essential cookies to ensure our website functions properly. We may also use analytics cookies to understand how visitors interact with our site, which helps us improve our service.

You can control cookie preferences through your browser settings.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

If you have any questions about this Privacy Policy or our data practices, please visit our Help Center or reach out through our contact form.