Skip to content
scrubmyinfo

Privacy policy

Last updated 2026-09-28

The short version

We hold some of the most sensitive information about you that exists — your addresses, your phone numbers, sometimes a criminal record and an identity document. We are acutely aware of the irony of a privacy company collecting that, so here is the short version.

We collect the minimum needed to find your listings and prove we removed them. We never sell, share or monetise it in any form, including aggregated or anonymised. We do not run third-party analytics on pages where you are signed in. We delete identity-verification documents as soon as the check completes.

Your evidence archive is yours. If you cancel, you can take it with you, and we do not delete it the moment you leave because people sometimes need those receipts for a court filing.

What we collect, and why each item is necessary

We ask for the minimum that makes removal possible. Every field below exists because a data broker indexes on it, which means we cannot find or claim your listing without it.

  • Your name and any former or alternative names — brokers hold separate records per name variation, and a removal for one does not touch another.
  • Your current and previous addresses — address history is a published field on most people-search sites and is how brokers link household members.
  • Your phone numbers and email addresses — reverse-lookup sites index on these independently of your name.
  • Your state of residence — this determines which legal instrument we can file for you.
  • For Fair Chance: your criminal record details and any expungement or sealing order, because a dispute without the order attached is one a screening company can dismiss.
  • Payment details — handled entirely by Stripe. We never see or store your card number.

Identity verification

Before we file anything on your behalf we verify your identity through a specialist provider. This is an abuse control before it is a compliance requirement: a removal service without identity verification can be used to erase another person's trail, or to confirm to a stalker that an address is current.

The verification document is processed by the provider and is not retained by us once the check completes. We keep only the result of the check and its timestamp.

What we never do

These are commitments, not aspirations, and we publish them on our ownership disclosure as well.

  • We never sell your personal information. Not to anyone, not for any price.
  • We never share it except with the data brokers we are filing against on your behalf, and only what is necessary for that filing.
  • We never monetise it in aggregate, anonymised, de-identified, or as 'insights'. There is no second revenue line.
  • We never use your data to train a machine-learning model.
  • We never run third-party advertising or analytics scripts on authenticated pages.
  • We never operate, own or invest in a data broker.

What we necessarily disclose, and to whom

Removal only works by telling a data broker who you are. A deletion request that does not identify you cannot be processed. So for each broker we file against, we disclose the minimum identifying information that broker requires to locate and delete your record.

This is the central and unavoidable trade-off of the service, and you should understand it before you sign up: we reduce your overall exposure by making a targeted disclosure to each company that already holds your data.

Retention

We keep your profile for as long as you are a member, because re-verification requires it. If you cancel, we retain your evidence archive for the period stated in our retention policy and then permanently delete it.

We do not purge your receipts the moment you cancel. Customers have needed removal evidence for protective-order filings and attorney-general complaints, and deleting it on the day a subscription lapses would be a disservice dressed up as data hygiene.

Identity-verification documents are not retained past the check. Fair Chance records — criminal history and court orders — are held under a separate, stricter retention scope with tighter access controls.

Security

Sensitive fields are encrypted at rest individually rather than relying only on disk-level encryption. Access is role-limited and logged. Evidence screenshots are stored in object storage that is not publicly addressable.

We will tell you about a breach affecting your data promptly and specifically, including what was exposed. We will not send you a letter about our commitment to your privacy that takes four paragraphs to reach the point.

Your rights

You have the rights your state gives you, and we honour them regardless of which state you live in rather than only where we are compelled to. That means you may request a copy of everything we hold, ask us to correct it, ask us to delete it, and take your evidence archive with you.

Requests go to our privacy address and we respond within the shortest deadline applicable to any state, not the longest.

Children

We do not knowingly create accounts for anyone under 18. Minors can be covered under a Household plan by a parent or guardian, under a stricter retention policy, and we require the parent's verified identity rather than an assertion of guardianship.


Questions about any of this go to legal@scrubmyinfo.com, and we answer them rather than referring you back to the document.