Incogni

The service unavoidably requires your most sensitive PII — full name, date of birth, home address, and up to three sets of phone numbers — which is inherent to the product; outside the core function, the website runs standard cookie and device tracking, and Unlimited plan users get their personal data continuously swept across the public internet by automated scans.

Your full personal profile — name, address, date of birth, phone — is stored in Google BigQuery (US) and transmitted to data brokers (the structural requirement of the service); Tune Inc. receives IP addresses and browser data for marketing attribution; Mailchimp receives your email for campaigns; Nord group companies receive data for operational purposes; and Incogni explicitly confirms it does not sell personal data.

GDPR and CCPA rights are clearly documented; service data is deleted 24 months after termination; the beta Risk Assessment auto-deletes after 30 days; but customer support records are retained for six years, anonymized data is kept indefinitely, rights requests require emailing support rather than using a self-service portal, and marketing is opt-out rather than opt-in.

Strong commitments on AI training (none) and data selling (never) are the headline positives; Standard Contractual Clauses cover EU transfers; but the service is a US company storing your most sensitive data with US cloud providers, no specific security certifications or audit results are disclosed, and anonymized data can be retained and processed indefinitely.