Your Privacy
Matters
Last updated: January 2026
We never sell your data
Your information is never shared with advertisers or third-party data brokers.
OSINT data is hashed
All queried data is hashed on ingestion—raw PII is never stored in our systems.
Reports auto-expire
Safety reports automatically expire after 30 days. No indefinite data retention.
Information We Collect
Account Information
When you create an account, we collect your email address, display name, and hashed password. We use OAuth where available to minimize credential storage.
Usage Data
We collect anonymized analytics on feature usage, session duration, and error reports to improve the platform. This data is never tied to your identity.
OSINT Queries
When you run a safety check, we query publicly available data sources. The input data (names, usernames, photos) is immediately hashed. We analyze the results to generate a safety score but do not store the raw query inputs.
How We Use Your Information
Service Delivery
To provide AI-powered identity verification, risk assessment, and safety reports as part of the core Guardr service.
Safety Analysis
To analyze patterns across public data sources and generate risk scores. This analysis is ephemeral—it happens in real-time and results are stored only as hashed summaries.
Platform Improvement
Aggregated, anonymized usage statistics help us improve our AI models and user experience. Individual data is never used for this purpose.
OSINT Data Handling
Hashed Inputs
All inputs to our OSINT analysis pipeline (names, usernames, email addresses, phone numbers) are hashed using SHA-256 before storage. The original values are discarded after analysis.
No Raw PII Storage
We never store raw personally identifiable information from OSINT queries. Safety reports contain risk assessments and scores, not the underlying personal data.
Ephemeral Analysis
OSINT data is processed in real-time memory and is not written to persistent storage. Only the resulting safety score and categorical risk indicators are retained.
Data Retention
Safety Reports
Safety reports automatically expire and are permanently deleted after 30 days from generation. This cannot be extended.
Account Data
Your account information is retained as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days.
Analytics
Anonymized, aggregated analytics data may be retained indefinitely as it cannot be traced back to individual users.
Third-Party Services
Data Breach Checking
We use secure API integrations to check for data breaches associated with email addresses. These queries use k-anonymity protocols—we never send full email addresses to third parties.
No Marketing Sharing
We do not share, sell, or provide your data to any third party for marketing, advertising, or data brokerage purposes. Ever.
Infrastructure
Our infrastructure providers (hosting, CDN) process data only as needed to deliver the service and are bound by strict data processing agreements.
Your Rights
Access & Portability
You can request a copy of all data we hold about you at any time. We will provide it in a machine-readable format within 30 days.
Correction
You can update or correct your personal information through your account settings or by contacting us.
Deletion
You can request complete deletion of your account and all associated data. Under GDPR and CCPA, this is your right and we honor it without question.
Cookies & Tracking
Minimal Cookies
We use only essential cookies for authentication and session management. No third-party tracking cookies are used.
Analytics
We use privacy-respecting analytics that do not track individual users across sites and do not use cookies for analytics purposes.
Security Measures
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). API keys and credentials are stored in secure vaults, never in code.
Infrastructure
We use secure, SOC 2 compliant infrastructure with regular security audits, penetration testing, and vulnerability scanning.
Children's Privacy
Age Requirement
Guardr is intended for users aged 18 and older. We do not knowingly collect information from anyone under 18. If we discover we have collected data from a minor, we will delete it immediately.
Changes to This Policy
Notification
We will notify you of material changes to this policy via email and/or a prominent notice on our platform at least 30 days before changes take effect.
Contact Us
Questions?
If you have questions about this privacy policy or our data practices, contact us at support@guardr.app or visit our contact page.