Privacy policy

• Phone scan. The number you type. Our phone-code provider texts a code to it, and the scan runs only after the code is entered. Our people-search data provider then returns the records tied to that number, which can hold names, ages, birth dates, addresses, relatives, other numbers and email addresses. We show you the record of whoever the number was reported for most recently, masked, with how many relatives it lists but not their names. A record can belong to whoever had the number before. If it isn't you, "Not you?" asks for your name, age and a city and state you have lived in, and we search again for that name, on the number and in that place. We show a record only if it has that name and birth year. We keep what you typed only as a scrambled code, so the same search can reuse its result. We keep the number and a scan's result, encrypted. A repeat scan within 30 days reuses it. We also check each email in the result against known breaches. If you scan a parent's number with them, the number and the result are about your parent, and your parent can ask us to delete them.
• Scam check. The text you paste and any screenshot you add. Our AI provider reads them. We keep our answer, and the text with codes and card numbers taken out, encrypted, for 30 days. We read a screenshot once and don't keep it.
• Email breach check. The email address you enter. We look it up in known breach data and send the report only to that address. We keep which known breaches matched and what kinds of data they exposed, never a leaked value such as a password.
• Sign-ups. Your email, and your first name and mobile number if you give them, plus the wording, time, page and a scrambled or encrypted IP address for any consent you give. Quiz answers, if you take the quiz.

• Your account. The email you paid with, your name, your mobile number and when you proved it with a code, and your state.
• Your profile. To tell your listings from a stranger's with the same name, we look up your own record once, from the phone number you proved. It holds your name, age, current and past addresses, phone numbers, email addresses and the names of your relatives. We store it encrypted (sealed). If that record is under a different name than the one you signed, we delete it at once. If you type your details in yourself, we check them before we start. Your relatives' names are used only to match listings that are about you. We never look your relatives up and never contact them.
• Your signed permission. The exact text you signed, the name you typed, the phone number you proved, the time, a scrambled IP address and your browser type. We keep it as the record that we may act for you, and we send a link to it with each request.
• Your listings. For each listing we find about you: the site, the page address, and what it shows. Stored sealed.
• Screenshots. Pictures of your listing before a request and after, as proof. They are stored privately and only you, the buyer of your plan, and we can open them.
• Scam line messages. What you send us (text or email) and our answers. Stored sealed. We read a screenshot once and don't keep it.
• Breach watch. The buyer's email address, which known breaches it is in, and what kinds of data those breaches exposed.
• Payments. Payments are processed by Whop. We receive your email, the plan, the amount and Whop's payment reference. We never see your full card number.
• Activity. A plain log of what we did for you (for example, "We asked a site to remove your listing"), which is what your account and your weekly report show.

To get your information deleted, a company has to be told who you are. We send identifying details about you to each site we ask, and with each written request.

• Who we write to. The people-search sites we check, and every 90 days every company on California's data broker list that takes requests by email, whether or not we found you there.
• What each request gives. Your name, other names you confirmed, your city and state, and a link to your signed permission. A site's own form may also get your age and what its listing shows. If you told us you live in California, the request says so.
• Your phone number only if you turn that on yourself.
• Never your email, street address, date of birth or any ID. Each request uses a separate address that we create for it, so replies come to us.

A company that held nothing about you learns your name and city from the request. Each company has its own privacy policy for what it does with a request.

An AI model reads every message you send to the scam line. When a question is about money, or you ask us to check it, the message and the answer are set aside for review. We review them ourselves, using automated tools we run, including AI. We never tell you a payment is safe until we have reviewed the message and the answer. We may also read messages to fix a problem or check quality.

When you ask us to check a message, we keep facts about the scam, not about you: how it arrived, the company it pretended to be, how it asked to be paid, and the amount. Only when we judge it a scam do we also keep the phone numbers, email addresses and website names it used, and we delete those after 18 months without a new report. We store these with the date and your state only, never your name, contact details or the message. We use them to spot scams, warn members and report on what's going around. We read a screenshot once and don't keep it. If you check by email, our email provider keeps a copy for a short time.

• Each adult on a Family plan proves their own phone and signs their own permission.
• The buyer of the plan can see what we find for every person on it: the listings, their screenshots, and where each request stands. When a person takes their permission back, the buyer stops seeing it. Each person is told this before they sign.
• A family member signed in on their own device sees only their own results.
• Scam line messages are private to the person who sent them. The buyer sees only that a check happened, not what was said.
• The email that tells the buyer a family member has signed goes only to the buyer.

These companies handle information only to provide their part of the service to us:

• EnformionGO, our people-search data provider (returns the records for a phone number, or for the name and place typed under "Not you?"; we pay for each lookup)
• Twilio (texts the one-time code that proves a phone number)
• Anthropic, our AI provider (reads scam checks and scam line messages and drafts the answer)
• Have I Been Pwned (breach lookups for an email address)
• Whop (payments and receipts)
• Resend (sends our emails and the written requests, and receives emails you forward to the scam line and replies from companies)
• Vercel (hosting, and private storage for screenshots)
• The company that hosts our removal server (it runs the browser that visits people-search sites for you)
• Neon (our database)
• Cloudflare Turnstile (stops bots on our forms)
• Discord (pings us that something needs our review; the ping never contains your name, number or message)
• Plausible Analytics (page and event counts)

The people-search sites and data brokers we send requests to are not our service providers. See "What we send to people-search sites and data brokers" above.

• Sell or rent your personal information, or use it for anyone else's advertising.
• Let anyone scan a number without a code sent to that phone. Even so, a record can belong to whoever had the number before.
• Ask for your passwords, one-time codes for other accounts, PINs or your Social Security number.
• Show or email a leaked password or any other leaked value.
• Open a link you send us, or one in a message you forward.
• Use what we hold about you for anything except the work described on this page.

We use a sign-in cookie for your account, and small browser storage for things like which scan this tab ran and where you came from. These are needed for the site to work.

We also set our own cookie, nope_aid, when you first visit. It holds a random id for 90 days, and only our server can read it. Against it we keep the page you landed on and any link tag or ad click id you came with, and if you buy, it goes with your payment to Whop, so we can see which posts and ads lead to plans. With Global Privacy Control on, or after you tap "Do not sell or share my personal information" at the bottom of our pages, we don't set it and we clear what we kept.

We also use Plausible Analytics (page and event counts). It sets no cookies.

We do not share mobile opt-in data or consent with third parties or affiliates for marketing purposes. See our Text message terms.

People on a plan get the emails the plan is made of: breach alerts, the weekly report, answers from the scam line, sign-in links and billing notices. You can change which of these you get from the link at the bottom of each one.

If you gave us your email for a free check, we send the report you asked for. It has an unsubscribe link. To stop outreach emails, use the unsubscribe page. Sign-in links, receipts and answers you asked for still arrive.

• Phone scans. We keep a scan's result, encrypted. A repeat scan within 30 days reuses it, and the link to it works for 30 days. After that a new scan looks the number up again.
• Free scam checks. The text you pasted is erased after 30 days. Our answer is kept.
• Scam Radar. A phone number, email address or website name a scam used is deleted after 18 months without a new report.
• Scam line messages. The words of a message and our answer are erased after 180 days. A record that a check happened is kept.
• A listing that isn't you. If you tell us a listing is not you, we erase what it showed and keep only a scrambled fingerprint, so we don't ask you about it again.
• Your plan. While you are on a plan, and after it ends, we keep your profile, permission, listings, screenshots and activity, so there is a record of what was done in your name and so you can rejoin. You can ask us to delete them (see "Your choices").
• Records we must keep. Payment records, and the record of a signed permission and the requests sent under it, are kept as long as the law and our accounts need them.

Data is encrypted in transit. Profiles, listings, scan results and message text are also encrypted (sealed) in our database with keys held apart from it. IP addresses are stored scrambled or encrypted. Screenshots are in private storage and are served only to a signed-in person who is allowed to see them. Our logs carry ids and counts, not names, numbers, addresses or message text. No system is perfectly secure.

• Download your data. The buyer of a plan can download what we hold from their account.
• Take back your permission. In your account or by email. We stop making new requests for you.
• Correct or delete. Email help@asknope.com. We handle each request ourselves. Some records must be kept (see above).
• Opt out of ad measurement. We honor Global Privacy Control signals.

Depending on where you live, state privacy laws give you more rights. We honor them for everyone, and we never treat you differently for using them.

Our service is for adults. We don't knowingly collect information from anyone under 18, and a plan covers adults only.

If we change this policy in a way that matters, we'll update this page and tell people on a plan by email.

VeraScripts LLC, 212 N. 2nd St. STE 100, Richmond, KY 40475. Email help@asknope.com.