SECURITY & PRIVACY, 3 MIN READ
What we store, what we don’t.
Profile data, queries, and findings are stored. Full SSNs, payment card details, and untyped query telemetry are not.
What we store
- Account info — email, hashed password, 2FA secret, billing identifiers
- Profile data — the identifiers you add to monitor (emails, phones, addresses, SSN last 4)
- Search history — your queries and the candidates returned, retained 90/180 days by plan
- Findings — breach hits, public records, social-media presence linked to your subjects
- Audit log — append-only record of every search, view, and export
What we don’t store
- Full SSN — only the last 4 digits, ever
- Card numbers — Stripe holds those; we see only the last 4 and brand for receipts
- Untyped telemetry — we don’t fingerprint your browser or correlate sessions across visits
- Anything from anyone we don’t have authorization to lookup