Legal Documents

Legal Center

Last updated May 2026 · VANISH MODE.ME · vanishmode.me · Questions: support@vanishmode.me

🚫 No Advertising. No Tracking. No Exceptions.

        VANISH MODE.ME does not use advertising cookies, tracking pixels, social media plugins, or any third-party analytics that collect or share user data. We do not sell, rent, lease, or otherwise monetize your personal information under any circumstances. Your data is used for one purpose only — to submit removal requests on your behalf.
        
        We believe a privacy company that tracks its users is not a privacy company. We hold ourselves to that standard absolutely.

Overview

This Privacy Policy describes how VANISH MODE.ME ("we," "us," "our") collects, uses, and protects your personal information when you use our AI-powered data removal service.

Questions? Email privacy@vanishmode.me

Key Points

What we collect: Name, address, email, phone, date of birth, and optionally SSN and government ID — provided directly by you.
Why we collect it: Exclusively to submit legally authorized opt-out and deletion requests to data brokers on your behalf.
Do we share it? Only with infrastructure providers (Supabase, Railway, Anthropic) strictly necessary to operate the service.
Do we sell it? Never. Under any circumstances.
Sensitive data: SSN, DOB, and driver's license are AES-256 encrypted before storage and never displayed in plain text.

1. Information We Collect

Information You Provide

Full name
Email address
Phone number
Mailing address (current and previous)
Date of birth (encrypted)
Social Security Number — optional (encrypted)
Driver's license number — optional (encrypted)
Employer name — optional

Payment Data

Payment information is handled entirely by Stripe. We do not store payment card numbers. See Stripe's Privacy Policy.

2. How We Use Your Information

To deliver the service — submitting opt-out, deletion, and suppression requests to data brokers
To manage your account — profile creation and subscription management
To process payments — verifying subscription status via Stripe
To respond to inquiries — customer support
To comply with legal obligations — responding to lawful requests

We do not use your information for advertising, profiling, marketing to third parties, or any purpose beyond the service you paid for.

3. Sharing Your Information

We share data only with infrastructure providers strictly necessary to operate the service:

Provider	Purpose	Data shared
Supabase	Database storage	Encrypted profile data
Railway	Backend server hosting	None directly
Vercel	Frontend hosting	None
Anthropic	AI agent reasoning	Non-PII task context only
Stripe	Payment processing	Payment details only

4. Artificial Intelligence

Our agent uses Anthropic Claude to reason about opt-out submissions. When the agent processes a broker request, non-PII context (broker name, form structure, legal basis) is sent to Anthropic's API. We never send your personal information — name, address, SSN, or any PII — to the AI model.

5. Data Retention

We retain your personal information for as long as your account is active. After account termination, we delete all personal data within 90 days, except where retention is required by law. You can request immediate deletion at any time by emailing privacy@vanishmode.me.

6. Your Privacy Rights

Right to access — see all data we hold about you
Right to correct — update inaccurate information
Right to delete — request complete erasure of your data
Right to export — receive a copy of your data
Right to withdraw consent — stop all processing at any time
Right to non-discrimination — exercising rights will not affect your service

To exercise any right, email privacy@vanishmode.me

7. Contact

VANISH MODE.ME
Email: privacy@vanishmode.me
Website: vanishmode.me

Terms

By using VANISH MODE.ME ("Service"), you agree to these Terms. If you do not agree, do not use the Service. These Terms were last updated May 2026.

1. Service Description

VANISH MODE.ME is an AI-powered data removal service that automatically submits opt-out, deletion, and suppression requests to data brokers, people-search sites, credit bureaus, and marketing databases on your behalf, using information you provide through our secure profile form.

2. Eligibility

You must be at least 18 years old to use this Service.
You must be a US resident with a valid US address.
You must provide accurate, complete, and current information.
You may only create one account per person.

3. Authorization

By completing your profile and checking the authorization checkbox, you explicitly authorize VANISH MODE.ME to act as your authorized agent to submit opt-out, deletion, suppression, and data freeze requests to third parties on your behalf under FCRA, CCPA/CPRA, GLBA, and applicable state privacy laws.

4. Subscription & Billing

Subscriptions are billed monthly or annually depending on the plan selected.
All prices are in USD.
Payment is processed by Stripe. We do not store payment card data.
Subscriptions renew automatically unless cancelled.
You may cancel at any time from your account or by emailing support@vanishmode.me.

5. Limitations

We cannot guarantee that all data brokers will honor removal requests, as some brokers operate outside our reach or change their opt-out processes without notice. We cannot guarantee removal from all websites, social media platforms, or government records. Results vary based on the data broker and applicable law.

6. Prohibited Use

Using the service to submit requests on behalf of someone else without their explicit authorization
Providing false or misleading identity information
Attempting to reverse-engineer, scrape, or interfere with the service
Using the service for any illegal purpose

7. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VANISH MODE.ME SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID IN THE 12 MONTHS PRECEDING THE CLAIM.

8. Governing Law

These Terms are governed by the laws of the Commonwealth of Massachusetts, without regard to conflict of law provisions. Disputes shall be resolved in the state or federal courts of Essex County, Massachusetts.

9. Contact

For questions about these Terms: support@vanishmode.me

Security

How We Protect Your Data

We handle some of the most sensitive personal information that exists — Social Security numbers, date of birth, driver's licenses. Security is not an afterthought. Every layer of our architecture is designed around the principle that your data should be impossible to access by anyone who shouldn't have it, including us.

Technical Safeguards

🔐

AES-256-GCM Field-Level Encryption

SSN, date of birth, and driver's license are encrypted immediately on receipt using AES-256-GCM before being written to the database. The encryption key is stored separately from the data. Plain text values are never written to disk.

🔑

bcrypt Password Hashing

Passwords are hashed using bcrypt with cost factor 12 before storage. We cannot recover your password — only verify it. Even if our database were compromised, passwords could not be reversed.

🎫

JWT Tokens with 7-Day Expiry

All API access requires a signed JWT token with a 7-day expiry. Tokens are verified on every request. There is no "remember me" that bypasses this — each session requires re-authentication after 7 days.

🛡️

Rate Limiting on All Endpoints

Every API endpoint is rate-limited. Authentication endpoints have stricter limits (5 attempts/minute) to prevent brute-force attacks. Exceeded limits result in temporary lockout.

🔒

HTTPS Everywhere — TLS 1.2+

All traffic between your browser and our servers is encrypted in transit. We enforce HTTPS and reject plain HTTP connections. HSTS headers prevent protocol downgrade attacks.

💾

No Sensitive Data in Browser Storage

SSN, DOB, and driver's license are never written to localStorage, sessionStorage, or any browser cache. Only your session token (JWT) and non-sensitive user preferences are stored locally.

🗃️

Parameterized Queries — No SQL Injection Possible

All database queries use Supabase's parameterized query builder. Raw SQL concatenation is never used. Injection attacks are structurally impossible.

⛑️

Security Headers via Helmet.js

Our backend applies a full suite of security headers on every response: X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and Strict-Transport-Security.

🌐

CORS Whitelist — vanishmode.me Only

Cross-origin requests are restricted to vanishmode.me and www.vanishmode.me. No other domain can make authenticated requests to our API. This prevents cross-site request forgery from external domains.

Report a Vulnerability

If you discover a security vulnerability, please report it responsibly to security@vanishmode.me before public disclosure. We will respond within 48 hours and work with you to address the issue.

We do not currently offer a bug bounty program, but we appreciate responsible disclosure and will publicly credit researchers who report valid vulnerabilities.

Refunds

Refund Policy

Last updated May 2026. Questions: support@vanishmode.me

Monthly Subscriptions

Monthly subscriptions can be cancelled at any time from your account settings or by emailing support@vanishmode.me.

Cancellation takes effect at the end of your current billing period.
No refunds are issued for the current billing period — your access continues until the period ends.
You will not be charged again after cancellation is confirmed.

Annual Subscriptions

Annual subscriptions include a pro-rated refund within 30 days of purchase. If you cancel within 30 days of your annual billing date, you will receive a refund for the unused portion of your subscription.
After 30 days, annual subscriptions are non-refundable but can be cancelled to prevent renewal.

Service Failure Refunds

If the VANISH MODE.ME agent fails to run due to an error on our end — not due to broker-side CAPTCHA, ID requirements, or factors outside our control — you are entitled to a full refund for that billing period upon request.

To request a refund, email support@vanishmode.me with your account email and a description of the issue. We will review and process within 3 business days.

Contact for Refund Requests

Email: support@vanishmode.me
Subject: Refund Request — [your account email]
We respond within 1 business day.

Your Rights

CCPA, FCRA & Privacy Law Rights

VANISH MODE.ME exists to help you exercise these rights at scale. Here's what the law says you're entitled to — and how we help you claim it.

Your Rights Under CCPA/CPRA (California)

Right to know — You have the right to know what personal information data brokers hold about you, where it came from, and how it's used.
Right to delete — You have the right to request deletion of your personal information from any company that collects it, with limited exceptions.
Right to opt out of sale — Data brokers cannot sell your information if you opt out. This opt-out right extends to data "sharing" for targeted advertising.
Right to correct — You can demand that inaccurate personal information be corrected.
Right to limit use of sensitive personal information — Including SSN, precise geolocation, financial information, and health information.
Right to non-discrimination — Companies cannot penalize you for exercising your rights.

Response window: Brokers must acknowledge your request within 10 days and fulfill it within 45 days under CCPA. They may request a 45-day extension with notice.

Your Rights Under FCRA (Federal)

The Fair Credit Reporting Act governs consumer reporting agencies, background check companies, and tenant screening databases.

Right to know what's in your file — You can request a free copy of your consumer report from any FCRA-covered agency once every 12 months.
Right to dispute inaccurate data — If a report contains errors, the agency must investigate and correct or delete inaccurate information within 30 days.
Right to have outdated information removed — Most negative information must be removed after 7 years (bankruptcies after 10 years).
Right to know if information is used against you — If an "adverse action" is taken (e.g., denied credit, housing, or employment), you must be told and given the reporting agency's contact information.

VANISH MODE.ME as Your Authorized Agent

Under CCPA, you may designate an authorized agent to submit privacy rights requests on your behalf. VANISH MODE.ME acts as your authorized agent when you provide written authorization during profile setup (the consent checkbox).

This means:

Data brokers must treat our requests as if they came directly from you.
Brokers may ask you to directly confirm our authorization — we'll notify you if this happens and provide the steps needed.
Your authorization is specific to the opt-out, deletion, and suppression actions described in our service.

What Happens After a Request Is Submitted

Brokers have 45 days to respond under CCPA.
Many brokers confirm removal within 14 days — these appear as "Confirmed" in your dashboard.
Brokers that process requests but don't send confirmation appear as "Submitted" — legally binding even without a receipt.
Some brokers will re-add your data within 30–90 days from public records. This is why VANISH MODE.ME re-scans every 30 days automatically.

If a Broker Refuses to Honor Your Request

Contact the broker directly — use the contact details in your Tasks tab. Reference your CCPA deletion right and include the request date.
File a complaint with the California Privacy Protection Agency — cppa.ca.gov/consumers for CCPA violations.
File with the FTC — ftc.gov for FCRA violations or unfair data practices.
Contact your State AG — Most states with privacy laws have enforcement divisions. California, Colorado, Connecticut, Virginia, and Texas all have active enforcement programs.
Email us — support@vanishmode.me — we maintain records of every request sent and can provide documentation for your complaint.