Privacy Policy

ProFend360 ("we," "us," or "our") helps you understand and reduce what AI systems know about you. Because our entire product is about protecting personal information, we hold ourselves to the standard we ask of others. This policy explains what we collect, why, who processes it, and the choices you have.

Information we collect

Account information

When you create an account we collect your email address and a password (or your Google sign-in identity), managed through our authentication provider. If you enable two-factor authentication we store the enrollment needed to verify your authenticator codes.

Your PII profile

To scan for your exposure, you provide the personal details you want checked — for example your name, email addresses, phone numbers, or locations. You control what goes in this profile, and you can edit or remove it at any time.

Scan results and activity

We store the results of your scans (which models were checked, risk scores, and what was found), the deletion requests we prepare or send on your behalf, provider responses to those requests, and an activity history so you can track your protection over time.

Identity verification

Certain features require confirming you are who you say you are and that you are 18 or older. Identity verification is performed by our verification partner (Didit); your identity document is processed by that partner, and we store the outcome — your verification status and date of birth — not images of your documents.

Managed profiles (dependents)

If you add a dependent, we store the profile details you provide for them and the relationship to your account. Adult dependents must accept an invitation and verify their own identity; profiles for minors are created and vouched for by their guardian.

How your PII is used in scans

Our scan pipeline is designed so that your real personal information is not handed to the AI models being tested. Queries are constructed to probe what a model already knows, and matching against your real details happens on our side — not inside the model provider's systems.

Acting on your behalf

With your explicit, recorded authorization, we send data-removal (erasure) requests to AI providers on your behalf. Those requests necessarily identify you to the provider — that is their purpose. We record what was sent, to whom, and any replies, so you have a full audit trail. You can revoke this authorization at any time, which stops future sends.

Service providers

We use a small set of processors to run the service:

• Vercel — application hosting and delivery
• Supabase — database and authentication
• AI model providers (accessed via Vercel AI Gateway) — the models your scans test
• Search providers — web-grounded lookups used by deep scans
• Resend — delivery of removal-request and transactional email
• Didit — identity verification

Each processor receives only what it needs to perform its function. We do not sell your personal information, and we do not share it for advertising.

Data retention and deletion

We keep your data for as long as your account is active. You can delete your PII profile at any time. If you close your account, we delete the personal information associated with it, except records we must keep to document removal requests already sent on your behalf or to meet legal obligations.

Security

Data is encrypted in transit, access to production systems is restricted, and database access is scoped per user with row-level security. Two-factor authentication is available on every account, and we encourage you to enable it.

Children

ProFend360 accounts require you to be at least 18 years old. Minors cannot hold accounts; their information may only be added as a managed profile by a parent or legal guardian, for the purpose of protecting that minor's information.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the product; for anything else, contact us and we will respond within the timelines required by applicable law.

Changes to this policy

If we make material changes, we will update the date at the top of this page and notify you in the product or by email before the changes take effect.

Contact

Questions or requests: privacy@profend360.com