Privacy Policy

Vanish exists to get your personal information deleted, so we hold ourselves to the standard we demand of data brokers. This policy explains what we collect, why, who it is shared with, and how to make it all disappear.

1. Information we collect

• Identifiers you provide at signup: your name, email address(es), and optionally phone number(s), current/past addresses, and other names you have used. You choose how much to provide; more identifiers let your deletion requests cover more records.
• Account and consent records: the date, time, and terms version of your authorization for Vanish to act as your agent, and the IP address it was given from (we keep this because brokers may ask us to prove your authorization).
• Request history: which brokers we contacted for you, when, and the status of each request.
• Payment information: handled entirely by Stripe, our payment processor. Vanish never sees or stores your card number. We receive from Stripe your subscription status and a customer reference.
• Technical data: ordinary server logs (IP address, timestamps, pages requested) kept briefly for security and debugging.

We do not knowingly collect information from anyone under 18, and we do not ask for or want sensitive categories of information (such as health, biometric, or government ID numbers) — please do not include them in any field.

2. How we use your information

• To compose and send personal-information deletion and do-not-sell requests to data brokers on your behalf — this is the Service, and it necessarily includes your identifiers in each request so brokers can locate your records;
• to track broker deadlines and responses and show them on your dashboard;
• to operate your account, process billing through Stripe, and send you service emails (welcome, dashboard link, trial reminders);
• to secure and debug the Service.

We do not sell, rent, or trade your personal information. We do not use it for advertising. We do not build profiles for any purpose other than sending your requests.

3. Who we share it with

• Data brokers — at your direction. Each deletion request we send contains the identifiers you provided, addressed to the broker's registered privacy contact. Requests state that the identifiers may be used only to locate and delete your records; how a broker handles a request is governed by that broker's own obligations and policies.
• Service providers (processors): Stripe (payments), Resend (email delivery), Railway (hosting), and Cloudflare (domain/DNS). Each receives only what it needs to perform its function.
• Legal requirements: we may disclose information if required by law or to protect the rights, safety, or property of Vanish or others. If legally permitted, we will tell you before disclosing.

There are no other recipients. No analytics brokers, no ad networks, no "partners".

4. Where your information is stored

Vanish is operated from Canada. Our hosting and email providers store data on servers in the United States. By using the Service you consent to your information being processed in Canada and the United States, where privacy laws may differ from those of your home jurisdiction.

5. How long we keep it

• Account identifiers and request history: for as long as your account exists.
• After cancellation: your data is retained for 90 days (so you can reactivate and so we can answer broker follow-ups), then deleted.
• On a deletion request from you: deleted within 30 days, except consent records and minimal billing records we must keep to comply with legal obligations or to demonstrate that past requests were authorized.

6. Security

Your data is stored on access-controlled infrastructure, transmitted over encrypted connections (HTTPS/TLS), and accessible only through your private dashboard link and our administrative access. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you as required by applicable law.

7. Your rights

Depending on where you live (including under PIPEDA in Canada, the CCPA/CPRA in California, and the GDPR in Europe), you may have rights to access, correct, delete, or receive a copy of your personal information, and to withdraw consent. You can exercise any of these by emailing support@get-vanish.com from your account email. We will respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local privacy regulator (in Canada, the Office of the Privacy Commissioner).

8. Cookies

The Service does not use advertising or analytics cookies. Only what is strictly necessary for the site to function is used.

9. Changes to this policy

If we change this policy in any material way, we will email you and post the update here at least 14 days before it takes effect. The effective date at the top always reflects the current version.

10. Contact

Privacy questions or requests: support@get-vanish.com.