Privacy Policy
PersProtect (“we”, “us”) is a service of NEXPANSE CORP., 8 The Green, STE A #14063, Dover, DE 19901, USA — the data controller for the personal information described in this policy. We help people in the United States remove their personal information from data-broker and people-search sites and monitor for data breaches. This policy explains what we collect, why, who we share it with, and the choices you have.
Information we collect
- Account information — your email address and a securely hashed password.
- Contact details you provide — phone number and the names/addresses of people on your plan, used to find and remove matching records.
- Quiz responses — the answers you give in our assessment, used to build your exposure profile and tailor your plan.
- Billing information — handled by Stripe. We never see or store your full card number; we keep only a Stripe customer reference.
- Usage data — basic logs needed to operate and secure the service, including the date and time you sign in to your dashboard, the IP address and the browser you signed in from. We keep these sign-in records for up to 400 days and use them to secure your account and, if a payment on your account is ever disputed with a bank, to show that the account was used.
How we use your information
- To create and secure your account and provide the service.
- To search broker and breach databases for your information and request its removal.
- To send service messages (verification, alerts, removal progress, billing notices).
- To process payments and manage your subscription.
Connecting your mailbox (Inbox Guard)
Inbox Guard is optional. If you choose to connect a Gmail account, you grant us access through Google’s own consent screen — we never ask for or receive your email password, and you can withdraw access at any time.
- What we request — the
gmail.metadatapermission only. It gives us message headers: who sent a message, its subject, when it arrived, and the technical headers that show whether the sender is genuine (SPF, DKIM, DMARC) and offer an unsubscribe link. - What we cannot see — the body of your messages, and any attachments. We do not request permission to read them, so they are not available to us even in principle.
- What we do with it — we detect sign-in and security notices from your services, flag messages that impersonate them, and build the list of mailing lists you can unsubscribe from.
- What we keep — only what we found: the mailing lists you’re on, and the alerts we raised (including the sender and subject of a message we are flagging, so you can recognise it). Message headers are processed in memory during a scan and are not stored.
- Disconnecting — the “Disconnect” button revokes our access at Google and deletes everything we derived from your mailbox. You can also revoke access directly in your Google Account.
Limited Use. PersProtect’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use this data only to provide the Inbox Guard features described above; we do not use it for advertising or any form of targeting; we do not sell or transfer it to third parties; we do not use it to train generalised machine-learning models; and no human at PersProtect reads it, except with your explicit consent, where necessary for security purposes, to comply with applicable law, or in aggregated and anonymised form.
Who we share it with
We share the minimum necessary with service providers who work on our behalf:
- Stripe — payment processing and subscription billing.
- Email provider — to deliver verification and notification emails.
- Data-removal vendors — to submit and confirm removal requests on your behalf.
We do not sell your personal information.
Your rights
You may access, correct, export, or delete your personal information, and you may opt out of marketing messages at any time. To exercise these rights, contact us at the address below.
California residents (CCPA/CPRA)
If you live in California, you have additional rights to know, access, correct, delete, and opt out of any sale or sharing of your personal information. We do not sell or share your personal information. See our Legal Disclosures for details and how to exercise these rights.
Data retention
We retain your information while your account is active and for up to 30 days after you close it or your subscription ends, except where a longer period is required by law.
Cookies
We use only the cookies necessary to keep you signed in and to operate the service. We do not use third-party advertising cookies.
Contact
Questions about privacy? Email legal@persprotect.com or write to NEXPANSE CORP., 8 The Green, STE A #14063, Dover, DE 19901, USA.