Your privacy. We never need your intimate images.

AboutUsAgency, Inc., 169 Madison Ave STE 38501, New York, NY 10016, is the data controller for this website and for case intake. Privacy questions and requests go to support@aboutusagency.com.

Private case review form: your name, email address, the content type you select, and the short private description you provide. We ask for general context first; the exposed material itself is not needed for the first review.

Links, not files: before payment you send us only public links (web addresses) or account names, one or many. We do not accept files, images, screenshots, or identity documents at any stage, before or after payment. Intimate or sexual originals stay on your own device and never belong in our forms, storage, email, chat, or card payment.

Identity check (paid clients): after payment we ask you to type your legal name, date of birth, and state in your case room; these details are recorded as self-attested, not verified. We keep what you typed, except your date of birth, which we use to confirm you are 18 or older and keep only when the service you bought needs it to file requests (booking-photo and data-broker removals).

Your authorization: to act for you, we ask you to sign a letter of authorization electronically in your case room. We keep the letter and a record of how it was signed: the time, your IP address, your browser and device description, the email code check, and the identity check result. It does not include your links.

Chat: messages you send through the on-site chat (operated by Crisp). Our chat assistant discloses that it is automated; sensitive matters are handed to a human. Crisp carries conversation and case status, not identity documents or intimate files.

Email: correspondence you send to support@aboutusagency.com.

Technical data: your IP address at form submission (used for abuse and spam protection, and, when you sign an authorization, as part of the signing record) and standard analytics signals described in section 06.

To assess your matter, respond to you, perform accepted removal work, protect the site against abuse, and measure — in aggregate — whether the site works. We do not sell personal information, and we do not use your case details for marketing.

Only a small case team can open intake records, and they work under a strict confidentiality agreement. We never re-expose, republish, or request intimate originals. Our process is built on public links, private descriptions, and a digital fingerprint made on your own device where it applies. We do not publish client names or identifying case details; public reporting stays aggregate or anonymized.

These companies process information for us. Each is listed with what it receives.

Vercel (website hosting): runs this website and its servers, and keeps our encrypted database backups in private, access-controlled storage, along with any documents added before we stopped accepting files, until they are deleted (section 07).

Neon (database): holds what you send us through our forms and your case room: your contact details, your request and the links you send, your case record, case-room messages, the result of your identity check, and the letter of authorization you sign and its signing record.

Stripe (payments): your email, the service and price you are paying for, a reference that links the payment to your request, the confirmations you give before paying (such as that you are 18 or older), and how you reached our site (for example, an ad click). On Stripe’s payment page you enter your card details and, where asked, your name and billing address; we never receive your card number.

Crisp (on-site chat): the messages you send in the chat, including the short description you type to start it, your name and email, the type of matter, your case reference and status, and any payment link and amount we send you there. Like any website chat, it also sees your IP address and browser details. Our team also keeps private notes in Crisp that you never see: for an ordinary request, they hold the written description you give in our case review or case forms (with links taken out) and the IP address you sent it from; for an intimate-image or sextortion matter, they hold only the type of matter, your contact details and the case status, never your description or links. Crisp does not receive your documents or intimate files.

Resend (email delivery): sends our emails to you (receipts, payment and sign-in links, case updates, signing codes, monitoring summaries, and billing notices) and our team’s alerts about new requests, which carry the details listed under Slack and Telegram. The only email that carries an attachment is the signed copy of your authorization letter, which lists no links; if you turned on discreet inbox mode, it carries no attachment and you download the copy in your case room.

Monday.com (internal case board): one entry per paid case, with its case reference, your email, the service, status, amount, and key dates; a note each time you add a link or your case file, saying what was added (such as the platform or the type of harm) and how many, never the link or your written summary; and any AI brief our team prepares from a conversation with you (see Anthropic), which summarizes the matter and can name the accounts and links to act on. The entry is deleted when the case record is deleted.

Slack and Telegram (team alerts): messages that alert our team to a new request or case activity: the type of matter (for example, sextortion or intimate images), the service and price, your case or request reference and status, the page you started on, how you reached our site (for example, an ad click), a link to our private admin page, and, for a business inquiry, the organization and website you give. These alerts do not include your name, email address, phone number, written description of the matter, links, documents, or files, and our team's alert emails carry the same details. Slack also receives a daily count of open cases, with no case details, and any AI brief our team prepares (see Monday.com).

Anthropic (AI model): reads the text of each question and case review request you send, with numbers such as phone and card numbers taken out first, including a description of an intimate-image matter, and any public link you include unless it points to an adult site or an intimate-image matter. It uses them to screen each request for safety and to draft our first email reply; it does not receive your email address. It also reads a conversation you had with us when our team asks it to prepare an internal case brief, and our AI chat assistant uses it to reply in chat, reading the recent messages in that chat with any email address, phone or card number you type there taken out first. During paid case work, our team also uses Anthropic's AI assistant to draft the removal requests, reports and written messages for your case, which can include your name, the names and handles you give us, and the links in your case, including links to adult sites; a person on our team checks each of those drafts before it is sent. It does not receive your documents. Our website's own requests to Anthropic (the safety screen, the first email reply, the case brief and the chat assistant) are under Anthropic's commercial terms, and it does not use that information to train its models.

Brave Search (web search for monitoring): the account handles, usernames, or names you ask us to monitor, sent as search terms once you authorize monitoring. It does not receive your email, your documents, or the fingerprints of your images, which we compare on our own servers.

Google (email and measurement): Google Workspace hosts our email inbox, so it holds the emails you send us and our replies. Google Analytics and Google Ads receive the usage and measurement signals described in section 06.

If you choose to write to us on WhatsApp where we offer it, WhatsApp carries those messages under its own terms.

We do not sell or rent personal information to anyone. We disclose information beyond these processors only where the law requires it — or where filing a removal notice on your behalf necessarily identifies the request to a platform.

We use Google Analytics 4 and Google Ads conversion measurement to understand site usage and ad performance. They set cookies and receive, tied to a Google cookie ID and not your name: the full address of each page you view, the steps you reach (a form opened, a request sent, a checkout started), a reference number that stops one request or payment being counted twice, and, after a payment, the amount paid. A page address can show which of our help pages you read, and on our case form it can carry the situation that a link, or a checkout you cancelled, took you to. The events we send never include your name, email, phone number, what you wrote, your links or files, or the situation or service you pick on a form. We do not load them when your browser sends Global Privacy Control or Do Not Track. You can also opt out with the Google Analytics opt-out or by blocking cookies in your browser — the site works fully without them.

Visitors from the European Economic Area, the UK and Switzerland are asked first: the tags load only after they choose Accept, and the chat loads only when they open it. To know whom to ask, our server reads the country your connection comes from when a page first loads; it does not store it. Anyone can turn the tags off, or back on, under Your privacy choices, one setting for every page of this site.

A request that does not become a paid case, including one we decline, is deleted no later than 120 days after you send it, and sooner if you ask. For engaged cases, we keep the case record (the messages and updates in your case room, your final report, and the payment and refund history) while the engagement and any monitoring you have signed up for run. After your case closes, the record is automatically deleted no later than 180 days after the close, or after its last payment if that comes later: the time in which a card payment can usually still be disputed, plus time to answer a dispute. We keep a closed record longer only while a subscription can still bill, a payment dispute is open, or we are legally required to preserve it, and delete it when that ends. The case room and its final report are deleted with the record, so save a copy of the report if you want one. Copies in our encrypted database backups are gone once those backups roll over, after 35 days. What remains is a log entry that a case with that reference was deleted, and when; the payment itself stays in the records of our payment processor.

Links you send before paying are deleted no later than 120 days after you send them; if you pay, they move into your case record and follow its schedule. We no longer accept documents or files. Documents added before we stopped accepting them are kept only as long as they are needed for your case and are automatically deleted no later than 120 days after receipt. Documents in your private case room are also deleted within 7 days after your case closes (a document added after it closes, within 7 days after it is added), if that comes first, and you can delete any of them yourself at any time. Any document can be deleted sooner on request. Our email inbox and the chat history in Crisp are not on an automatic schedule: we delete a conversation when you ask, unless the law requires us to keep it. Our team's alerts in Slack and Telegram name no person: they carry the type of matter and a reference, never your name, email address, description, or links.

The letter of authorization you sign and its signing record are kept for 3 years after your case closes, because they show you authorized each request we sent for you, and are then deleted, unless we are legally required to preserve them longer; they do not contain your links. The result of your identity check is deleted with your case record, except the copy in the signing record of a letter you sign, which is kept with the letter.

You may request access to, and correction of, the personal information we hold about you under the Privacy Act 1988 and the Australian Privacy Principles, regulated by the OAIC. Australia has no general 'right to erasure', but we delete information we no longer need and honour reasonable deletion requests.

Requests go to support@aboutusagency.com. We will verify the request and respond within the period required by Privacy Act 1988 (Cth) & the Australian Privacy Principles. You may also ask us about search-engine de-listing and outdated-content requests (Australia has no general right to be forgotten).

This service is for adults (18+) only, and we do not knowingly collect information from anyone under 18. We work with adults (18+) only. If intimate images of someone under 18 are involved, report it to the Australian Centre to Counter Child Exploitation (ACCCE), led by the Australian Federal Police, at accce.gov.au/report; you can also report to the eSafety Commissioner at esafety.gov.au/report. Youth can call Kids Helpline on 1800 55 1800. Do not send the content to anyone — including us.

We update this page when our practices change and revise the date above. Material changes are noted prominently. Questions: support@aboutusagency.com · AboutUsAgency, Inc., 169 Madison Ave STE 38501, New York, NY 10016.

THIS PAGE IS INFORMATION ABOUT OUR PRACTICES, NOT LEGAL ADVICE.