Privacy Policy

Last updated: April 2026

Unlist.ai is operated by Cactus Marketing Inc., a company based in Ottawa, Canada. This policy explains what we collect, how we use it, and what we don't do — in plain English.

1. What we collect

When you run a scan

We ask for your name, email address, and optionally your city and state/province. We use this to search data broker sites on your behalf — that's it. We don't store your scan inputs after your session ends. Once you close the tab or the session expires, that information is gone from our systems.

When you create an account

We store your email address to authenticate you and send you scan results and removal updates. We store your token balance and transaction history so you can track your removals.

When you make a purchase

Payments are processed by Stripe. We never see or store your full credit card number. Stripe handles all payment data under their own privacy policy.

Usage and technical data

We collect standard server logs (IP address, browser type, pages visited, timestamps) to keep the service running and diagnose problems. We don't sell or share this data.

2. How we use it

To run data broker scans and return results to you
To submit opt-out requests to brokers on your behalf
To monitor for re-listing and alert you if your data reappears
To manage your account, tokens, and billing
To send you transactional emails (scan results, removal confirmations, account notices)
To improve the service — we analyze aggregate, anonymized usage patterns

We don't send marketing emails unless you explicitly opt in. You can unsubscribe from any email we send.

3. What we don't do

✓We don't sell your personal data to anyone — full stop.
✓We don't store your scan inputs (name, location) after your session ends.
✓We don't build profiles on you. We're a removal tool, not a data broker.
✓We don't share your data with third parties for advertising.
✓We don't use your data to train AI models or sell it to data aggregators.

4. Data retention

Scan inputs: Deleted at session end. We do not persist what you entered to run a scan.

Account data: Kept while your account is active. If you delete your account, we remove your data within 30 days.

Billing records: Retained for 7 years as required by Canadian tax law.

Server logs: Retained for up to 90 days, then deleted.

5. Your rights

Depending on where you live, you have rights over your personal data. We honor all of them:

Access

Ask us what data we hold about you.

Correction

Tell us if something is wrong and we'll fix it.

Deletion

Ask us to delete your account and data.

Export

Request a copy of your data in a portable format.

Opt-out (CCPA)

California residents can opt out of any sale of personal information. We don't sell it, but the right is yours.

PIPEDA rights

Canadian residents have rights under PIPEDA to access, correct, and challenge how we handle your data.

To exercise any of these rights, email us at privacy@unlist.ai. We respond within 30 days.

6. Cookies

We use a minimal set of cookies:

Session cookie: Keeps you logged in while you use the app. Expires when you close your browser.
Auth token: Persistent login across sessions if you choose 'Stay signed in'.
Stripe cookies: Set by Stripe during checkout for fraud prevention. Governed by Stripe's privacy policy.

We don't use advertising cookies, tracking pixels, or third-party analytics tools that share your data.

7. Contact

Questions, requests, or concerns about privacy:

Cactus Marketing Inc. (operating as Unlist.ai)

Ottawa, Ontario, Canada

Email: privacy@unlist.ai