Skip to content
Free Scan
Legal

Privacy Policy

How Erase.com collects, uses, protects and discloses your personal information.

Last updated: November 8, 2026

This policy explains how Erase Technologies, LLC, doing business as PrivacyAI ("Erase", "we", "us"), 3050 Biscayne Boulevard, Suite 400, Miami, FL 33137, handles personal information on the PrivacyAI website, in the free scan and in the PrivacyAI data broker removal service. It applies only to PrivacyAI. Other services offered on erase.com have their own policy.

The short version

  • We use your information only to carry out your privacy requests, to verify them and to prevent fraud, plus what it takes to run your account and bill you and what the law requires.
  • We do not sell it. We do not share it for advertising. We do not use it to market anything to you, and it is not available to the rest of Erase's business for marketing or sales.
  • Our public website, and the pages of your dashboard where you sign up and pay, use Google and Meta analytics and advertising cookies only if you allow them. Until you do, they do not load at all, and they never load if your browser sends Global Privacy Control. They never receive anything you type, anything from your free scan or anything from the rest of your dashboard. If you subscribe, they learn that you did, the plan and its price, but nothing from your account, such as your name or email address. You can turn them off at any time from "Your Privacy Choices", at the bottom of every page of our public website.
  • To remove a listing, we have to give some of your details to the site that holds it. We send what that site's process requires.
  • We delete your data on the published schedule below, without you having to ask.

What we collect, why, and for how long

This is our notice at collection. Each row is a category of information, where it comes from, what we do with it and how long we keep it.

InformationWhere it comes fromWhat we use it forHow long we keep it
Free scan details: the name and city you enter, and your masked resultsYou, and the sites searchedRunning the scan you asked for and showing you the resultsDeleted within 24 hours
Free scan record: a keyed scramble of your IP address, the sites searched, timestamps, and a record that the terms box was tickedYour browserLimiting scans per connection, preventing misuse, counting how many scans run, and proof of acceptanceThe IP scramble and site list: 7 days. The acceptance record has no name or IP in it and stays with our audit records
Account: email address, name, and sign-in detailsYou, or Google if you sign in with itYour login, service emails, supportUntil your account is deleted (see below)
Your profile: names you have used, current and past addresses, phone numbers, email addresses, and date of birth or birth year if you give itYouFinding your listings and filing requestsWhile your subscription is active, then deleted 90 days after it ends
Your listings: the site, the link, what the listing shows and how well it matched, and each request's statusBroker and people-search sites, and search engine resultsFinding your listings, deciding if they are yours, filing requests, reporting to youWhile your subscription is active, then deleted 90 days after it ends
Evidence: screenshots and page copies from filing a requestBroker and people-search sitesChecking that a request went through, and fixing it if it did notEncrypted, and deleted 30 days after it was made, or when your account is deleted if sooner
Messages from sites: emails sent to the addresses we use for your requestsBroker and people-search sitesCompleting verification, answering sites, tracking your requestsContent deleted 30 days after receipt, or when your account is deleted if sooner. We keep a status line, without the content
Phone verification recordingsAutomated phone systems at sitesCompleting a site's phone verification, and as evidenceWe do not currently use phone verification on any site. If we do, we will record automated systems only, and delete recordings within 30 days
Signed authorization: the document version, your typed name, the date and time, your IP address and browserYou and your browserProving to sites, and if necessary to a court or regulator, that you authorized usEncrypted, for the life of your account and 6 years after it is deleted
Request log: which site, what kind of request, status and dates, with your identifying details removed once your account is deletedOur systemsShowing what we did, and defending or bringing legal claimsKept with no name or contact details in it once your account is deleted
Billing: your name, email, plan, invoices, and card type, last four digits and expiry. Your full card number goes to our payment provider and never reaches our serversYou and our payment providerTaking payment, refunds, tax and accountingAs long as tax and accounting law requires, generally up to 7 years, in our billing system
Support messagesYouHelping you, and keeping a record of what you asked forAs long as needed to resolve your request and defend legal claims
Technical data: IP address, browser and pages requested, in server logsYour browserSecurity and keeping the site workingShort-lived logs, removed on our hosting providers' ordinary cycle
Website analytics and advertising, only if you allow them: pages you visit on our public website and on the sign-up and payment pages of your dashboard, the page that sent you there, links and buttons you click, whether a free scan started and finished (not what you searched or found), whether you created an account (and whether with an email address or Google), started a checkout and subscribed (the plan, its price, what was charged, and a random order number that is not linked to your account), your browser and device, IP address and the rough location it suggests, and cookie identifiersYour browser, through Google's and Meta's tagsAnalytics: counting visits and sign-ups, and improving the site. Advertising: measuring whether our ads work, including whether they lead to subscriptions, and showing our ads to people who have visitedGoogle Analytics keeps it for up to 14 months, after which only totals remain. Google's and Meta's advertising systems keep it under their own policies. The cookies last as the table under "Cookies and tracking" says
Your cookie choice: which kinds of cookies you allowedYouRemembering your choice, on our public website and on the sign-up and payment pages of your dashboardA year, in your browser

Copies in routine backups are removed as those backups age out, on our providers' ordinary cycle.

When your subscription ends. We delete your account and everything that goes with it 90 days after your subscription ends, without you having to ask, and email you a week before we do. If you sign up and never subscribe, the same applies 90 days after sign-up.

We do not ask why you want your information removed, and we ask you not to tell us about health, domestic violence or similar matters in messages to us unless you need to. If your safety is at stake, tell us only what we need to help.

How we use your information

As your authorized agent, we may use your personal information, and information we collect from or about you, only to fulfill your requests, to verify them and to prevent fraud. That includes:

  • searching sites for listings about you and deciding whether a listing is yours, including from details on other listings matched to you;
  • filing requests, answering sites and completing their verification steps;
  • checking again and filing again if a listing stays up or comes back; and
  • reporting to you in your dashboard and by email.

Separately from that agency work, we use the account and billing details you give us to run your account, take payment and support you, to secure our systems, and to meet legal and tax obligations and bring or defend legal claims.

We send service emails about your subscription, your removals and your account. Reminder and progress emails have an unsubscribe link. We do not use your information to advertise to you, or to sell you other Erase services. The only advertising use of anything is the cookies you allow on our public website and on the sign-up and payment pages of your dashboard, as described under "Cookies and tracking": nothing from your profile, listings or free scan goes into it, and from your account only that you signed up and subscribed, to which plan and at what price. If you want help from Erase with something else, such as a news article, that is for you to start, by following a link or contacting us.

What we send to sites

  • We send what each site's process requires so it can find you and act on the request. That can include your name, address, phone number, email address or date of birth. We use email addresses and phone numbers we control wherever a site accepts them. We send your full date of birth only to a site whose process requires it.
  • A site may learn something new. A request can give a site details it did not already hold. Some sites require a full date of birth, for example, and may not already have yours. You can choose not to give us your date of birth, but we cannot file at those sites without it.
  • Sites may keep what they receive, under their own policies, for example to keep you suppressed. Their handling is not under our control.
  • Details from your listings. Where a site's form requires a detail you did not give us, such as a street address, we may use one shown on listings matched to you.
  • Your signed authorization. Sites that ask for proof that we may act for you receive a copy with your name, your city, your signature and the date. It does not include your date of birth, IP address or browser.

Giving a site your details at your direction, to carry out your request, is not a sale or sharing of personal information.

Dedicated email addresses and phone lines

We use email addresses and phone numbers we control for your requests. Sites' replies come to us, not you, and may contain more information about you. We use that information only to fulfill your requests, to verify them and to prevent fraud, and we keep it as the table above says.

If a site's process needs a phone call, we record automated systems only. A person should never be on the line. If a person does answer, we stop recording or announce it.

Other people's information

Listings often show relatives' and associates' names, ages and addresses. We do not look for that information, but it can appear in what we handle. We process it only as far as needed to identify your listings, and delete it with the listing data and evidence on the schedule above. If you are one of those people, you can make your own privacy request to us.

Who else receives your information

We never sell or share for advertising the information you give us or that we collect to remove your listings, and no one pays us for personal information. The one exception is the advertising cookies on our public website and on the sign-up and payment pages of your dashboard. If you allow them, Google and Meta receive information about your visit that they can also use for their own purposes. Some state laws count that as a "sale" or "sharing" even though no money changes hands, so we treat it as both: it is off unless you turn it on, and you can opt out at any time (see "Cookies and tracking"). Apart from that, we have not sold or shared personal information in the past 12 months. We give personal information only to:

  • The sites you have asked us to contact, at your direction, as described above.
  • Google and Meta, if you allow advertising cookies. They receive what those cookies collect, as described under "Cookies and tracking", and use it under their own policies, including to show you ads elsewhere. From your account they receive only that you signed up and subscribed, the plan and its price, and nothing from your profile, listings or free scan.
  • Service providers who work for us:
What they doWhoWhat they handle
Hosting and databaseVercel, Neon, DigitalOceanAll of the above, encrypted where this policy says so
Encryption key storageGoogle CloudOur encryption keys, not customer records
Sign-inClerk (and Google, if you sign in with it)Account details
Billing and paymentsZoho (Billing, Payments, Books)Billing details. Erase's finance team uses this system for all of its services
EmailResend, CloudflareService emails to you, requests to sites, and sites' replies
PhoneTwilioOur phone numbers, calls and any recordings
Bot checksCloudflare TurnstileYour browser and IP address, on pages with the scan form
Cookie choicesCloudflareThe page address, your browser and device, your IP address and your cookie choice, on our public website
Website analyticsGoogle (Tag Manager, Analytics)What the website analytics row above lists, if you allow analytics. Tag Manager, the script that runs Google's and Meta's tags, loads only after you allow analytics or advertising
AI modelAnthropicSome sites' messages and some details of possible matches, as described under "AI providers" below
Search resultsDataForSEOThe name and city in a search, for sites we look up through search engine results
Network connectionsProxy network providersCarry our connections to sites, including what we send to them
Automated security checks on sites' formsCAPTCHA servicesA site's address and its check, not your personal details
  • Staff and contractors. Our staff and contractors can access your information only where their job needs it, such as handling an exception or a support request. Some may be outside the United States, and are bound by written terms on use, security and deletion.
  • Elsewhere in Erase, for support only. We may mark active subscribers in our customer records so that our front desk can direct your call to the right team. The mark says only that you are an active subscriber, is removed when your subscription ends, and is not used by sales or for marketing. Your profile and listings are not shared with the rest of Erase's business.
  • Legal and safety. We may disclose information where the law requires it, such as in response to a subpoena, or where needed to protect someone's safety or to bring or defend legal claims.
  • A change of ownership. If this business is sold or merged, your information may pass to the successor, which stays bound by this policy for that information. We will tell you first.

When we delete your information, we tell our service providers to delete it too, where they hold a copy that we do not delete ourselves.

AI providers

We use Anthropic's Claude model, as our service provider, for two things. Our own rules handle everything else, and Claude never sees it.

  • Reading some messages from sites. When a site emails us about your request and none of our rules recognise the message, Claude reads it and suggests what it means. Before it goes, we remove the text of our own request that the site quoted, and we mask your names, the names of relatives we hold or that the listing shows, your phone numbers, email addresses and street addresses, dates, long numbers and the paths of links. We mask what we can recognise: a detail a site wrote in an unusual way could still get through.
  • Checking possible matches. When a listing might be yours but we are not sure, Claude reads it and says how likely that is. It receives your names, your age, the cities you gave us and the names of relatives you gave us, the same kinds of details from that listing, and what other listings matched to you show of relatives, ages and cities. It is told whether a phone number, email address or street on the listing matches yours, but not the number, address or street, and it does not receive your date of birth.

Claude does not decide anything about your removals. It cannot send anything to a site, file a request or change a request's status, and it writes none of our replies to sites. The one thing it can do without a person is mark a message that plainly needs no action, such as an automatic acknowledgement, as needing none. Whether a possible match is yours stays a person's decision: yours, or one of ours. We do not currently show you Claude's view of a match or act on it.

Anthropic works under terms that bar it from training its models on your information. Its terms say it deletes what we send within 30 days, and may keep it longer if the law requires or if the content is flagged under its usage policy, in which case it can keep it for up to 2 years.

Free scan

The free scan is only for looking yourself up. When you run one, we send the name and city you enter to the sites being searched and, for some sites, to a search results provider, through our network providers. We do not ask for your email address or phone number, and there is no account. We show you masked results, and delete what you entered and those results within 24 hours. A temporary cookie holds your scan's ID so that only your browser can open the results.

Cookies and tracking

Your dashboard (app.erase.com) uses only the cookies it needs to work, except on the pages where you sign up and pay: creating your account, the payment step and the confirmation after it. There, if you allowed them on our public website, the same Google and Meta tags run, so that we can tell whether our ads lead to sign-ups and subscriptions. The dashboard has no cookie banner of its own: it follows the choice you made on our public website (privacyai-choices, below), and if you have not made one, nothing loads. Leaving those pages for the rest of your dashboard reloads the page without the tags, so they never see your authorization, your information or your listings.

Our public website (privacyai.erase.com) uses the cookies it needs to work and, only if you allow them, analytics and advertising cookies from Google and Meta. Until you allow them, analytics and advertising do not load at all, and neither does Google Tag Manager, the script that runs them.

Cookie or storageSet byWhat it doesHow long it lasts
Needed for the site to work (always on)
Sign-in session (such as __session and __client_uat)Clerk, on app.erase.comKeeps you signed in to your dashboard, securelyUntil you sign out or your session expires
free_scanUsHolds your free scan's ID, so only your browser can open its results24 hours
Bot checkCloudflare TurnstileChecks that a person, not a bot, is using the scan formOnly as long as the check needs
privacyai-consentCloudflare, for our cookie bannerRemembers which kinds of cookies you allowedA year
cf_zaraz_clientCloudflare, for our cookie bannerPart of the cookie banner. It holds no identifierA year
privacyai-choicesUs, for erase.comCarries the choice you made on our public website to the sign-up and payment pages of your dashboard. It holds only which kinds of cookies you allowedA year
Analytics (only if you allow it)
_ga and _ga_…Google AnalyticsTell visits apart, so we can count visitors and see which pages and buttons they useUp to 2 years from your last visit
erase:scan-events, in your browser's storageUsNotes which free scan steps this browser has already counted, so a reload is not counted twice. Kept only while analytics or advertising is on. It never leaves your browser24 hours
erase:sign-up, in your browser's storageUsNotes that this browser already counted your new account, so a reload is not counted twice. Kept only while analytics or advertising is on. It never leaves your browserUntil you close the tab
privacyai-purchaseUs, on app.erase.comHolds what you just subscribed to (the plan, its price and a random order number) for the moment it takes to count the subscription, then is deleted. Set only while analytics or advertising is onSeconds, and 10 minutes at most
Advertising (only if you allow it)
Such as _gcl_au and _gcl_aw, and Google's own advertising cookiesGoogle AdsMeasure whether our Google ads bring people here, and let us show our ads to people who have visitedOurs: typically 90 days. Google's: under Google's policies
Such as _fbp and _fbc, and Meta's own cookiesMetaMeasure whether our Facebook and Instagram ads bring people here, and let us show our ads to people who have visitedOurs: typically 90 days. Meta's: under Meta's policies

What Google and Meta receive if you allow them: the pages you visit on our public website and on the sign-up and payment pages of your dashboard, the page that sent you there, the links and buttons you click, your browser and device, your IP address, and their cookie identifiers. From the free scan they receive only that a scan started, finished and showed its results. From signing up they receive only that you created an account (and whether with an email address or Google), started a checkout and subscribed: the plan, its price for the 12 months, what your first payment was, whether you had subscribed before, and a random order number that we do not keep or link to your account. They never receive the name or city you enter in the free scan, your email address, anything else you type, anything from your results, or anything from the rest of your dashboard. Google and Meta can connect what they receive to other activity they know about you, including your accounts with them, under their own policies. That is what lets them show you our ads on other sites and apps.

What we never do. We do not connect what these cookies collect to your name, email address, account or profile. We do not give Google, Meta or any other advertiser a list of our customers or their email addresses or phone numbers. We do not use session recording, heatmaps, keystroke capture or device fingerprinting.

Your choice. Use "Your Privacy Choices", at the bottom of every page of our public website and of the sign-up and payment pages of your dashboard, to allow analytics or advertising, or to turn either off again at any time. Turning one off stops it from then on: the page reloads without it, your dashboard follows the change from the next page it loads, and nothing on our website reads the cookies it had set, which stay in your browser until they expire or you delete them. It does not delete what Google or Meta already received: you can manage that in Google's My Ad Center and Meta's ad preferences. You can also block or delete cookies in your browser, and Google offers a browser add-on that blocks Google Analytics on every site. Your choice applies to the browser you make it in, so make it again in each browser and device you use.

Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of selling and sharing, and we go further: neither analytics nor advertising loads in that browser, whatever is ticked in its cookie settings. A notice at the bottom of each page confirms that we honored it.

Do Not Track. The older Do Not Track setting has no agreed meaning, so we do not respond to it. Global Privacy Control, above, is the signal we honor.

New partners. Google and Meta are the only analytics and advertising partners on our website and in your dashboard. We will update this policy before adding another.

Security

We keep reasonable administrative, technical and physical safeguards for the information we hold. Your profile, your signed authorization, and what we keep from listings and sites' messages are encrypted at rest and access to them is limited. Login is handled by our sign-in provider, and we do not store passwords. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

Your rights and choices

Whatever state you live in, and whether or not a privacy law applies to us, you can ask us to:

  • tell you what personal information we hold about you and give you a copy;
  • correct it (you can change most of it yourself on My info);
  • delete it; and
  • opt out of the advertising cookies on our public website and on the sign-up and payment pages of your dashboard, which some state laws call a "sale", "sharing" or "targeted advertising". Your Privacy Choices, at the bottom of every page, does this straight away, and so does a Global Privacy Control signal. You can also email us, and we will tell you how to do it in your browser, since these cookies do not tell us who you are.

We will not treat you differently or charge you more for exercising these rights. Email privacyai@erase.com, or for deletion use Delete my info, linked in the footer of every page.

Timing of deletion. If you have no subscription running, Delete my info takes effect straight away. If you are within a paid term, it takes effect when the term ends, as our Terms explain. If you believe a law entitles you to earlier deletion, email us and we will handle your request under that law.

What we keep after deletion. We keep your signed authorization and a request log with no contact details in it, to comply with legal obligations and to bring or defend legal claims, and our billing records, as tax and accounting law requires. Requests already sent stay with the sites that received them. We will tell you what we kept and why when we confirm the deletion.

Verification. To protect you, we verify every request, so that a stranger cannot delete your account, see your data or learn whether you are a customer. If you are signed in, signing in is usually enough. Otherwise we will ask you to confirm from the email address on the account, and may ask for more if that is not enough. We will not confirm to anyone else whether someone is a customer.

Timing of our response. We respond within 45 days, and can extend that once by up to 45 more days if we tell you why.

Appeals. If we decline your request, you can appeal by emailing us with "Privacy appeal" in the subject line within 60 days. We will respond in writing within 45 days. If we still decline, you can contact the attorney general of your state.

Someone acting for you. You can use an authorized agent to make a request to us. We will ask for proof of your signed permission, and may ask you to verify your identity or confirm the permission directly with us.

Your authorization. You can revoke your authorization at any time yourself, from your dashboard. See our Terms.

State-specific information

California. The table above lists the categories we have collected in the past 12 months, the sources and the purposes. We disclose identifiers, commercial information, internet or network activity, and approximate location to the service providers above, for those purposes. If you allow advertising cookies, we make identifiers (cookie identifiers and IP address), internet or network activity (pages visited and clicks on our public website and on the sign-up and payment pages of your dashboard) and, if you subscribe, commercial information (that you subscribed, the plan and its price) available to advertising networks, Google and Meta, for cross-context behavioral advertising and ad measurement. No money changes hands, but we treat this as both a "sale" and "sharing" under California law. We do not sell or share any other category of personal information. This is off unless you turn it on, and you can opt out at any time from Your Privacy Choices or with Global Privacy Control; that page is our notice of your right to opt out. We do not knowingly sell or share the personal information of anyone under 16. PrivacyAI is for adults, and the advertising cookies are off for every visitor until they turn them on. We offer no financial incentive or price difference in exchange for personal information. Your account login is the only "sensitive personal information" we handle, and we use it only to sign you in, so there is no need for a "limit" request. Date of birth is not sensitive information under California law. California residents also have the rights above, and can ask under Civil Code section 1798.83 about disclosures for direct marketing: we make none.

California's DROP. California residents can also send one deletion request to registered data brokers, free, through the state's platform at privacy.ca.gov/drop. We do not file through it for you.

Nevada. We do not sell covered information as Nevada law defines it. You can email us with a request to opt out of any future sale.

Other states. Residents of states with privacy laws have the rights those laws give them, which we honor through the process above, including the right to appeal. We do not profile people for decisions that have legal or similarly significant effects. The advertising cookies on our public website and on the sign-up and payment pages of your dashboard count as targeted advertising, and under some states' laws as a sale of personal information to Google and Meta. They are off unless you allow them, and you can opt out from Your Privacy Choices or with Global Privacy Control, which we honor as a universal opt-out signal in every state. These rights against us are separate from the requests we file for you with other sites.

Adults only

PrivacyAI is for people aged 18 and over. We do not knowingly collect information from anyone under 18, and do not enroll minors. If we learn that a child's information has been entered, we will delete it. If you believe this has happened, please email us.

Where we operate

PrivacyAI is offered to United States residents only.

Changes to this policy

We may update this policy. We post the new date at the top, and email subscribers before a material change takes effect. We will not use information we already hold in a materially different way without telling you first and, where the law requires, getting your consent.

Contact us

Erase Technologies, LLC, 3050 Biscayne Boulevard, Suite 400, Miami, FL 33137. privacyai@erase.com