You’re trusting a privacy company with personal data. Here’s how we hold it.

Everything between your browser and Erasery travels over TLS, and our databases are encrypted at rest with AES-256. We go one layer further for the fields that matter most: personal information you give us for people-search removals — your name and city — is additionally encrypted at the column level with AES-256-GCM before it is written to the database, with per-value keys derived from a managed keyring.

That means a database backup, a misdirected query, or a compromised reporting tool sees ciphertext, not your identity. Signed authorization documents are encrypted the same way before they are stored.

Ask us to delete your account and we purge your personal information within 30 days. We retain only what the law requires us to keep — billing records and signed authorization documents — for their legal retention periods. Deletion requests go to support@erasery.com or through your account settings.

Not to advertisers, not to “partners,” not in aggregate, not ever. Our business model is the subscription you pay us — full stop. A privacy company that monetizes your data isn’t a privacy company, and we wrote that commitment into our Privacy Policy.

When you subscribe, you authorize Erasery to act as your authorized agent — a role recognized under California law and a growing list of state privacy statutes. Acting as your agent, we submit removal requests to people-search and data broker sites on your behalf, citing the applicable law for your state.

Two things to know about how that plays out in practice. First, some brokers respond by contacting you directly to verify the request — that’s them complying, not spam; we tell you what to expect and handle the follow-ups we can. Second, brokers get removal requests submitted and are monitored until your listing comes down. We never claim a removal happened until we can show it — which is why your dashboard collects screenshot proof.

California residents can also use the state’s free DROP service (privacy.ca.gov) to request deletion from registered data brokers. Erasery covers additional people-search sites, handles verification follow-ups, and monitors for reappearance. We think the honest pitch is both: use DROP, and let us cover the rest.

Found a vulnerability in Erasery? We want to hear about it before anyone else does. Email security@erasery.com with details and steps to reproduce. We commit to acknowledging reports promptly, keeping you informed as we fix the issue, and never pursuing action against good-faith research.