Privacy Policy

Last updated: 19 July 2026

Account data — your email address and a bcrypt hash of your password. We never store plaintext passwords.
Monitoring data — the personal information you explicitly ask us to monitor (names, phone numbers, email addresses, usernames, street addresses). You enter this yourself and can delete it anytime in the My Data tab.
Scan results — public URLs, page titles and snippets returned by search engines that match your monitoring queries, kept so you can review them.
Billing data — payments are processed entirely by Stripe. We store only your Stripe customer ID and subscription status, never card numbers.

Run daily searches for your monitored data across search engines and data-broker sites.
Send you alerts and digest emails about new findings (you control frequency in Config).
Check your monitored email addresses against Have I Been Pwned for known breaches.
Verify removal requests by re-checking broker pages.

Search engines and broker sites receive search queries containing the data you asked us to monitor — that is the core function of the service.
Stripe processes payments (stripe.com/privacy).
Resend delivers our emails to you.
Have I Been Pwned receives breach lookups for your monitored email addresses.
We do not sell, rent, or share your data with anyone else. Ever.

Export — download everything we hold about you as JSON from Config → Account → Export my data.
Delete — remove individual PII items anytime, or delete your entire account and all associated data from Config → Account → Delete account. Deletion is immediate and permanent.
Rectify — edit your monitored data anytime; contact us to change your account email.

Data is kept while your account exists. Deleting your account removes all personal data and scan results.
Connections are encrypted (HTTPS/TLS). Passwords are bcrypt-hashed. Sessions use httpOnly cookies.
Data is hosted on Railway (EU West region) with a managed Postgres database.

We use a single strictly-necessary authentication cookie. No tracking, analytics, or advertising cookies.

For privacy questions or requests, email privacy@pii-monitor.app.