Privacy Policy

Last updated: May 2026

1. What Data We Collect

To submit removal requests on your behalf, we need:

• Your full legal name — to match records on data broker sites
• Your current address — required by most brokers for identity verification
• Your date of birth — used to locate and verify your records
• Previous addresses (optional) — helps find older listings
• Email address (optional) — only if you want status updates
• Monero transaction ID — to confirm payment without identifying you

We do NOT collect:

• Your real identity as a customer (Monero payments are anonymous)
• Credit card or banking information (we accept only cryptocurrency)
• IP addresses or browsing history
• Device information or tracking data
• Social media profiles or online activity

2. How We Use Your Data

Your information is used for one purpose only: submitting opt-out and deletion requests to data brokers on your behalf.

Specifically, we:

• Search for your listings on data broker websites
• Fill out opt-out forms using your information
• Send GDPR Article 17 or CCPA deletion letters via email
• Confirm removals and track status

We never use your data for marketing, profiling, analytics, or any purpose beyond removal requests.

3. Data Sharing

Your information is shared only with the data brokers we are removing you from. This is necessary — we cannot submit an opt-out request without providing them the data they already hold about you.

We do NOT share your data with:

• Third-party analytics services (we use no tracking scripts)
• Advertisers or marketers
• Other customers or users
• Governments, unless legally compelled by court order (see Warrant Canary)

4. Data Retention

We delete your data within 48 hours of completing your removal requests.

Here's our exact timeline:

• Day 0: You submit your intake form
• Days 1–30: We submit opt-out requests to brokers (most respond within 30 days)
• Day 30–45: We verify removals and log final status
• Day 45–48: We delete all your personal information from our systems

For subscription customers (monthly/annual plans), we retain only the minimum data needed to re-submit requests every 45 days. You can request full deletion at any time by cancelling your subscription.

5. Security Measures

We protect your data using:

• Encrypted storage — all data at rest is encrypted
• Alias email system — broker confirmations go to forwarding addresses, not our real inbox
• No third-party scripts — no Google Analytics, no cookies, no tracking pixels
• Tor accessibility — you can access our site and services via .onion address
• Minimal access — only the operator handling your case sees your data

6. Your Rights

Under GDPR and CCPA, you have the right to:

• Access your data — request a copy of what we hold
• Correct your data — update inaccurate information
• Delete your data — request immediate deletion at any time
• Withdraw consent — cancel your removal request mid-process
• Export your data — receive a machine-readable copy

To exercise any of these rights, contact us at the email listed on our main site.

7. Cookies and Tracking

We use zero cookies. No tracking scripts. No analytics. No session cookies. Nothing.

Your visit to our site is completely anonymous. We have no way of knowing you were here unless you choose to contact us or submit a removal request.

8. Payment Privacy

We accept only Monero (XMR) for payment. Monero transactions are:

• Fully anonymous — no public ledger of transactions
• Untraceable — sender and receiver addresses are hidden
• Private by default — transaction amounts are encrypted

We never link your payment to your identity. The Monero transaction ID you provide confirms payment without revealing who you are.

9. Authorised Agent Status

When you authorise Nullify to submit removal requests on your behalf, you grant us legal standing under:

• GDPR Article 17 — Right to erasure (EU/UK)
• CCPA Section 1798.120 — Right to opt out of sale (California)

This authorisation is limited to data removal purposes only. We cannot access your accounts, make purchases, or act on your behalf in any other capacity.

10. Children's Privacy

Our service is not intended for anyone under 18. We do not knowingly collect data from minors. If we discover we have processed a minor's data, we delete it immediately.

11. International Users

Nullify operates globally. If you are outside the EU or US, note that:

• Your data may be processed in jurisdictions with different privacy laws
• GDPR and CCPA protections may not apply to you directly
• We still follow our no-log, minimal-retention policy regardless of your location

12. Changes to This Policy

We will update this policy if our practices change. The "Last updated" date at the top reflects the most recent version. We recommend checking this page periodically.

Significant changes will be announced on our main site.

13. Warrant Canary

We publish a warrant canary that is updated monthly. If we are ever compelled by law to hand over user data or compromise our no-log policy, we will stop updating the canary. Absence of an update is your signal.

14. Contact

For privacy questions, data requests, or concerns, contact us at the email address listed on our main site. We respond within 48 hours.