Privacy Policy

Summary

Vaporize My Data is a service that submits opt-out and deletion requests on your behalf to data brokers and people-search sites. To do that we have to collect and process the personal information that brokers use to find you. We collect the minimum we need, encrypt it at rest, and never sell it.

What we collect

• Account data. Email address and hashed password (managed by Amazon Cognito).
• Profile data. First and last name, addresses (current and prior), phone numbers, alternate email addresses, and date of birth where applicable. This is the information brokers cross-reference; without it we cannot submit a removal.
• Billing data. Plan selection and payment history. We never see, store, or process card numbers. All card handling is performed by Stripe, Inc. We retain only the Stripe customer ID and subscription ID required to manage your subscription.
• Operational logs. Per-broker submission status, timestamps, and any errors returned by the broker. Used to generate your post-run report and to detect broker site rot.

How we use it

Profile data is used solely to populate the opt-out forms and emails we send to brokers on your behalf. Account data is used to authenticate you and to send you transactional email (run reports, payment receipts, account notices). Billing data is used to process your subscription via Stripe. We do not use any of this information for advertising, profiling, or sale to third parties.

How we protect it

• Profile data is encrypted at rest using AWS KMS envelope encryption. Database rows store ciphertext, not plaintext.
• Encryption keys are bound to your account identifier — a row decrypted with the wrong key context will refuse to decrypt rather than leak.
• Run reports are stored in private S3 with a 365-day expiry and served only via short-lived presigned URLs.
• The worker that talks to brokers can write reports but cannot read them back, so a worker compromise cannot exfiltrate other users’ reports.

Sharing

We share only what is required to run the service: profile data is transmitted to brokers in the act of submitting an opt-out, and billing metadata is shared with Stripe. We do not share your information with advertisers or data aggregators.

Your rights

Depending on where you live, you may have the right to access, correct, port, or delete the personal information we hold about you, and to opt out of any sale or sharing for cross-context behavioral advertising. We do not sell or share your information. You can update most data directly from your dashboard, or close your account at any time from Account. Account closure deletes your profile and PII rows; brokers we have already contacted may retain their own records of the opt-out for compliance purposes.

Children

The service is not intended for and is not directed at children under 16. We do not knowingly collect information from children.

Changes

We may revise this policy. Material changes will be announced by email and reflected in the "Last updated" date above.

Contact

Questions or requests: privacy@vaporizemydata.com.