Terms of Service

By creating an account, paying for a one-time search, or otherwise using IDLeakCheck (the "Service"), you agree to be bound by these Terms of Service and to our Privacy Policy. If you do not agree, do not use the Service.

These Terms form a legal agreement between you and IDLeakCheck, Inc. ("IDLeakCheck", "we", "our"). The version of these Terms in effect at the time of your purchase generally governs that purchase, unless a later version is required by law or is more favorable to you.

You must be at least 18 years old, a U.S. resident, and able to enter into a binding contract under U.S. law. You are responsible for everything that happens under your account, including activity by anyone you share credentials with.

Investigator and Enterprise plans require accurate identification of the contracting entity. Misrepresenting your role or use case is a material breach of these Terms.

IDLeakCheck is built for lawful identity-intelligence work: monitoring your own exposure, family safety, due diligence, fraud investigation, journalism, and enterprise security. You agree to use the Service only for purposes permitted by applicable law, including but not limited to the Fair Credit Reporting Act (FCRA), Gramm-Leach-Bliley Act (GLBA), Driver’s Privacy Protection Act (DPPA), and state-level analogues.

You will not use the Service to make decisions about credit, employment, insurance, housing, or any other "consumer report" purpose under the FCRA. The Service is not a consumer reporting agency. Findings are not consumer reports.

IDLeakCheck is for defensive, lawful identity-intelligence work. The following uses are not permitted under any circumstances, on any plan:

• Doxing — publishing, threatening to publish, or compiling a person’s private information for exposure or coercion.
• Harassment, stalking, intimidation, or threats against any person.
• Fraud, identity theft, account takeover, extortion, or unauthorized access to anyone’s accounts or devices.
• Targeting, surveilling, or compiling information about minors.
• Searching for or compiling information about a person you are not authorized under applicable law to research.
• Adverse decisions about credit, employment, housing, insurance, tenancy, or any other purpose that would make the Service a "consumer report" under the FCRA.
• Compiling personal data for unlawful profiling, targeting, or discrimination — including on the basis of race, religion, national origin, gender, sexual orientation, disability, or political belief.
• Bulk scraping, harvesting, evading rate limits, or bypassing redactions, masking, or access controls.
• Attempting to obtain, infer, or unlock restricted data outside permitted use — including attempts to access full Social Security Numbers, full driver license numbers, or similarly restricted identifiers.
• Probing, load-testing, or otherwise interfering with the Service’s performance, integrity, or security.
• Abusive conduct toward our staff, contractors, service providers, or other users — including threats, harassment, intimidation, discriminatory abuse, racist conduct, hate speech, or repeated bad-faith abuse of support or reporting channels.

If you disagree with any of these, do not use the Service.

We may suspend, restrict, freeze, or terminate access at any time for suspected abuse, policy violations, or risk to the Service. See the Refunds, Cancellations, and Account Enforcement Policy for how refunds (or the lack thereof) interact with for-cause enforcement.

SSN-last-4 lookups, full-DL ingestion, and live social-media presence ingestion are restricted-data features available only on plans where the contracting entity has affirmed an approved use-case category and, where applicable, completed identity verification. We may refuse or revoke access at our discretion.

Restricted-data findings carry per-record audit metadata. You agree to preserve this metadata when exporting and to provide it to us on request in connection with abuse review.

We maintain technical and administrative measures to reduce misuse, including rate limiting, request logging, anomaly and abuse detection, and bot challenges (such as CAPTCHA). The Privacy Policy describes what we log and for how long.

We may investigate suspicious activity and take enforcement action, including restricting features, redacting outputs, suspending API access, or terminating accounts. We may temporarily freeze access while an investigation is in progress.

IDLeakCheck cooperates with valid legal process — including subpoenas, court orders, search warrants, and lawful preservation requests — from U.S. and foreign law enforcement, to the extent required by applicable law.

We may also proactively disclose account information, contact details, search history, IP addresses, device signals, and other relevant records to law enforcement when we observe credible misuse of the Service. That includes — but is not limited to — harassment, threats, doxing, stalking, fraud, identity theft, or extortion directed at any person, including other IDLeakCheck users. If we receive a credible report that a person is being targeted through this Service, we will treat it seriously.

Where reasonable and not legally prohibited, we will notify the affected user before disclosure. We may withhold notice if we believe it would risk evidence preservation, an active investigation, the safety of a person, or violation of a court order.

Use of the Service for harassment or other prohibited conduct is not protected by these Terms. If you target someone through IDLeakCheck, expect us to forward the relevant details to law enforcement.

If your plan includes API access, you are responsible for safeguarding API keys and credentials. Do not share keys publicly or with unauthorized parties; treat them as you would a password.

You will not use the API to scrape, bulk-harvest, or build datasets for resale or redistribution; bypass rate limits, access controls, or redactions; or process more identifiers than your plan permits. We may rotate, revoke, or disable API keys and access where necessary to protect the Service or to enforce these Terms.

Subscription plans renew automatically until cancelled. You may cancel at any time. Cancellation stops future renewals; it does not automatically refund the current billing period. One-time searches are non-refundable once a full report has been opened.

All listed prices are in U.S. dollars and are tax-inclusive where applicable. Receipts will reflect the inclusive amount; we do not add a separate tax line.

We may change prices for new subscription periods with at least 30 days’ notice. Existing periods will not be repriced retroactively.

For the full refunds, cancellations, freeze, and enforcement framework — including for-cause non-refund grounds and chargeback handling — see the Refunds, Cancellations, and Account Enforcement Policy.

Card collection and storage is handled exclusively by Stripe. We never see or store your full card number, CVC, or expiration date — that data lives only with Stripe. By providing payment you also agree to Stripe’s Terms of Service.

If a renewal payment fails, Stripe automatically retries up to 4 times over about 21 days. After that, paid features pause until payment is restored.

How we collect, store, share, and delete your data is described in detail in the Privacy Policy. Your rights under the CCPA, CPRA, and other applicable U.S. state privacy laws are summarized there and are honored regardless of plan. Removal and correction requests for information shown by the Service can be submitted via the Data Removal page.

You may close your account at any time. We may suspend or terminate accounts that breach these Terms, abuse the Service, or trigger fraud signals. Where reasonable, we will give notice before suspension.

On termination we delete your stored identifiers within 30 days from primary storage, with backup expiration following on the standard 90-day rotation. Aggregated, non-identifying telemetry and records we are legally required to retain (such as billing history) may be kept longer.

IDLeakCheck draws on third-party sources whose accuracy, freshness, and availability vary outside our control. The Service is provided "as is" and "as available" without warranty that the Service is fit for any specific purpose, or that it doesn’t infringe someone else’s rights. We do not guarantee that any specific breach corpus, public-records source, or social platform will be available at any given moment.

To the maximum extent permitted by law, IDLeakCheck’s aggregate liability arising from or related to the Service will not exceed the greater of (a) the amount you paid us in the 12 months before the event giving rise to the claim, or (b) USD $100.

Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for any loss of data, profits, or revenues.

This Agreement is governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles. The exclusive forum for any dispute not subject to arbitration is the federal or state courts located in San Francisco County, California.

Binding individual arbitration. Except for (i) claims that may be brought in small-claims court, (ii) claims for injunctive or other equitable relief to protect intellectual property or confidential information, and (iii) disputes for which you have validly exercised the opt-out below, any dispute arising out of or relating to this Agreement, the Service, or your account will be resolved by binding individual arbitration administered by JAMS under its Comprehensive Arbitration Rules and Procedures (or, where applicable, its Streamlined Rules) in effect at the time of filing, before a single arbitrator, seated in San Francisco, California. The Federal Arbitration Act governs the interpretation and enforcement of this section.

Class-action waiver. YOU AND IDLEAKCHECK AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, MASS, OR REPRESENTATIVE PROCEEDING. The arbitrator may not consolidate more than one person’s claims and may not preside over any form of representative or class proceeding. If a court of competent jurisdiction determines that this class-action waiver is unenforceable as to a particular claim, that claim — and only that claim — will be severed from arbitration and proceed in court; the remainder of this arbitration agreement remains in force.

Mass-arbitration coordination. If 25 or more substantially similar arbitration demands are filed against IDLeakCheck within any 30-day window, the parties agree to follow the JAMS Mass Arbitration Procedures and Guidelines (or the then-current equivalent). Bellwether cases will be selected and resolved first; all other cases will be administratively stayed pending bellwether outcomes.

30-day opt-out. You may opt out of this arbitration agreement (including the class-action waiver and the mass-arbitration coordination provisions) by sending written notice to legal@idleakcheck.com within 30 days of the date you first accepted this Agreement (or, for material changes to this Section, within 30 days of the effective date of those changes). Your notice must include your full name, the email address associated with your account, and a clear statement that you wish to opt out of arbitration. Opt-out is one-time, irrevocable, and applies to all subsequent versions of this Agreement.

Small-claims carveout. Either party may bring an individual action in a small-claims court of competent jurisdiction for any dispute within that court’s monetary and subject-matter jurisdiction, in lieu of arbitration.

Confidentiality of arbitration. Except as required by law or to enforce an award, the parties will maintain the confidentiality of any arbitration proceeding, including the existence of the dispute, the substance of any submissions, and the award.

Severability. If any provision of this Section is held invalid or unenforceable, the remaining provisions will remain in full force, except that the class-action waiver in the preceding paragraph is non-severable as set out above.

We may update these Terms. Material changes will be announced at least 30 days in advance via the email on file and via an in-product banner. The "Last updated" date below always reflects the most recent revision. The version of these Terms in effect at the time of your purchase generally governs that purchase, unless a later version is required by law or is more favorable to you.

For questions about these Terms, abuse reports, or removal/correction requests, please use the Data Removal page. Notices required under these Terms must additionally be sent to legal@idleakcheck.com and to our registered agent on file with the Delaware Division of Corporations.