Privacy Policy

1. Controller

Boltout LLC dba MySelfIdentity, a limited liability company organized under the laws of the State of Delaware, with a registered business address at 1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801, United States, is the controller for the personal data described here. Contact: support@myselfidentity.co.

2. Data we collect

Account data: email address, display name, country, timezone and authentication identifiers.

Search inputs: the name and optional details you enter for a scan, kept so your report is reproducible.

Report data: retrieved public items, your match decisions, section summaries and generated PDF files.

Operational data: credit ledger entries, subscription state, contact messages, data-rights requests and security audit events, including IP addresses for sensitive actions such as consent and account deletion.

3. Why we process it

To run the scans you request, deliver and store your reports, bill you, answer your requests, and keep the service secure.

4. Sources of data about third parties

Scans query only the sources in our published registry: public search engines and public APIs, for publicly available results. Items returned may name people other than you; you mark those as not you and they are excluded from your summary.

5. AI processing

The AI Public Web Summary is generated from the items in your report only. Our model provider is contractually bound not to use this content to train general models.

6. Product analytics and session recording

We use PostHog, Inc. (San Francisco, USA) to understand how the service is used. It records page views, clicks, form interactions, errors and performance, and it records sessions: a replay of what happens on screen while you use the site.

Session recordings may capture what you enter and what you view. That includes the name and optional details you type into the self-audit form, the entries and summaries shown on your report pages, and text on other pages you visit. Passwords are never captured. Card details are entered on Stripe's pages and are not captured.

We use these recordings to find where people get stuck and to fix defects. They are kept by PostHog for up to 90 days and are accessible only to our team. You can ask us to delete recordings of your sessions from the Data Rights page.

7. Access by our team

Authorised members of our team may access your account data — including your account details, the search inputs you entered, your reports and the files generated from them — to provide support, investigate a problem you report, keep the service secure and lawful, and improve how the product works.

Access is limited to the people who need it for those purposes, and every access to a customer account or report by our team is written to an internal audit log recording who accessed what and when.

We do not read your reports for any other purpose, and we never sell or rent personal data.

8. Sharing

We share data with our processors: our managed hosting and database provider, our AI inference provider, our payment processor (Stripe), our transactional email provider and our product analytics provider (PostHog). Each acts on our instructions under a data processing agreement. We never sell or rent personal data.

9. International transfers

[To be confirmed based on hosting region.]

10. Retention

Account data is kept while your account is open. Reports, findings, summaries and files are kept until you delete them or close your account. Payment records are kept as required by law. Security logs are kept for up to twelve months.

11. Your rights

Depending on where you live you may access, port, correct, restrict, object to or delete your data. Use the Data Rights page or your account settings.

12. Cookies

See the Cookie Policy.

13. Children

The service is not for anyone under 18.

14. Changes

We will post changes here and notify you of material changes by email.