Security & Privacy Practices

PrivacySweepApp™ is a DIY privacy-request organizer. It is designed to hold the minimum information needed to help you prepare and track your own removal requests.

What we never collect

  • Social Security numbers or any government ID number
  • Driver's license, passport or photo ID images
  • Bank account, routing, card numbers, CVV or PINs
  • Passwords, API keys or one-time codes
  • Medical records or health plan identifiers

These values are screened and blocked on the server before anything is stored, so they cannot be saved even if they are typed by mistake. If a data broker asks for identity documents on its own website, that exchange happens directly between you and the broker — never through PrivacySweepApp.

Request generation

Your privacy-request text is generated inside PrivacySweepApp from human-reviewed templates. No external AI provider receives your request content, your notes, or your identity documents.

Generated request text is not saved by default. It is prepared for you to review, copy or download, and is stored only when you explicitly choose to save it to your tracker.

Account isolation

Every record is scoped to your account with database-level row security, so one account cannot read another account's cases, notes or saved requests. Administrative access is limited to accounts with an explicit admin role and is logged.

Retention schedule

Deletion

You can export or delete your data from Account settings. Deletion removes your sign-in record, profile, cases, notes and saved requests from live systems immediately. Encrypted backups rotate out within 90 days, and a hashed deletion marker is kept so that a backup restore cannot bring your data back. Payment metadata is retained in minimized form where tax and accounting law requires it.

Providers

See the subprocessor list for every provider that processes data on our behalf.

Scope

PrivacySweepApp is built for United States residents age 18 or older. Workflows, official resources and request templates are U.S.-focused. It is not designed for GDPR, UK GDPR, Canadian or other non-U.S. privacy regimes, and buying it from outside the United States will not give you those workflows.

Reporting a security issue

Email support@privacysweepapp.com. Please do not include sensitive personal information in your report.

Last updated: 9/27/2026