How we handle your information

Each broker site is searched on its own pages, no search provider in between, and we keep no record of who ran a scan.

• To search, we look you up on each broker site's own search pages with your first and last name and your city and state. No third-party search provider sees them. Middle names and suffixes like Jr are left out.
• A few sites that look people up by phone number or street address are searched on their own pages with those, and we use them to tell you apart from someone with the same name.
• We keep no record of who ran a scan. Each scan leaves a row with counts and which sites answered, and nothing about the person.
• Running the same details again soon after is answered from a short-lived cache that stores a scrambled key, not your details.
• Your browser keeps a copy of the result for 24 hours, so an account you create starts filled in. It reaches us only if you create an account.
• To stop abuse, your IP address counts toward a small daily limit. The counter is held briefly, at most 24 hours, and never saved to our database.

Nothing is sent until you confirm your address, and one click unsubscribes and deletes your details.

• We keep your email, the name, street, city and state you entered, and which sites listed you. We do not keep the phone number.
• Nothing is sent until you confirm the address from the one email we send to it. The checklist, the re-checks and any marketing start after that click, and an address nobody confirms within 7 days is deleted.
• We re-check those sites every 90 days for one year, and email you only when a site newly lists you. A clean re-check sends nothing.
• Marketing email goes out only if you check the separate box for it. The exact wording you agreed to is stored with the time you agreed.
• Every email has a one-click unsubscribe. It stops all email to that address and deletes the name, city, street and list of sites at once. If you never unsubscribe, they are deleted when the year ends.
• This data cannot be read from a browser at all, signed in or not. Only our server can reach it.

You pick from fixed answers, and your IP address is kept only as a one-way hash.

• You pick from fixed answers: whether it called or texted, and what it was about. Nothing you type is stored or shown, because there is nowhere to type.
• To count each visitor once, we keep a keyed one-way hash of your IP address, never the address itself. Reports are deleted after a year.
• Visitor reports are shown as unverified, only once three different visitors have made one, and they never decide whether a number is blocked.

A signed-in account can read only its own data, and deleting your account takes effect at once.

• You sign in with email and password or with Google. Two-factor sign-in with an authenticator app is optional, and once it is on, our server refuses any session that has not passed the second step.
• Your data is locked to your account at the database level, so a signed-in account can read only its own rows. Tables only our server should touch are closed to browsers entirely.
• The database key that can bypass those rules lives only on our server and never reaches your browser.
• Every page is served over an encrypted connection, with standard browser protections against injected scripts and against other sites showing our pages inside theirs.
• Error reports are sent without default personal data, and our site analytics sets no cookies.
• Our one ad tag, the Meta Pixel, runs on public pages only. It never sees what you type into our forms, never loads on your account, and stays off if your browser sends Global Privacy Control. If you are signed in, it gets only a hashed form of your account email and ID, made in your browser.
• Deleting your account takes effect at once: the account, its data and your uploaded files are deleted then, as the Privacy Policy describes. A subscription bought on our website is canceled with it. A subscription started in the app is billed by Apple or Google, so cancel it in your phone's settings: deleting the account cannot stop it.

We never hold card numbers.

• Web subscriptions are paid on Stripe's own checkout and managed in Stripe's billing portal. We store a Stripe customer ID and your subscription status, never card numbers.
• Subscriptions started in the app are billed by Apple or Google, and we never see your payment details.

You sign once, and the exact letter sent to each broker is archived where only you can retrieve it.

• You sign once. Each request we send a broker carries a letter of authorization, and the exact letter sent is archived in private storage that only you can retrieve.
• A broker receives what it needs to find and suppress your record: your name, phone, mailing address and email. Your signed consent cannot be edited after the fact.

Real user records are never copied into a test environment.

• Changes are tested in a separate environment first, and real user records are never copied into it.