PersProtectBack to home

Privacy Policy

Effective June 2026 · Updated September 2026

PersProtect (“we”, “us”) is a service of NEXPANSE CORP., 8 The Green, STE A #14063, Dover, DE 19901, USA — the data controller for the personal information described in this policy. We help people in the United States remove their personal information from data-broker and people-search sites and monitor for data breaches. This policy explains what we collect, why, who we share it with, and the choices you have.

Information we collect

  • Account information — your email address and a securely hashed password.
  • Contact details you provide — phone number and the names/addresses of people on your plan, used to find and remove matching records.
  • Quiz responses — the answers you give in our assessment, used to build your exposure profile and tailor your plan.
  • Billing information — handled by Stripe. We never see or store your full card number; we keep only a Stripe customer reference.
  • Usage data — basic logs needed to operate and secure the service, including the date and time you sign in to your dashboard, the IP address and the browser you signed in from. We keep these sign-in records for up to 400 days and use them to secure your account and, if a payment on your account is ever disputed with a bank, to show that the account was used.

How we use your information

  • To create and secure your account and provide the service.
  • To search broker and breach databases for your information and request its removal.
  • To send service messages (verification, alerts, removal progress, billing notices).
  • To process payments and manage your subscription.

The PersProtect mobile app

You can check an email address without creating an account or confirming that address. To search data-broker sites, you provide your first and last name, birth year, US state and city, and optionally a phone number. We send the matching profile to Array to run the requested scan. The app shows categories of information found, not the underlying broker addresses, phone numbers, relatives' names or links to personal listings. A mobile scan does not enroll you in a removal subscription.

Mobile profiles and conversations are associated with the app installation and the entered email. Entering the same email on a different installation does not recover another installation's private history. We use Apple App Attest and an installation credential to protect scan and training requests, enforce usage limits and prevent replay. An installation identifier is not a permanent hardware identifier.

When you use the mobile assistant or scam drills, your messages and the context needed to respond are processed by our AI service providers, including OpenAI for conversation and TypeSafe for interpreting practice actions. Context may include profile details you supplied, known breach information and broker exposure categories. Raw broker listing values are not included in this AI context. Never enter real passwords, payment details, Social Security numbers or verification codes in a drill.

The ten-question security quiz is different from the website assessment: its questions, answers and progress stay on your device. Basic feature events, such as starting or completing the quiz, may be collected without your answers or email. Call and SMS filtering uses an on-device blocklist; the app does not upload SMS contents or request your contacts. This version does not send push notifications.

You can request deletion from Settings in the app. We clear the current mobile identity's profile, conversations, practice history and scan results without deleting a separate website account or another installation's data. Inactive free mobile profiles are cleared after 180 days; drill histories are retained for up to 90 days. We retain usage and cost counters needed to prevent deletion from resetting scan limits, without keeping the deleted profile or message contents in those counters.

Connecting your mailbox (Inbox Guard)

Inbox Guard is optional. If you choose to connect a Gmail account, you grant us access through Google’s own consent screen — we never ask for or receive your email password, and you can withdraw access at any time.

  • What we request — the gmail.metadata permission only. It gives us message headers: who sent a message, its subject, when it arrived, and the technical headers that show whether the sender is genuine (SPF, DKIM, DMARC) and offer an unsubscribe link.
  • What we cannot see — the body of your messages, and any attachments. We do not request permission to read them, so they are not available to us even in principle.
  • What we do with it — we detect sign-in and security notices from your services, flag messages that impersonate them, and build the list of mailing lists you can unsubscribe from. If you use the assistant in your dashboard, it can answer questions about these findings (see “The assistant and your mailbox” below).
  • What we keep — only what we found: the mailing lists you’re on, and the alerts we raised (including the sender and subject of a message we are flagging, so you can recognise it). Message headers are processed in memory during a scan and are not stored.
  • How we protect it — the access tokens Google issues us are encrypted at rest (AES-256-GCM) and all data travels over encrypted connections (TLS). Tokens are used only by the server process that scans your mailbox; they are never sent to your browser or to any other party.
  • How long we keep it — while your mailbox stays connected. Disconnecting deletes it straight away; closing your account deletes it within the retention period described below.
  • Disconnecting — the “Disconnect” button revokes our access at Google, erases our tokens and deletes everything we derived from your mailbox. You can also revoke access directly in your Google Account.

The assistant and your mailbox. Your dashboard includes an AI assistant. When your mailbox is connected and you write to the assistant, we send our AI provider (OpenAI) a short summary of what Inbox Guard found so the assistant can answer you: the connected address, counts of subscriptions and alerts, up to 12 of your mailing lists (sender name and address, how often they write) and up to 10 recent alerts (sender address, subject, date and the reason we flagged it). The provider uses this only to generate the reply you asked for. It processes the data on our behalf under terms that do not allow it to use the data to train its models. The assistant’s replies are saved in your chat history, which keeps only your most recent messages.

Limited Use. PersProtect’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs, including Gmail, will adhere to the Google User Data Policy, including the Limited Use requirements. Specifically: we use this data only to provide the Inbox Guard features and assistant answers described above; we do not use it for advertising or any form of targeting; we do not sell it, and we transfer it only to the providers that host our service and to our AI provider, only to provide those features, or as required by law; we do not use it to develop, improve or train AI or machine-learning models, and we do not transfer it to any service that would; and no human at PersProtect reads it, except with your explicit consent, where necessary for security purposes, to comply with applicable law, or in aggregated and anonymised form.

Who we share it with

We share the minimum necessary with service providers who work on our behalf:

  • Stripe — payment processing and subscription billing.
  • Email provider — to deliver verification and notification emails.
  • Data-removal vendors — to submit and confirm removal requests on your behalf.
  • Hosting providers — to run the service and store its data.
  • AI provider (OpenAI) — to generate replies in the dashboard assistant. It receives only what the assistant needs to answer you and may not use it to train its models.

We do not sell your personal information.

Your rights

You may access, correct, export, or delete your personal information, and you may opt out of marketing messages at any time. To exercise these rights, contact us at the address below.

California residents (CCPA/CPRA)

If you live in California, you have additional rights to know, access, correct, delete, and opt out of any sale or sharing of your personal information. We do not sell or share your personal information. See our Legal Disclosures for details and how to exercise these rights.

Data retention

For website accounts, we retain your information while your account is active and for up to 30 days after you close it or your subscription ends, except where a longer period is required by law.

Cookies

We use only the cookies necessary to keep you signed in and to operate the service. We do not use third-party advertising cookies.

Contact

Questions about privacy? Email legal@persprotect.com or write to NEXPANSE CORP., 8 The Green, STE A #14063, Dover, DE 19901, USA.