Privacy Policy
Last updated: January 23, 2026
TL;DR - The Short Version
- We never sell your personal data to anyone. Ever.
- Quick Scans are ephemeral - we don't store your inputs.
- All stored data is encrypted with AES-256.
- You can request deletion of your data anytime.
1. Information We Collect
We collect information you provide directly to us when using UnlistIN:
- Account Information: Email address, name, and authentication credentials when you create an account.
- Profile Data: Name variations, addresses, phone numbers, and other identifiers you provide for scanning and removal.
- Scan Results: Information found on data broker sites during scans (stored encrypted).
- Payment Information: Processed securely through Stripe (global) and Razorpay (India) — we never store your full card details.
2. How We Use Your Information
We use your information solely to provide our privacy protection services:
- Scanning data broker sites to find your personal information
- Submitting removal requests on your behalf
- Generating removal evidence and proof bundles
- Monitoring for data re-listings
- Communicating service updates and alerts
- Improving our service and developing new features
3. Data Storage & Security
AES-256 encryption at rest, TLS 1.3 in transit
Row-level security (RLS) ensures data isolation
GDPR, CCPA, DPDP compliant · Enterprise security
Comprehensive logging with tamper-evident records
4. Data Sharing
We never sell your personal data.
We only share your information in these limited circumstances:
- Data Brokers: To submit removal requests, we must provide identifying information to the broker.
- Service Providers: Trusted partners who help us operate (cloud hosting, payment processing).
- Legal Requirements: When required by law or to protect rights and safety.
5. Automated & AI Processing
To find and remove your data at scale, UnlistIN uses automated systems and artificial intelligence (AI). This includes:
- Automated scanning & removal: software agents search data-broker sites and submit removal requests on your behalf.
- AI content analysis: we use third-party AI providers — including Anthropic and OpenAI — to match search results to you, verify removals, and classify broker responses. Regional AI providers may be used to meet data-residency requirements (e.g. Sarvam AI for India / DPDP).
- Data minimization: personal identifiers are redacted or minimized before text is sent to AI providers wherever possible, and providers are bound by our Data Processing Agreement not to train on your data.
These systems assist our decisions but do not make legally significant decisions about you without the ability for human review. You can request human review of any automated action, and you can object to automated processing, by contacting us. For the full list of AI subprocessors, see our Data Processing Agreement.
6. Your Rights
You have full control over your data:
Request a copy of all data we have about you
Update or correct inaccurate information
Request complete deletion of your account and data
Export your data in a standard format
Unsubscribe from marketing communications anytime
Limit how we process your information
7. Data Retention
- Quick Scan Data: Ephemeral - not stored after scan completes
- Account Data: Retained while your account is active
- Scan Results: Retained for the duration of your subscription + 30 days
- Evidence Bundles: Retained for 7 years for legal compliance
- After Deletion: Data is purged within 30 days of account deletion request
9. Contact Us
For privacy-related questions or to exercise your rights: