Privacy Policy

Last Updated: November 5, 2026

1. Purpose and Scope

This privacy policy (“Privacy Policy”) explains how PrivacyHawk, Inc. (“PrivacyHawk” “we,” “us,” or “our”) receives and processes personal information as defined by applicable law from its customers (“Customer Personal Information”). PrivacyHawk provides privacy and security services to businesses and consumers.

We are committed to protecting the privacy and security of personal information. We are transparent about the personal information we collect, the purposes for which we process it, and the rights you have in relation to your data.

Protecting privacy is the reason our company exists — and we start with how we handle your personal information ourselves.

This Privacy Policy applies to all personal information collected from or about you through your use of our services, including our mobile application (“App”), website, and related services (together, the “Services”).

We operate under the following principles:

Data minimization: We collect and store the minimum amount of personal data needed for our Services.
Transparency: We are clear about what personal data we hold and how we use it.
User control: You have control over the personal data we hold and can exercise your data protection rights at any time.
We do not sell personal data for money, and we do not give advertisers the personal data you provide to us. Data brokers receive it only in the removal requests you direct us to send.
Advertising platforms we advertise on use pixels on our websites, which some privacy laws treat as a "sale" or "sharing" of personal information.
To learn more about how we keep your data secure, visit our trust and security center.

2. What Information & Why?

2.1 Information We Collect

a. Information you provide directly

Note: Information you provide depends on feature usage within the product; not all of the below data is collected for every user.

Identification data: Name and email address.
Demographic data: Age and city during signup. You may optionally provide address, phone number, and date of birth for identity verification with certain companies.
Communication data: Content of messages you send to us (e.g., support, surveys, feedback).
Billing data: Minimal billing information if processed via our website (via Stripe). Billing via app stores (Apple/Google) is handled by them directly.
Social media data: Information you provide via interactions with our social media pages.
Identity protection identifiers (optional): If you use breach and dark web monitoring, you can add the identifiers you want monitored, such as your Social Security number, driver’s license or passport number, credit card or bank account numbers, or medical ID number. Adding them is entirely optional. Data broker removal, robocall and spam text blocking, and our other features work without them. We store these identifiers encrypted. To check for exposures, we send them to our monitoring provider, which uses them only to run the search and does not store them. Government ID, financial account, and medical ID numbers are used for monitoring and nothing else.

b. Information collected automatically

Data broker scan results: Publicly available personal data exposures.
Email scan results: Sender domains from emails (not full emails, contacts, or credentials).
Log & device data: IP address, browser type, device type, OS, date/time of requests, and how you interact with our Services.
Usage data: Features used, actions taken, frequency/duration of activity.
Location data: Approximate location (such as city and country) derived from your IP address. We do not collect precise location.
Email open/click data: Via tracking pixels in emails.
Emails related to our services: Sender and full text of emails related to opt-out requests that you have sent; used to confirm compliance with the opt-outs and improve the opt-out system as described in Section 2.2(b); and emails that our automated systems have determined to be security threats, fraud risks, or scams, to be used to notify you and protect you from such threats and improve the protection system.
Information from your device’s phone book (contacts list): For those who optionally choose to use RoboHawk, PrivacyHawk’s robocall and spam text blocking service, PrivacyHawk collects your contacts list so that the app always allows calls from people you know. This information may be uploaded to our servers. To keep your contacts safe, they are one-way encoded, which means they are never visible to anyone.
Information from your device’s SMS messaging app: If you choose to enable SMS filtering, only messages received from senders not in your device’s phone book are uploaded to our servers for analysis. In those cases, data collection is limited to the sender’s phone number and message body. Your personal information is not included.
Website technologies: Information collected by cookies, pixels, and similar technologies on our websites that track how you interact with them (such as clicks and pages viewed) and cookie and advertising identifiers. See our Cookie Notice.

For personal data collected by PrivacyHawk Enterprise see the B2B Enterprise and Workplace Services addendum here.

2.2 Why We Collect the Personal Information

a. Purposes for collecting your personal information include:

Identify companies holding your data and assist with deletion and opt-out requests.
Verify your identity and contact details.
Authenticate your access to the Services.
Personalize your experience.
Process payments and maintain billing records.
Respond to your enquiries.
Send administrative notices and updates.
Improve our Services and develop new features.
Prevent fraud and secure our systems.
Comply with legal obligations.

b. Improving opt-out automation

PrivacyHawk operates machine learning systems that improve the accuracy and reliability of its opt-out and deletion automation — for example, recognizing which companies hold your data, identifying the correct opt-out mechanism for a given company, and determining whether a request was honored, refused, or requires follow-up.

We may use the following to develop and improve these systems:

Opt-out and deletion correspondence associated with requests made through the Services, including replies from the companies to which those requests were sent.
Records of the outcome of requests submitted through the Services, including which companies responded, how they responded, and how long they took.
Publicly available information about data brokers and their opt-out processes.

By creating an account and agreeing to our Terms of Service, you agree that we may use data obtained through the Services for these purposes. These systems improve the Services for all users. We do not use this data for advertising.

c. Limited Use of Google user data (consumer Services)

Where you connect a personal Google account to our consumer Services, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. These commitments apply to the raw data obtained from the scopes you authorize and to data aggregated, anonymized, or derived from it.

(1) Use. We limit our use of this data to providing or improving the features that are visible and prominent in our user interface: identifying the companies that hold data associated with your account, sending opt-out and deletion requests at your direction, and determining whether those requests were honored, refused, or require follow-up.

(2) Transfers. We do not transfer this data, except:

to provide or improve our appropriate access or user-facing features that are visible and prominent in our user interface, and only with your consent;
for security purposes, such as investigating abuse;
to comply with applicable laws; or
as part of a merger, acquisition, or sale of assets, after obtaining your explicit prior consent.

(3) Prohibited uses. We do not transfer or sell this data to advertising platforms, data brokers, or information resellers. We do not use it for serving ads of any kind, including retargeting, personalized, or interest-based advertising. We do not use it to determine credit-worthiness or for lending purposes.

(4) Human access. We do not allow humans to read this data, unless: you have given us your affirmative agreement to view specific messages, files, or other data, for example to resolve a support request you have raised; it is necessary for security purposes, such as investigating a bug or abuse; it is necessary to comply with applicable law; or the data, including derivations, is aggregated and used for internal operations in accordance with applicable legal requirements.

(5) Improving opt-out automation. By creating an account and agreeing to our Terms of Service, you agree that we may use the opt-out and deletion correspondence associated with requests made through the Services — the requests themselves and the replies received from the companies they were sent to — to improve the accuracy and reliability of the opt-out automation described in Section 2.2(b), including by developing and improving machine learning models used in the Services. This is an improvement to the user-facing features described in paragraph (1). We do not transfer this data to any third party for model training.

(6) Personnel and successors. We require our employees, agents, contractors, and successors to comply with the Google API Services User Data Policy.

(7) Revoking access. You can withdraw our access to a connected Google account at any time, as described below under “Revoking access to a connected email account.”

d. Microsoft user data (consumer Services)

Where you connect a personal Microsoft account to our consumer Services, our use of information received from Microsoft APIs is governed by the Microsoft APIs Terms of Use and by this Policy.

We request only the permissions needed to operate the features you have enabled, and we use the data only for the purposes described in Section 2.2. We do not transfer or sell this data — including data aggregated, anonymized, or derived from it — to advertising platforms, data brokers, or information resellers, and we do not use it for advertising of any kind, including retargeting, personalized, or interest-based advertising.

By creating an account and agreeing to our Terms of Service, you agree that we may use data obtained from a connected Microsoft account, including opt-out and deletion correspondence, to operate and improve the Services, including by developing and improving machine learning models used in the Services.

You can withdraw our access to a connected Microsoft account at any time.

Revoking access to a connected email account. If you have connected a Google or Microsoft email account to the Services, you can withdraw our access at any time, directly with that provider and without contacting us:

Google accounts: myaccount.google.com/permissions
Personal Microsoft accounts: account.live.com/consent/Manage
Work or school Microsoft accounts: myapps.microsoft.com

You can also disconnect an account from within the App. Revoking access stops all further collection from that account immediately. To also delete data already collected, email support@privacyhawk.com or use the deletion option in the App — revoking access alone does not delete data we already hold.

Where an organization has authorized PrivacyHawk Enterprise, an administrator may revoke access as described in Section 1.9 of the B2B Enterprise and Workplace Services Addendum.

Marketing. We may collect your personal information in order to provide you with free of charge marketing related materials. If you do not wish to receive such marketing materials from PrivacyHawk, then click the “unsubscribe” button on such materials.

Cookies and other tracking technologies. We use technologies to collect information, which includes cookies. Cookies are small data files stored on your hard drive or in device memory that help us to improve the Services and your experience. More information about our cookies can be found here.

Collection and Use of Aggregate Information. We may use aggregate information (not containing personal information) to analyze trends, administer the Site, track users’ movements, and gather broad demographic information on aggregate use.

3. With Whom?

Service Providers. PrivacyHawk shares personal information with trusted Service Providers for the business purposes of providing its products and includes the following types of services: payment processing, hosting, analytics (including A/B testing), customer support, and security.

Recipients of deletion and opt-out requests: As described below in Section 4.

Identity theft insurance provider: If you file a claim under the identity theft insurance included with your plan, we confirm your identity and membership status to the insurer so it can process the claim.

Compliance with Laws. We may disclose your personal information to a third party if (a) We reasonably believe that such disclosure is necessary to comply with any applicable law, regulation, legal process or governmental request, or (b) to protect the security or integrity of the Services from harm or illegal activities.

Business Transfers. We may share or transfer your personal information in connection with, or during the negotiations of, any merger, sale of PrivacyHawk (and/or PrivacyHawk affiliates) assets, financing, or acquisition of all or a portion of the business to another entity related to PrivacyHawk.

Links to third parties. Our Site contains links to third party online properties (such third parties may vary over time). Such third parties have their own policies that govern their collection, use, and disclosure of information. We recommend that you read their privacy policies to learn about their practices. Any hyperlinks we provide are for your convenience only, without any acceptance of liability from us, and do not imply endorsement of the activities of such third-party websites or any associations with their operator.

Interest-Based Advertising. We advertise our Services on third-party advertising platforms. These platforms use cookies, pixels, and similar technologies on our websites to collect information about your visit, such as pages viewed, actions taken, device and advertising identifiers, and IP address. They use this information to measure our ads and to show our ads to people who have visited our websites, and they may combine it with information they collect across other websites and services. Some privacy laws treat this as a “sale” or “sharing” of personal information. We do not show ads in our Services. You can opt out using “Your Privacy Choices” in our website footer or by enabling Global Privacy Control in your browser. See our Cookie Notice for more information.

4. Deletion and opt-out requests

Exercising your privacy rights necessarily involves giving the recipient enough information to locate your record. The Services offer two separate mechanisms, which handle your information differently.

4.1 Data broker removal

This mechanism does not use or require access to any email account. We submit the request directly to the data broker on your behalf, using the identifying information you have provided in your PrivacyHawk profile — typically name, email address, postal address, and date of birth — which is the information the broker needs to locate and suppress your record. We then re-check the broker’s site to confirm the record has been removed.

4.2 Digital footprint opt-outs

Where you connect an email account, we identify the companies holding data associated with that account — generally companies with which you have a direct relationship — and you can direct that opt-out or deletion requests be sent to them. Those requests are sent from your own mailbox, through the connection you authorized. Each request contains the minimum information the recipient needs to identify your record, typically your name and email address. If a company requires more to process the request, such as your phone number, postal address, or date of birth, we include those details if you have provided them in your PrivacyHawk profile. They are used only to match the request to your record, and are generally information the company already holds. We do not transmit these requests ourselves and do not disclose additional, unnecessary information to these recipients. Responses are delivered to your own mailbox, where we read them in order to determine whether a request was honored, refused, or requires follow-up.

5. Your Right to Control and Access Your Personal Information

Your Account. You may update, correct, or delete information about you at any time by logging into your online account and modifying Your information or by emailing Us at support@privacyhawk.com.

U.S. States Privacy Notice. For additional information and rights available to consumers in certain states, see the U.S. States Privacy Notice here.

Nevada Consumers: We do not sell your covered information, as defined by Section 1.6 of Chapter 603A of the Nevada Revised Statutes.

EU & UK Users: EU and UK users have several rights with respect to their personal data including the following: (i) the right to be informed (ii) the right of access; (iii) the right of rectification; (iv) the right of erasure; (v) the right to restrict processing; (vi) the right of data portability; (vii) the right to object to processing; and (viii) the rights in relation to automated decision making and profiling. EU or UK users also have the right to lodge a complaint about the collection or use of their personal information by notifying their EU (or UK) supervisory authority. Privacy Hawk’s legal bases for collecting and processing Customer Data includes performance of a contract and/or consent. Please feel free to contact us regarding this or any other EU or UK data subject right at support@privacyhawk.com if you have any questions about these rights.

Retention Policy. We will retain Customer Personal Information as long as necessary to provide the Services unless a longer period is required or permitted for legal or compliance purposes.

Do Not Track. Some browsers offer a “do not track” (“DNT”) option. We do not respond to DNT signals.

6. Security

We employ industry standard technological measures that are reasonably designed to help protect your personal information from loss, unauthorized access, disclosure, alteration, or destruction. PrivacyHawk may use, without limitation, firewalls, password protection, secure socket layer, and other security measures to help prevent unauthorized access to Your personal information. While we take reasonable efforts to guard personal information, no security system is impenetrable. We advise to always secure your own devices by appropriate security measures.

7. Policy On Information Collected From Children or Minors

This Site and our Services are not directed at persons under the age of 18, and PrivacyHawk does not knowingly collect personal information from minors.

8. Changes

PrivacyHawk may need to update this Privacy Policy periodically to reflect changes to our Services and/or user roles and the laws applicable to our provision of the Services to you. If we do change this Privacy Policy, we will notify you by revising the “Last Updated” date at the top of this Privacy Policy on the Site. If there are material changes to this Privacy Policy, PrivacyHawk will notify users of Our Services. PrivacyHawk encourages You to review this Privacy Policy regularly for any changes. Your continued use of the Services and/or continued provision of personal information to Us after the posting of such notice will be subject to the terms of the then-current Privacy Policy. If you disagree with any applicable change, you will need to close Your account and stop using the Services.

9. Contact

If you have any questions regarding this Privacy Policy, please contact us at:

PrivacyHawk, Inc.
Email: support@privacyhawk.com
EU/UK Representative: support@privacyhawk.com