Privacy Policy

1. Privacy by default

ProtectFlow is built so your identity stays private. Every takedown notice is filed in our name, never yours, and we collect only the information we genuinely need to find and remove your leaked content.

2. Information we collect

• Account details — the email or contact handle you use to sign up and communicate with us.
• Content and links you submit — usernames, profile links, sample images, or URLs you provide so we can identify and verify your content and the infringing copies.
• Scan queries — the username and platform you enter for a free scan.
• Payment information — payments are processed in cryptocurrency by a third-party processor. We receive confirmation of payment but never your card or bank details.
• Technical data — basic logs and an approximate country (from your network), used to keep the service secure and to show the site in your language.

3. Free Scan

You can run a Free Scan without creating an account. To provide it, we process:

• The username and platform you enter — used only to run the search.
• Your IP address and a Cloudflare Turnstile check — used only for rate limiting and abuse prevention.

Scan results are compiled from public sources and may be cached for a short period (hours, not weeks) so repeated queries for the same username don't trigger new searches. Free Scan data is not used for advertising, is never sold, and is not linked to an account unless you later become a client.

4. How we use your information

• To run scans and locate copies of your content across the web.
• To prepare and send takedown, erasure, and de-indexing requests on your behalf.
• To communicate with you about your account and your results.
• To process payments and prevent fraud and abuse.
• To maintain, secure, and improve the service.

5. Legal bases

Where the GDPR or similar laws apply, we process your data to perform our contract with you, on the basis of your consent (which you can withdraw), and for our legitimate interest in operating and securing the service.

6. How we share information

We do not sell your personal data. We share it only with:

• platforms, hosts, and search engines that receive the takedown notices we file on your behalf — filed in our name, not yours;
• legal professionals who assist with escalations and complex removals;
• service providers such as our hosting and payment processors, under confidentiality obligations; and
• authorities where we are legally required to, to the minimum extent necessary.

7. Storage and security

Your data is stored on secure, access-controlled infrastructure and encrypted. We keep evidence and submitted content only as long as needed to pursue removals and to defend the notices we have sent, and we apply data minimization throughout.

8. Retention and deletion

You can ask us to delete your data at any time, and we will do so unless we are required to keep certain records by law. When you close your account, we delete or anonymize your data within a reasonable period.

9. Your rights

Depending on where you live (including under the GDPR and Brazil’s LGPD), you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, contact us at [email protected].

10. International transfers

We operate globally, so your data may be processed in countries other than your own. Where required, we use appropriate safeguards to protect it in transit and at rest.

11. Cookies and analytics

We keep tracking to a minimum and use only what is necessary to run the site and understand basic, aggregated usage. We do not use your data for third-party advertising.

12. Children

ProtectFlow is not intended for anyone under 18, and we do not knowingly collect data from minors.

13. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

14. Contact

For any privacy question or request, email [email protected].