Privacy-First Policy

Privacy Policy

Your privacy is our business. This policy explains how we protect your privacy while helping you protect yours.

Our Core Privacy Commitments

  • 🔒 Your Data, Your Control: You always maintain ownership and control of your personal information.
  • 🚫 Never Sold: We will never sell, rent, or share your personal information for marketing purposes.
  • 🛡️ Privacy First: We collect only the minimum information necessary to protect your privacy.
  • Transparent Operations: We're committed to being clear about what we do with your data.
Last Updated: December 2024 | Effective Date: December 2024

1. Information We Collect

Information You Provide

Account Information

  • Name and contact details (email address, phone number)
  • Account credentials (username, password)
  • Billing information (payment card details, billing address)
  • Subscription tier and preferences

Monitoring Profile Data

  • Primary and alternative email addresses
  • Usernames and social media handles
  • Phone numbers for monitoring
  • Home address (for data broker removal)
  • Date of birth (optional, for enhanced monitoring)
  • Business information (company name, domain, business email)

Scam Protection Content

  • Messages, emails, and URLs submitted for scam analysis
  • WhatsApp messages sent to our expert analysis team
  • Email forwards to scamcheck@useprivly.com
  • Images and QR codes uploaded for scanning
  • Chat conversations with our AI scam detector

Information We Collect Automatically

Technical Information

  • IP address and approximate location
  • Device type, operating system, and browser information
  • Unique device identifiers
  • Log data (access times, pages viewed, clicks)
  • Cookies and similar tracking technologies

Usage Analytics

  • Features used and frequency of use
  • Service performance metrics
  • Error reports and debugging information
  • Interaction with emails and notifications

Information from Third Parties

Data Broker Information

  • Public records and listings found on 1,000+ data broker sites
  • Information discovered during removal processes

Dark Web Monitoring

  • Credentials and personal information found in data breaches
  • Dark web marketplace listings containing your data

Public Sources

  • Social media profiles and posts (for monitoring purposes)
  • Public websites and forums
  • Search engine results

2. How We Use Your Information

Providing Core Services

We use your information to:

Service Delivery by Subscription Tier

Scam Watch ($5.99/month)

Real-time AI scam detection and alerts

Personal ($9.99/month)

Dark web monitoring, data broker removal (250+ brokers), breach alerts

Professional ($39.99/month)

Content theft detection (72,000+ websites), deepfake monitoring, reputation protection, 1,000+ data broker removal

Service Operations

  • Data Broker Removal: Submit removal requests to 1,000+ data brokers on your behalf
  • Dark Web Monitoring: Scan dark web sources for your personal information
  • Breach Detection: Alert you when your data appears in new breaches
  • Scam Analysis: Process content through AI and human experts to detect scams
  • Content Protection: Monitor 72,000+ websites for unauthorized use of your content
  • Deepfake Detection: Analyze images and videos for potential deepfakes

Communication & Improvement

Communication

  • Send service alerts and security notifications
  • Provide customer support and respond to inquiries
  • Deliver monthly privacy reports and insights
  • Send marketing communications (with your consent)

Improvement and Analytics

  • Analyze usage patterns to improve services
  • Develop new features and capabilities
  • Conduct research on privacy threats and protection methods
  • Debug technical issues and improve performance

Legal and Security

  • Comply with legal obligations and requests
  • Prevent fraud and abuse
  • Enforce our terms of service
  • Protect the rights and safety of our users and others

3. Information Sharing and Disclosure

We Never Sell Your Personal Information

We share information only in these limited circumstances:

Service Providers

We share information with trusted vendors who help us operate our services:

  • Payment processors (PayPal, Stripe)
  • Cloud infrastructure (Vercel, Railway, Supabase)
  • Email service providers
  • Analytics providers
  • Customer support tools

Data Broker Removal

When removing your information from data brokers, we may share:

  • Your name, email, and address as required for opt-out requests
  • Only the minimum information necessary for removal
  • Following each data broker's specific removal procedures

Other Disclosures

Legal Requirements

We may disclose information when required by law or to respond to legal process, protect our rights, or investigate fraud.

Business Transfers

If we're involved in a merger, acquisition, or sale of assets, your information may be transferred with notification.

Aggregated Information

We may share aggregated, non-identifiable information about privacy trends with the public.

4. Data Security

Industry-Leading Security Measures

Technical Safeguards

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • Multi-factor authentication
  • Role-based access permissions
  • 24/7 security monitoring
  • Regular security assessments

Operational Security

  • Employee background checks
  • Security training programs
  • Strict access controls
  • Incident response procedures
  • Regular security updates
  • Penetration testing

Data Breach Response

In the unlikely event of a data breach, we'll notify affected users within 72 hours, provide specific details about compromised information, and offer guidance on protective steps.

5. Data Retention

Retention Periods

Active Accounts

  • Account Data: Retained while your account is active
  • Scam Analysis History: 90 days for AI chat logs, 1 year for analysis results
  • Monitoring Results: 2 years for breach and dark web findings
  • Support Communications: 2 years from last interaction

After Account Deletion

  • Legal Records: Up to 7 years as required by law
  • Anonymized Data: May be retained indefinitely for analytics
  • Backup Systems: Deleted within 90 days from all backups

6. Your Rights and Choices

Access and Correction

  • View and download your personal information
  • Correct inaccurate or incomplete data
  • Request information about how we use your data

Data Portability

  • Export your monitoring profile and settings
  • Download scan results and reports
  • Transfer data to another service

Deletion Rights

  • Delete your account and associated data
  • Request removal of specific information
  • Some data may be retained for legal compliance

Communication Preferences

  • Opt-out of marketing emails
  • Customize notification settings
  • Choose preferred contact methods

How to Exercise Your Rights

Contact our Privacy Team at privacy@useprivly.com

We'll respond within 30 days. Verification required to protect your privacy.

7. Service-Specific Privacy Practices

AI Scam Detection

  • Chat messages analyzed by AI models
  • Results stored for service improvement
  • Human review only with your consent
  • Automated decision-making with right to human review

Data Broker Removal

  • Information shared only as required for opt-out
  • Removal confirmations stored for verification
  • Progress tracked across 1,000+ data brokers
  • Automated and manual removal processes

Dark Web Monitoring

  • Continuous scanning without storing dark web content
  • Only your exposed information is retained
  • Immediate alerts for new discoveries
  • Secure handling of compromised credentials

WhatsApp and Email Analysis

  • Messages to our WhatsApp experts handled confidentially
  • Emails to scamcheck@useprivly.com processed securely
  • Analysis results retained for your reference
  • Human expert review with strict confidentiality

8. Children's Privacy

Privly Me is not intended for children under 13. We don't knowingly collect information from children. If you believe we've collected data from a child, please contact us immediately at privacy@useprivly.com.

9. International Data Transfers

Global Operations

Our primary operations are in Australia, but data may be processed in other countries. We ensure appropriate safeguards for international transfers.

Your Rights by Region

  • Australian Users: Rights under the Privacy Act 1988
  • EU/UK Users: GDPR rights including erasure and portability
  • California Users: CCPA rights including sale opt-out
  • Other Regions: Rights under applicable local laws

10. Changes to This Policy

We may update this policy to reflect new features, legal requirements, or user feedback. We'll notify you of material changes via:

  • Email notification
  • In-app announcement
  • Website banner

11. Contact Us

Privacy Team

For privacy-specific inquiries:

privacy@useprivly.com

Response time: Within 2 business days

General Support

For general questions:

support@useprivly.com

scamcheck@useprivly.com

Data Protection Officer

For privacy-specific inquiries, you can also contact our Data Protection Officer:

dpo@useprivly.com