Privacy
What we collect, why, who else sees it, and how to make it go away. Plain language, no fine print doing work the plain language doesn’t also say.
Effective October 14, 2026 (version 4).
The short version
- We are not a data broker. We don’t sell your information or share it for advertising.
- We collect what we need to find your listings and show them to you, and nothing about anyone else on purpose.
- You can delete your report and account at any time. A short receipt of a paid order stays for three years.
What you give us
- Your name, and any other names you’ve gone by.
- Your city and state, any other addresses you’ve had, and your birth year.
- An email address and phone number, which we verify with a code sent to each before your account exists, and a password, which our sign-in provider stores in a form we can’t read.
- Other email addresses you’ve used, and your usernames. We use these to recognize your listings and profiles, and we check every email address you give us against known data breaches.
- Your confirmation that the details are yours and that you won’t use the report to screen anyone, and your acceptance of our Terms, with the time.
- Anything you write to us, such as support emails.
What we find
Listings about you on people-search sites, and screenshots of them; public profiles that match your usernames; and known data breaches that included any of your email addresses. These come from public sources and from the breach services named below.
What we collect automatically
- Our hosting provider’s servers record each request to Scourjay: your IP address, browser type, the page, and the time. These logs are kept for 30 days.
- Sign-in records, such as when your account was created and last signed in.
- Your browser stores a sign-in token and your progress through checkout, so you stay signed in. We don’t use advertising or analytics cookies.
- Records of your order: its status, when you paid, when your report was delivered and first opened, and notes made while preparing it.
How we use it
We use your information to build your report, deliver it, and support you; to prevent misuse of Scourjay; to handle payments, refunds, and disputes; and to meet our legal obligations. We don’t use it for anything else, and we don’t use it to train AI models.
Who else sees it
We work with a small number of service providers, and each one gets only what its part of the job needs:
- Stripe processes your payment. We never see or store your card details.
- Google hosts Scourjay, your account, and your report (Firebase), sends your phone verification code, keeps our server logs, and hosts our support email.
- Resend sends our emails, including your email verification code.
- Enzoic and XposedOrNot receive your email addresses, as written, to check them against known data breaches.
- OpenAI helps read listing screenshots and match public profiles. It doesn’t train on what we send. Under OpenAI’s current policy, it keeps what we send for up to 30 days to watch for abuse, unless the law requires it to keep data longer, and we’ve turned off its optional storage of results.
- Vercel hosts the internal tool we use to prepare your report.
Searching for you on a public site means that site sees the search, the same as when anyone else looks you up. We don’t create accounts or share your details with those sites beyond the search itself.
We share information beyond our service providers only:
- when the law requires it, such as a valid subpoena or court order;
- when we believe in good faith it’s needed to prevent serious harm to someone;
- to investigate misuse of Scourjay or to defend legal claims; or
- as part of a merger or sale of Scourjay, where these promises still apply. We’d email you at least 30 days before your information moved, so you could delete it first.
Selling, sharing, and tracking
We do not sell your information or share it for advertising. We don’t give it to data brokers, advertisers, or anyone buying lookups in bulk, and we don’t share it with other companies for their own marketing.
We don’t track you across other sites, and no other company tracks you across sites through Scourjay, except that Stripe collects device information on its checkout page to prevent fraud, under Stripe’s own privacy policy. Because we don’t track you, there is nothing for a browser’s “Do Not Track” or Global Privacy Control setting to turn off, and we treat every visitor the same whether it’s on or not.
Who can see your report
You, when you’re signed in to your account; people who work for us, as needed to provide the service; and the service providers above, which handle it only to provide their service to us. Before your account exists, we confirm you control the email address and phone number you gave us with a code sent to each.
How long we keep it
Your report and everything you gave us stay in your account until you delete them, so you can come back to your report while you work through removals. Deleting removes your report, your scan results, your screenshots, and your account itself, and your report is gone from your account immediately.
A few things outlast a deletion. If you paid for a scan, we keep a short receipt for three years: the name you scanned, your account email and phone number, when you ordered, paid, got your report, and first opened it, the payment reference Stripe gives us, and which version of the “this is me” confirmation you agreed to. It holds nothing your scan found. We use it only for payment questions, investigating misuse, and enforcing our Terms. If we’re investigating misuse of an order, we may keep the records we need until the investigation ends. Stripe keeps its own record of your payment, as payment and tax rules require, and our service providers keep their logs for the periods above.
We don’t keep separate backups of our database, so deleted data isn’t restored from one. Our providers may take a short time to clear deleted data from their own systems.
People who aren’t our customers
People-search listings often name other people too, such as relatives or people who lived at the same address. When we capture a customer’s listing, those names come with it, and they reach OpenAI when it reads the screenshot. We never search for those people, build a profile of them, show their names in the customer’s report, or use them for anything except deciding whether a listing belongs to our customer. They are deleted along with that customer’s report.
If you think we captured a listing that names you, email us with your name and the city you live in. We’ll remove any screenshot we hold that names you, without telling you who our customer was. We don’t need you to prove who you are, because we only ever delete. If you think someone ran a Scourjay scan on you while pretending to be you, tell us: we’ll investigate, and we can stop a report that hasn’t been delivered yet. We can’t take back a report that was already delivered.
Your choices
Wherever you live, you can:
- See what we hold about you. Most of it is in your report and account; email us for a copy of the rest.
- Correct it, by emailing us.
- Delete it, from your account at any time, or by emailing us.
We’ll confirm a request comes from you through your verified email or phone before acting on it, and we’ll answer within 45 days. Someone you authorize in writing can make a request for you. We won’t treat you differently for making one.
Nevada residents: we don’t sell personal information, but you can still send an opt-out request to support@scourjay.com.
Scanning only you
Scourjay is built to scan the person the details belong to, not a third party. You confirm this before you pay, your report goes only to your verified account, and that record is kept. None of that makes misuse impossible; it makes it traceable rather than anonymous, and we’d rather say that plainly than promise something we can’t back up.
Keeping it safe
Your data is encrypted in transit and at rest, and only a small number of people who work for us can reach it. No system is perfectly secure. If something went wrong that affected your data, we would tell you promptly.
Children
Scourjay is only for adults. We don’t knowingly collect anything from anyone under 18.
Changes
If this page changes in a way that matters, we’ll email customers who still have an account before the change takes effect, and update the version above.
Contact
support@scourjay.com. A person reads every message.
KlipStudio LLC, 2715 S. Norfolk St., Apt 209, San Mateo, CA 94403