Privacy Policy

Introduction

Last updated February 23rd, 2026 PRIVACYCHECK, INC. dba Hush (“Hush,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website(s), use our mobile applications, or engage with our digital footprint monitoring and remediation services (collectively, the “Services”).

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described herein. If you do not agree with this Privacy Policy, please do not use our Services.

This Privacy Policy is incorporated into and subject to our Terms of Service.

Information We Collect

We collect information in several ways, directly from you, automatically through your use of the Services, and from third-party sources.

Information You Provide Directly

• Account registration details: name, email address, phone number, and password.
• Billing and payment information: credit card details, billing address, and transaction history (processed securely through our payment processor, Stripe).
• Identity and personal information you provide to enable our Services: home address, date of birth, associated family members, and other data necessary to locate and remove your digital footprint.
• Communications you send us: support requests, feedback, and correspondence.

Information Collected Automatically

• Device and browser information: IP address, browser type and version, operating system, and device identifiers.
• Usage data: pages visited, features used, links clicked, session duration, and referring URLs.
• Log data: server logs, error reports, and activity timestamps.
• Location data: approximate geographic location derived from your IP address.

Information from Third Parties

• Data brokers and public records: as part of performing our Services, we search data broker databases, public records, and other online sources for personal information associated with your profile. This information is used solely to identify and request removal of your data.
• Authentication providers: if you sign in using a third-party account (e.g., Google, Apple), we receive basic profile information as authorized by you.
• Analytics and advertising partners: aggregated or pseudonymous data to help us understand how our Services are used.

How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services.
• Create and manage your account, verify your identity, and process payments.
• Perform digital footprint monitoring and remediation services on your behalf, including submitting opt-out and deletion requests to data brokers.
• Communicate with you about your account, service updates, alerts, and support requests.
• Send promotional and marketing communications (where you have consented or where permitted by law). You may opt out at any time.
• Analyze usage patterns and improve the functionality, performance, and security of the Services.
• Comply with legal obligations, enforce our Terms of Service, and protect the rights, property, and safety of Hush, our users, and others.
• Detect, investigate, and prevent fraudulent or unauthorized activity.

How We Share Your Information

Hush does not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We share information with trusted third-party vendors and service providers who perform functions on our behalf, such as payment processing, cloud hosting, analytics, email delivery, and customer support. These parties are contractually obligated to use your information only to provide services to us and in accordance with this Privacy Policy.

Data Brokers (on Your Behalf)

As part of the Services, we submit opt-out and deletion requests to data brokers and similar third parties on your behalf. This necessarily involves sharing your name, address, and other identifying information with those third parties solely for the purpose of requesting removal of your data.

Business Transfers

If Hush is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any such change in ownership and your choices regarding your information.

All of your Personal Data that we collect may be transferred to a third-party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process (such as a subpoena or court order), or when we believe disclosure is necessary to protect the rights, property, or safety of Hush, our users, or the public.

With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

Parties You Authorize, Access or Authenticate

We may share your Personal Data with third parties with whom you authorize us to share it, including Authorized Managers you have designated through the Services. Authorized Managers have access to your Personal Data to the extent necessary to manage your account on your behalf, subject to the limitations set forth in our Terms of Service.

Legal Obligations

We share Personal Data as described in the “Meeting Legal Requirements and Enforcing Legal Terms” section above, and in compliance with applicable law.

Data that is Not Personal Data

We may create aggregated, de-identified or anonymized data from the Personal Data we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymized data and share it with third parties for our lawful business purposes, including to analyze, build and improve the Services and promote our business, provided that we will not share such data in a manner that could identify you.

Cookies & Tracking Technologies

We use cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the Services, analyze usage, and deliver relevant content.

Types of Cookies We Use

• Essential cookies: necessary for the Services to function. These cannot be disabled.
• Performance cookies: help us understand how visitors interact with our Services by collecting aggregated analytics data.
• Functionality cookies: remember your preferences and settings to provide a more personalized experience.
• Marketing cookies: used to deliver relevant advertisements and track the effectiveness of marketing campaigns.

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Services. We use Google Analytics to analyze usage of our Services. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Tracking Tools and Opt-Out

We use the following types of cookies and tracking tools:

Essential Cookies. These cookies are essential to provide you with services available through our Services and to enable you to use some of its features. Without these cookies, the services that you have asked for cannot be provided, and we only use these cookies to provide you those services.

Analytics Cookies. These cookies collect information that is used either in aggregate form to help us understand how our Services is being used or how effective our marketing campaigns are, or to help us customize our Services for you.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our Services. For more information about cookies and how to disable them, you can consult the information at www.allaboutcookies.org.

Data Retention

We retain your personal information for as long as your account is active, as necessary to provide the Services, or as required by law. When you cancel your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes, preventing fraud, or complying with legal obligations).

Information collected through our Services in connection with data broker searches (i.e., the personal data we find and subsequently remove) is retained only as long as necessary to perform the Services and is not used for any other purpose.

We retain Personal Data about you for as long as you have an open account with us or as otherwise necessary to provide you with our Services. In some cases, we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. Afterwards, we retain some information in a depersonalized or aggregated form but not in a way that would identify you personally.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information. These may include:

• Access: the right to request a copy of the personal information we hold about you.
• Correction: the right to request that we correct inaccurate or incomplete personal information.
• Deletion: the right to request that we delete your personal information, subject to certain exceptions.
• Portability: the right to receive your personal information in a structured, machine-readable format.
• Objection and restriction: the right to object to or restrict certain processing of your personal information.
• Withdrawal of consent: where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at hello@gohush.com. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (“CCPA”) provides you with specific rights regarding your personal information.

Right to Know

You have the right to request that we disclose: the categories and specific pieces of personal information we have collected about you; the categories of sources from which we collect personal information; our business or commercial purpose for collecting personal information; and the categories of third parties with whom we share personal information.

In connection with any Personal Data we may sell or disclose to a third party for a business purpose, you have the right to know: the categories of Personal Data about you that we sold and the categories of third parties to whom the Personal Data was sold; and the categories of Personal Data that we disclosed about you for a business purpose, and the categories of persons to whom the Personal Data was disclosed for a business purpose. You can submit a verified request to us as described above to request this information, and we will disclose the Personal Data we collected, sold, or disclosed about you in the past 12 months.

Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions.

You have the right to request that we delete any of your Personal Data that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your Personal Data from our records, unless an exception applies. We will not discriminate against you for exercising any of your CCPA rights.

Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. We will not deny you services, charge different prices, or provide a different quality of service because you exercised your rights under the CCPA.

Do Not Sell My Personal Information

Hush does not sell personal information as defined under the CCPA. To submit a CCPA request or designate an authorized agent to make a request on your behalf, please contact us at hello@gohush.com.

Exercising Your Rights

To exercise the access, data portability, and deletion rights described above, please submit a verifiable consumer request to us by emailing us at help@gohush.com.

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Data. You may also make a verifiable consumer request on behalf of your minor child. You may designate an Authorized Manager to submit requests on your behalf. We may require verification of the Authorized Manager’s identity and authority to act on your behalf.

We will respond to your verifiable consumer request within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing.

We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Other State Law Privacy Rights

California Civil Code Section 1798.83 permits users of our Service that are California residents to request certain information regarding our disclosure of Personal Data to third parties for their direct marketing purposes. To make such a request, please contact us at help@gohush.com.

Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at help@gohush.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.

Children’s Privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at hello@gohush.com.

The Children’s Online Privacy Protection Act (“COPPA”) requires that online service providers obtain parental consent before they knowingly collect personally identifiable information online from children who are under 13 years of age. We do not knowingly collect or solicit personally identifiable information from children under 13 years of age. If you are a child under 13 years of age, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 13 years of age, we will delete that information as quickly as possible. If you believe that a child under 13 years of age may have provided us Personal Data, please contact us at help@gohush.com.

If you are a parent or guardian and have signed up to the Service enrolling a child under 13 years of age, you have the following rights: (1) to have any previously collected data about your child under 13 deleted; (2) to stop further collection of your child’s personal information; (3) to stop further disclosure to third parties of your child’s personal information; and (4) to correct any data already collected about your child. For these purposes, you may contact us at help@gohush.com.

Security

We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the Internet or storing data is completely secure.

Hush takes the security of your personal information seriously. We implement industry-standard administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and secure development practices.

Hush has achieved SOC II Type 2 certification, demonstrating our ongoing commitment to the highest standards of data security and operational excellence.

Despite these measures, no security system is impenetrable. We cannot guarantee the absolute security of our systems or your information. If you believe your account security has been compromised, please contact us immediately at hello@gohush.com.

Third-Party Links & Services

Our Services may contain links to third-party websites, applications, or services that are not operated by Hush. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our Services, as we have no control over and assume no responsibility for their content, privacy practices, or policies.

We may integrate with third-party services such as authentication providers, payment processors, and analytics platforms. Your use of these integrations is subject to the respective third party’s terms and privacy policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page, sending you an email notification, or by posting a prominent notice on our website prior to the change becoming effective.

We’re constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time, but we will alert you to changes by placing a notice on the Services, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Team:

If you are located in the European Economic Area and believe your data protection rights have not been addressed to your satisfaction, you have the right to lodge a complaint with your local supervisory authority.