Privacy Policy

1. Introduction

Delist.ai ("we," "us," "our") is a privacy removal service. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services at https://delist.ai.

Delist is in beta. For a short explanation of our providers, security controls, and their limits, read Security & trust.

2. Information We Collect

Information you provide

• Name, city, and state (required for scanning)
• Your account email address, plus additional email addresses and phone numbers you provide for scanning
• Date of birth, to help distinguish you from people with similar names
• Current and past home addresses, former names, and aliases you provide during scanning or profile setup
• Optional profile details such as adult relatives, employers, schools, usernames, social profile links, and the exposure concerns you choose to share
• Payment information (processed by Stripe — we never store card numbers)
• Business inquiry details: your name, work email, role, organization, organization type, intended group size, who you want to cover, goal, and timeline; website, billing preference, and notes if you provide them

Information collected automatically

• First-party, cookie-free product analytics, including a session-scoped random identifier, page path, referral and campaign parameters when present, and allowlisted interaction events
• Standard server and security data, such as request time, IP address, user agent, and error information
• Email delivery and link-click events for customer messages where tracking is enabled; open tracking is disabled by our sending code
• Inquiry submission records, including session and submission identifiers, referring page, and notification delivery status
• No tracking cookies are set
• No third-party advertising trackers are used

3. How We Use Your Information

• To search the open web, retrieve public pages, and check breach sources for exposure matching your personal information
• To submit user-authorized opt-out and removal requests on your behalf
• To monitor for re-listings of your data
• To send you scan results, removal updates, and account notifications
• To process payments for subscription services
• To operate, support, secure, and improve the service, including reviewing scan quality and where users encounter problems
• To respond to business inquiries, scope a pilot, and coordinate payment and enrollment with each participant's authorization

We do NOT use your information for:

• Advertising or marketing to third parties
• Building advertising profiles or tracking you for third-party advertising
• Selling personal information or sharing it for third-party advertising
• Training AI models or machine learning systems

4. How We Protect Your Information

Profile encryption at rest: The canonical customer profile record is encrypted using AES-256-GCM with a scrypt-derived key before database storage. Scan findings, workflow records, email records, listing URLs, and evidence may be stored separately and are not all application-layer encrypted.

Temporary processing: A scan may write a decrypted profile to a permission-restricted, job-specific server directory. The service removes expired job directories and runs recovery cleanup after restarts. We do not claim that processing is memory-only.

Encryption in transit: The public Delist web edge accepts TLS 1.2 and TLS 1.3. Providers and removal targets receive information through their own secured endpoints where available.

Access controls: Customer-facing, internal, and administrative routes use separate authorization checks. Infrastructure and application access are limited to operating the service, but authorized operators may access customer information when support, security, or troubleshooting requires it.

Security assurance: We conduct internal security reviews and maintain automated security tests. As of the effective date, Delist does not publish a SOC 2 report or an independent penetration-test report. See Security & trust for the current status.

5. Browser Extension ("Spam Analyzer")

Our Chrome extension allows users to check suspicious text, links, and webpages for phishing, scams, and social engineering threats. This section describes the extension's data practices specifically.

What the extension sends

• When you right-click selected text and choose "Spam Analyzer", the selected text and the page URL are sent to our API for analysis.
• When you right-click a link, the link URL is sent to our API for analysis.
• When you click "Analyze current page," the visible text content of the page (up to 8,000 characters) and the page URL are sent to our API for analysis.

What the extension does NOT do

• Does not run on any page unless you explicitly trigger an analysis
• Does not read your browsing history
• Does not collect emails, passwords, form inputs, or keystrokes
• Does not track which websites you visit
• Does not send any data in the background without your action
• Does not use cookies or tracking identifiers

Local storage

• Analysis history (verdict, threat level, summary, and timestamp) is stored locally in your browser only. It is never sent to our servers.
• A one-time onboarding flag is stored locally to remember that you've seen the welcome screen.

Permissions

• contextMenus: To add the right-click "Spam Analyzer" menu items.
• activeTab: To read the current page text only when you click "Analyze current page."
• scripting: To extract page text when you explicitly request page analysis.
• storage: To save your local analysis history in the browser.

6. Data Sharing

We share your information only in the following limited circumstances:

• With data brokers and people-search sites, solely to submit removal requests on your behalf (this is the core service)
• With Google Cloud, to host the service and store private removal evidence
• With Stripe, to process payments (Stripe handles card data under its own privacy policy)
• With Mailgun, to deliver account, support, removal, and follow-up email and measure delivery and link clicks where enabled
• With Serper, to run exposure searches using queries that may include your name, location, or other identifying details
• With AI models we choose and configure, run on cloud infrastructure by providers that process the data for us, to analyze relevant identity details, search results, public page content, breaches, and potential threats where those features are used
• With Bright Data, to retrieve public pages; requested URLs and page content may contain personal information
• With breach-data aggregators, to check whether your email appears in known data breaches where that feature is used
• With Google Places, to suggest addresses while you enter address information
• With operational messaging providers, to notify authorized staff and support service reviews. These messages may include contact details and relevant service-message excerpts
• If required by law, court order, or legal process

We do not sell personal information or share it for third-party advertising. Providers receive information for the stated service purpose, and removal targets receive the identifying details needed to locate and suppress a record.

7. Data Retention

• Active accounts: Your encrypted profile and scan history are retained while your account is active.
• Free scans: Your core profile is encrypted as described in Section 4. Scan results are stored separately and are not all application-layer encrypted. We keep your profile and results so you can return to your report. If you never subscribe and have not created an account, we delete a free scan after 12 months with no activity on it, such as a new scan, a return visit to your results, or a checkout. We do not email you before that deletion. You can request deletion from the results page, or from the link in your results email. A person on our team reviews each request, then deletes the scan record, the results, and the profile details saved for that free scan, within 45 days and usually much sooner. Some records may remain: cached lookups that another scan also uses (such as breach checks), anonymous analytics that are not linked to your scan, keyed deletion markers (one-way codes, not your details, that stop deleted data from being added back), a deletion record (the receipt code, dates, and the anonymous summary described below), and legal, payment, and audit records where they exist. If the results page or the email link is unavailable, email privacy@delist.ai. After you subscribe, you can also delete your account from your dashboard settings.
• Paid removals: If you subscribe, we keep the information needed to file and verify opt-out requests while your subscription is active, so we can pursue removal and check for re-listings. If you cancel, we keep it until you delete your account. The encryption boundary in Section 4 applies. You can delete your account at any time from your dashboard settings.
• Account deletion: When you delete your account, the service deletes the profile and linked application records and attempts to cancel active billing. Evidence files are stored separately in a private bucket with a 365-day lifecycle, so those bytes may remain until that lifecycle removes them. Limited payment and tax records, anonymized audit entries, a deletion record with the anonymous summary described below, security records, and keyed anti-reingestion tombstones may remain where legally or operationally necessary.
• After any deletion: We keep an anonymous summary of each deleted record: your state (not your city or ZIP code), the months you signed up, scanned, and subscribed, your plan's billing interval, the campaign that referred you if there was one, and counts such as how many brokers we found you on and how many removals we filed. It has no name, contact details, or street address, and it records your signup, scans, and subscription by month only. We also keep daily totals that count events, not people, such as listings found and removals filed for each broker in each state, and scans for each city and ZIP code. Deleting a record does not lower those totals.
• Operational records: Operational records such as email delivery logs are kept for 24 months, in-app notifications for 12 months, alert and server logs for up to 90 days, and pseudonymous conversion records for 3 years.
• Backups: We take a daily backup of the server disk that holds our database and keep each one for 14 days before it is deleted automatically. Deleted data can remain in a backup until that backup expires.
• Business inquiries: We keep submitted details and related correspondence to respond to requests and coordinate pilots. Inquiry records do not currently have an automatic expiry. Contact privacy@delist.ai to request deletion.
• Payment records: Transaction records required for tax and accounting purposes are retained as required by law.

8. Your Rights

You have the right to:

• Access your personal information (viewable in your dashboard)
• Correct inaccurate information (editable in your profile settings)
• Delete your account (available in dashboard settings)
• Opt out of optional email using the unsubscribe link where provided, or by contacting support; essential account and service messages may still be sent

Depending on your state of residence, you may have additional rights under state privacy laws. Contact us at privacy@delist.ai to exercise them.

9. Cookies

We do not use advertising or analytics cookies. First-party analytics use a random identifier stored for the browser session and send page paths, attribution parameters when present, and allowlisted events to Delist. Once you run a scan or sign in, those session events are associated with your account. Authentication may use secure, httpOnly session cookies; those are functional, not advertising cookies.

10. Children's Privacy

Delist.ai is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@delist.ai and we will delete it promptly.

11. Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of that transaction as permitted by law and/or contract. In such event, we will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page. Your continued use of the service after changes constitutes acceptance.

13. Contact

For questions about this Privacy Policy or our data practices:

• Email: privacy@delist.ai
• General support: support@delist.ai