Your privacy. We never need your intimate images.
People come to us at their most exposed. This page explains, in plain words, what information we collect, what we never ask for, who processes it, how long we keep it, and how you stay in control of it.
Privacy in plain words
We never need your intimate images.
A good privacy page should tell you plainly what we collect, what we never accept, who may process it, and when it is deleted.
Only what we need.
We ask only for the information needed to review your case and do any work you agree to.
Only people who need it.
Case material is seen only by our case team and the named service providers below. Public pages never show anyone's case details.
Sensitive cases handled separately.
Adult intimate images, AI nudes, sextortion, anything involving someone under 18, and ordinary reputation matters each start differently.
Set end dates.
Requests that don't become a paid case (including declined ones), links sent before payment, closed cases, and documents added before we stopped accepting files each have a set point when they are deleted. Email and chat history are deleted when you ask.
Public and private
What’s public, and what stays private.
This page explains how we work so you can trust us. Your private case file keeps the answer for your case, your evidence, and your updates private.
PUBLIC
How we handle information.
This policy says what we collect, what we never accept, who may process it, and when it is deleted.
PRIVATE
Your case stays private.
The answer for your case, your evidence, how it is processed, and our final notes stay in your private case file.
YOU
You stay in control.
You can ask what we received, where it is kept, what we keep, and how to have it deleted.
NEVER
What we never accept.
Intimate images, anything involving someone under 18, passwords, full ID numbers, and card numbers never go into a general form.
Three stages
Policy, review, case file.
This policy explains the rules. A private case review sets the scope. Your case file holds how your case is handled.
This policy
Names who is responsible, what we collect, who processes it, how to use your rights, how long we keep things, and what we never accept.
Private case review
Sorts out whether a matter is a general question, a private case, something for an official report, search-only, or something we decline — before any work starts.
Your case file
Holds your written scope, how your information is handled, who can access it, and your final report.
Sensitive information
We ask for less, not more.
Privacy here is practical. Our forms collect enough to understand your situation without pulling exposed material into a general form or a card payment.
Adult intimate images, AI nudes, and sextortion start with a private conversation and a short description. The images themselves are never part of the first review.
Start with a description
A review can start from a short private description. The exposed material itself is not needed for the first review.
Links, not files
You send public links or account names, one or many. We do not accept files, images, screenshots, or identity documents at any stage. Case material stays with the small case team and the named service providers.
Each kind of case handled separately
A general review, a private case review, an official report, search-only work, items we won't take on, and matters for a lawyer are kept separate before any AboutUs work.
Deleted when no longer needed
A request that doesn't become a paid case, including one we decline, is deleted no later than 120 days after you send it, sooner if you ask. Links you send before paying follow the same 120-day limit, or move into your case record when you pay.
Links, not files
Enough evidence to review. Nothing more exposed than needed.
FIRST REVIEW
A short private description, how urgent it is, and enough general context to understand the situation.
LINKS
Public links (web addresses) or account names, one or many. We do not accept files, screenshots, or identity documents, before or after payment.
NEVER
Intimate images, passwords, full ID or card numbers, anything involving someone under 18, or material you don't have the right to share.
Small team, named tools.
Case material stays with the case team and the service providers listed in this policy, each limited to its job.
Sensitive cases stay labeled.
Adult intimate images, AI nudes, sextortion, and anything involving someone under 18 are kept apart from the standard form.
When things are deleted.
Requests that don't become a paid case, including declined ones, go within 120 days, sooner if you ask. Links sent before payment go within 120 days, or move into the case record on payment. Documents added before we stopped accepting files go within 120 days at most. Case-room documents also go within 7 days after the case closes (or after being added to a closed case), and any document sooner on request. Closed case records go within 180 days after the close or the last payment, kept longer only for a live subscription, an open payment dispute, or a legal hold. Email and chat history are deleted when you ask.
How to use your rights.
Requests to see, correct, or delete your information — and questions about search results — go to our privacy contact by email, not lost in a chat.
Privacy at a glance
What happens to your information, step by step.
The policy below is the full legal text. This summary shows what we collect, who can see it, what we never accept, and when it is deleted.
Your contact details, the type of matter you pick, and a short private description.
No intimate images, passwords, full ID numbers, card numbers, or anything involving someone under 18 in the form.
Reviewed, then turned into a written scope, or deleted no later than 120 days after you send it (sooner if you ask).
A short private description of adult intimate images, AI nudes, sextortion, or urgent exposure.
Our team and our AI assistant answer in the chat, and a person reviews every paid case within 48 hours; there is no upload form.
Handled privately, referred to an official report, or declined as not a fit.
Public links or account names, one or many. We do not accept files, screenshots, or identity documents at any stage.
Private, access-controlled storage; only the small case team and named service providers.
Deleted no later than 120 days after you send them, or moved into your case record when you pay. Documents added before we stopped accepting files go within 120 days of receipt at most. Case-room documents also go within 7 days after the case closes (or after being added to a closed case), and any document sooner on request.
Once you have paid: the messages and updates in your case room, your final report, and the payment and refund history.
A private case room that only you and the small case team can open.
Deleted with the case room within 180 days after the case closes or its last payment, kept longer only for a live subscription, an open payment dispute, or a legal hold. The signed letter of authorization and its signing record are kept for 3 years after the case closes, then deleted, unless the law requires longer.
Your IP address when you submit (for abuse protection, and in the signing record when you sign an authorization), plus overall analytics and ad measurement data.
Google sees the pages you view and the amount of any payment. Our events never tell it what you wrote or which situation or service you picked.
You can opt out in your browser or send us a privacy request at any time.
Your rights
One email address for every privacy request.
See what we hold.
Ask for the personal information connected to your question or case.
Fix what is wrong.
Ask us to correct a case detail, contact detail, or supporting record that is inaccurate.
Delete what is no longer needed.
Ask us to delete information that is no longer needed for the review, the case, or a legal obligation.
Search questions stay separate.
Questions about hiding search results are labeled as search-only work, never as removal at the source.
We verify privacy requests and respond under the timing required by U.S. state privacy law (incl. CCPA/CPRA).
Who is responsible
AboutUsAgency, Inc., 169 Madison Ave STE 38501, New York, NY 10016, is the data controller for this website and for case intake. Privacy questions and requests go to support@aboutusagency.com.
What we collect
Private case review form: your name, email address, the content type you select, and the short private description you provide. We ask for general context first; the exposed material itself is not needed for the first review.
Links, not files: before payment you send us only public links (web addresses) or account names, one or many. We do not accept files, images, screenshots, or identity documents at any stage, before or after payment. Intimate or sexual originals stay on your own device and never belong in our forms, storage, email, chat, or card payment.
Identity check (paid clients): after payment we ask you to type your legal name, date of birth, and state in your case room; these details are recorded as self-attested, not verified. We keep what you typed, except your date of birth, which we use to confirm you are 18 or older and keep only when the service you bought needs it to file requests (booking-photo and data-broker removals).
Your authorization: to act for you, we ask you to sign a letter of authorization electronically in your case room. We keep the letter and a record of how it was signed: the time, your IP address, your browser and device description, the email code check, and the identity check result. It does not include your links.
Chat: messages you send through the on-site chat (operated by Crisp). Our chat assistant discloses that it is automated; sensitive matters are handed to a human. Crisp carries conversation and case status, not identity documents or intimate files.
Email: correspondence you send to support@aboutusagency.com.
Technical data: your IP address at form submission (used for abuse and spam protection, and, when you sign an authorization, as part of the signing record) and standard analytics signals described in section 06.
Why we process it
To assess your matter, respond to you, perform accepted removal work, protect the site against abuse, and measure — in aggregate — whether the site works. We do not sell personal information, and we do not use your case details for marketing.
Confidentiality by design
Only a small case team can open intake records, and they work under a strict confidentiality agreement. We never re-expose, republish, or request intimate originals. Our process is built on public links, private descriptions, and optional on-device fingerprinting where it applies. If you choose the local fingerprint tool, your browser sends a mathematical fingerprint value, media type, and byte size, not the file, filename, or preview. We do not publish client names or identifying case details; public reporting stays aggregate or anonymized.
Who processes data on our behalf
These companies process information for us. Each is listed with what it receives.
Vercel (website hosting): runs this website and its servers, and keeps our encrypted database backups in private, access-controlled storage, along with any documents added before we stopped accepting files, until they are deleted (section 07).
Neon (database): holds what you send us through our forms and your case room: your contact details, your request and the links you send, your case record, case-room messages, the result of your identity check, and the letter of authorization you sign and its signing record.
Stripe (payments): your email, the service and price you are paying for, a reference that links the payment to your request, the confirmations you give before paying (such as that you are 18 or older), and how you reached our site (for example, an ad click). On Stripe’s payment page you enter your card details and, where asked, your name and billing address; we never receive your card number.
Crisp (on-site chat): the messages you send in the chat, including the short description you type to start it, your name and email, the type of matter, your case reference and status, and any payment link and amount we send you there. Like any website chat, it also sees your IP address and browser details. Our team also keeps private notes in Crisp that you never see: for an ordinary request, they hold the written description you give in our case review or case forms (with links taken out) and the IP address you sent it from; for an intimate-image or sextortion matter, they hold only the type of matter, your contact details and the case status, never your description or links. Crisp does not receive your documents or intimate files.
Resend (email delivery): sends our emails to you (receipts, payment and sign-in links, case updates, signing codes, monitoring summaries, and billing notices) and our team’s alerts about new requests, which carry the details listed under Slack and Telegram. The only email that carries an attachment is the signed copy of your authorization letter, which lists no links; if you turned on discreet inbox mode, it carries no attachment and you download the copy in your case room.
Monday.com (internal case board): one entry per paid case, with its case reference, your email, the service, status, amount, and key dates; a note each time you add a link or your case file, saying what was added (such as the platform or the type of harm) and how many, never the link or your written summary; and any AI brief our team prepares from a conversation with you (see Anthropic), which summarizes the matter and can name the accounts and links to act on. The entry is deleted when the case record is deleted.
Slack and Telegram (team alerts): messages that alert our team to a new request or case activity: the type of matter (for example, sextortion or intimate images), the service and price, your case or request reference and status, the page you started on, how you reached our site (for example, an ad click), a link to our private admin page, and, for a business inquiry, the organization and website you give. These alerts do not include your name, email address, phone number, written description of the matter, links, documents, or files, and our team's alert emails carry the same details. Slack also receives a daily count of open cases, with no case details, and any AI brief our team prepares (see Monday.com).
Anthropic (AI model): reads the text of each question and case review request you send, with numbers such as phone and card numbers taken out first, including a description of an intimate-image matter, and any public link you include unless it points to an adult site or an intimate-image matter. It uses them to screen each request for safety and to draft our first email reply; it does not receive your email address. It also reads a conversation you had with us when our team asks it to prepare an internal case brief, and our AI chat assistant uses it to reply in chat, reading the recent messages in that chat with any email address, phone or card number you type there taken out first. During paid case work, our team also uses Anthropic's AI assistant to draft the removal requests, reports and written messages for your case, which can include your name, the names and handles you give us, and the links in your case, including links to adult sites; a person on our team checks each of those drafts before it is sent. It does not receive your documents. Our website's own requests to Anthropic (the safety screen, the first email reply, the case brief and the chat assistant) are under Anthropic's commercial terms, and it does not use that information to train its models.
Brave Search (web search for monitoring): the account handles, usernames, or names you ask us to monitor, sent as search terms once you authorize monitoring. It does not receive your email, your documents, or the fingerprints of your images, which we compare on our own servers.
Google (email and measurement): Google Workspace hosts our email inbox, so it holds the emails you send us and our replies. Google Analytics and Google Ads receive the usage and measurement signals described in section 06.
If you choose to write to us on WhatsApp where we offer it, WhatsApp carries those messages under its own terms.
We do not sell or rent personal information to anyone. We disclose information beyond these processors only where the law requires it — or where filing a removal notice on your behalf necessarily identifies the request to a platform.
Analytics & advertising cookies
We use Google Analytics 4 and Google Ads conversion measurement to understand site usage and ad performance. They set cookies and receive, tied to a Google cookie ID and not your name: the full address of each page you view, the steps you reach (a form opened, a request sent, a checkout started), a reference number that stops one request or payment being counted twice, and, after a payment, the amount paid. A page address can show which of our help pages you read, and on our case form it can carry the situation that a link, or a checkout you cancelled, took you to. The events we send never include your name, email, phone number, what you wrote, your links or files, or the situation or service you pick on a form. We do not load them when your browser sends Global Privacy Control or Do Not Track. You can also opt out with the Google Analytics opt-out or by blocking cookies in your browser — the site works fully without them.
Visitors from the European Economic Area, the UK and Switzerland are asked first: the tags load only after they choose Accept, and the chat loads only when they open it. To know whom to ask, our server reads the country your connection comes from when a page first loads; it does not store it. Anyone can turn the tags off, or back on, under Your privacy choices below.
Your privacy choices
Choose whether Google Analytics and Google Ads may load in this browser. The site works the same either way.
Your choice is kept in this browser. The buttons work once this page has loaded.
This choice covers Google Analytics and Google Ads in this browser only. Clearing your browser's site data resets it. Turning them off after they loaded takes full effect from the next page.
How long we keep it
A request that does not become a paid case, including one we decline, is deleted no later than 120 days after you send it, and sooner if you ask. For engaged cases, we keep the case record (the messages and updates in your case room, your final report, and the payment and refund history) while the engagement and any monitoring you have signed up for run. After your case closes, the record is automatically deleted no later than 180 days after the close, or after its last payment if that comes later: the time in which a card payment can usually still be disputed, plus time to answer a dispute. We keep a closed record longer only while a subscription can still bill, a payment dispute is open, or we are legally required to preserve it, and delete it when that ends. The case room and its final report are deleted with the record, so save a copy of the report if you want one. Copies in our encrypted database backups are gone once those backups roll over, after 35 days. What remains is a log entry that a case with that reference was deleted, and when; the payment itself stays in the records of our payment processor.
Links you send before paying are deleted no later than 120 days after you send them; if you pay, they move into your case record and follow its schedule. We no longer accept documents or files. Documents added before we stopped accepting them are kept only as long as they are needed for your case and are automatically deleted no later than 120 days after receipt. Documents in your private case room are also deleted within 7 days after your case closes (a document added after it closes, within 7 days after it is added), if that comes first, and you can delete any of them yourself at any time. Any document can be deleted sooner on request. Our email inbox and the chat history in Crisp are not on an automatic schedule: we delete a conversation when you ask, unless the law requires us to keep it. Our team's alerts in Slack and Telegram name no person: they carry the type of matter and a reference, never your name, email address, description, or links.
The letter of authorization you sign and its signing record are kept for 3 years after your case closes, because they show you authorized each request we sent for you, and are then deleted, unless we are legally required to preserve them longer; they do not contain your links. The result of your identity check is deleted with your case record, except the copy in the signing record of a letter you sign, which is kept with the letter.
Your rights
You may ask to see, correct, or delete your personal information at any time by writing to support@aboutusagency.com. We verify the request and answer within 45 days, wherever you live. Section 08A sets out every right we offer, how to appeal a decision, and how someone can ask for you.
U.S. state privacy rights
These are the privacy rights we offer to anyone who asks, wherever you live in the United States. This section says what we do and how to use them. It does not say which state's law applies to you.
What we collect, and what happens to it
Contact details and identifiers
- What
- Your name, email address, the reference of your request or case, and your IP address when you submit (used for abuse and spam protection, and, when you sign an authorization, as part of the signing record).
- Where it comes from
- You, through our forms, chat, email and case room. The IP address comes from your connection.
- Why we use it
- To answer you, run the work you agree to, and protect the site against abuse.
- Who receives it
- The service providers named in section 05, each limited to its job.
- How long we keep it
- A request that does not become a paid case is deleted no later than 120 days after you send it. If you pay, it moves into your case record: deleted no later than 180 days after the case closes or its last payment. Email and chat history are deleted when you ask.
What you tell us about your matter
- What
- The type of matter you pick, the short description you write, and the public links you send. We never accept files, images, or identity documents.
- Where it comes from
- You.
- Why we use it
- To review your matter and do the work you agree to.
- Who receives it
- Our case team, and the service providers section 05 lists as receiving it. When we file a removal request for you, the platform or search engine receives what that request needs.
- How long we keep it
- A request that does not become a paid case is deleted no later than 120 days after you send it. If you pay, it moves into your case record: deleted no later than 180 days after the case closes or its last payment.
Payments
- What
- The service you pay for, the amount, and the payment and refund history. We never receive your card number.
- Where it comes from
- You and Stripe, our payment processor.
- Why we use it
- To take payment, send receipts, give refunds, and answer a payment dispute.
- Who receives it
- Stripe, and the internal case board and team alerts described in section 05.
- How long we keep it
- With your case record: deleted no later than 180 days after the case closes or its last payment, whichever is later (section 07). Stripe keeps the payment itself in its own records.
Identity check and authorization
- What
- The legal name and state you type in your case room, and your date of birth only where the service needs it (section 02). The letter of authorization you sign and its signing record.
- Where it comes from
- You.
- Why we use it
- To confirm you may ask for the removals we send on your behalf.
- Who receives it
- The service providers named in section 05.
- How long we keep it
- As section 07 sets out. The signed letter and its signing record are kept for 3 years after the case closes, then deleted, unless the law requires longer.
Use of this site
- What
- The pages you view, the steps you reach, and the amount of a payment, tied to a Google cookie ID, as section 06 describes. Never what you write or the service you pick.
- Where it comes from
- Your browser, through cookies set by Google Analytics and Google Ads.
- Why we use it
- To see whether the site and our ads work.
- Who receives it
- Google.
- How long we keep it
- Held by Google, not by us. The cookies stay in your browser until they expire or you clear them, and you can turn them off under Your privacy choices (section 06A).
Country of your connection
- What
- The country your connection comes from, when a page first loads.
- Where it comes from
- Your connection, as our hosting provider reads it.
- Why we use it
- To decide whether to ask before any measurement (section 06).
- Who receives it
- No one.
- How long we keep it
- Not stored. Only the answer, ask first or not, is kept in your browser tab.
Sensitive information
Some of what you send can be sensitive, such as a description of an intimate-image or sextortion matter, or your identity check details. We use it only to review your matter, do the work you agree to, keep it secure, and meet legal obligations. We do not use it to draw conclusions about you, and what you write or the type of matter you pick is never sent to analytics or advertising tools (section 06).
No selling, no sharing for ads
We do not sell personal information. We do not share it for cross-context behavioral advertising, meaning ads aimed at you because of what you do on other sites and apps. Our Google tags run with Google's ad-personalization and Google signals settings turned off, and Google states that events sent this way “will not be used for ads personalization”. You can still turn Google measurement off in this browser under Your privacy choices, and a Global Privacy Control signal from your browser does the same.
Your rights
- Know and access: what personal information we hold about you, where it came from, why we use it, who received it, and a copy of it.
- Delete: ask us to delete it, unless we must keep it to finish work you paid for, answer a payment dispute, or meet a legal obligation. If so, we tell you what we keep and why.
- Correct: ask us to fix anything that is wrong.
- Opt out: of selling, sharing for ads, and targeted advertising. We do none of these; you can also turn Google measurement off under Your privacy choices.
- Limit sensitive information: we already use it only as described above. Ask us if you want to know more.
How to make a request
Email support@aboutusagency.com from the address you used with us, and say what you would like. We match your request to the records that address is on. If we need to be sure it is you, we may ask for a detail we already hold, such as your case reference. We never ask for ID documents, files, or passwords. We answer within 45 days of receiving your request, and there is no charge.
Appeals
If we turn down all or part of a request, we tell you why. You can appeal by replying to our answer with “Appeal” in the subject line. We look at the request again and send you our decision and its reasons in writing within 45 days.
Someone asking for you
Someone you authorize, such as a family member or a lawyer, can make a request for you. Before we act on it, we confirm with you, by email to the address you used with us, that you asked them to.
No different treatment
Using any of these rights never changes our prices, the quality of our work, or whether we take your case.
Minors
This service is for adults (18+) only, and we do not knowingly collect information from anyone under 18. We work with adults (18+) only. If intimate images of someone under 18 are involved, report it immediately to the NCMEC CyberTipline at report.cybertip.org, use NCMEC's Take It Down at takeitdown.ncmec.org, and contact local law enforcement. Do not send the content to anyone — including us.
Changes & contact
We update this page when our practices change and revise the date above. Material changes are noted prominently. Questions: support@aboutusagency.com · AboutUsAgency, Inc., 169 Madison Ave STE 38501, New York, NY 10016.
THIS PAGE IS INFORMATION ABOUT OUR PRACTICES, NOT LEGAL ADVICE.