Global Privacy Policy

Last Updated: September 18, 2026

THIS POLICY DOESN'T APPLY TO THE UK & EU USERS. PLEASE NAVIGATE TO FOOTER AND CHOOSE TERMS & CONDITIONS FOR UK/EU USERS IF YOU ARE BASED IN ONE OF THOSE REGIONS.

1. Introduction

ReverseLookup ("we," "us," "our," or the "Company") is committed to protecting your privacy. This Privacy Policy describes the information processing practices of ReverseLookup on the ReverseLookup.com website and all its subdomains (collectively, the "Site"). This Privacy Policy is only applicable to the Site and not to any other websites that you may be able to access from the Site, each of which may have data collection, storage, and use practices and policies that may differ materially from this Privacy Policy. This Privacy Policy also describes our practices regarding limited retention of certain outputs and logs (including, where enabled, a “Reports History” / “Cached Reports” feature that allows users to re-open prior results), as further described below.

2. Information Collection Practices

2.1 Types of Information Collected

We collect several different types of information about you (collectively, "Personal Information"):

a) User Information: Information we collect from you when you use our Site, including:

  • Contact Data (name, mailing address, email address)

  • Financial Data (account or credit card number)

  • Demographic Data (zip code, age)

b) Traffic Data: Information we automatically track and collect when you visit our Site, including:

  • IP address

  • Access times

  • Browser type and language

  • Internet Service Provider (ISP)

  • Pages visited on our Site

  • Content viewed on our Site

  • Referring URL

  • Domain servers

  • Types of devices used to access the Site

c) Publicly Available Information: Information we collect from various databases, government entities, commercial data providers, and websites to create our reports and provide our Site. This may include:

  • Names and aliases

  • Addresses (current and past)

  • Phone numbers

  • Email addresses

  • Social media profiles

  • Age and date of birth

  • Gender

  • Marital status

  • Employment information

  • Education history

  • Public records (court records, property records, etc.)

d) Cached Report Output (Reports History): Where you choose to use our “Reports History,” “Stored Reports,” or “Cached Reports” feature, we may temporarily retain (cache/store) copies of report outputs generated at your request and associate those outputs with your account so you can re-open them without re-running the same search (“Cached Reports”). Cached Reports may contain personal information (including publicly available and/or licensed data such as names, addresses, phone numbers, email addresses, and social profile links), depending on the search you ran and the sources available at the time. Cached Reports are not publicly displayed, indexed, or searchable and are accessible only to the authenticated account that generated them.

e) Additional Categories of Personal Information: To help you map the information above to the categories of personal information described in the California Consumer Privacy Act (CCPA), we also collect or generate:

  • Inferences: conclusions we draw by combining information from more than one source, such as the possible owner of a phone number, a possible date of birth, and possible relatives or associates.

  • Commercial information: your subscription plan, purchase history and transaction records.

  • Geolocation data: approximate location derived from your IP address.

  • Sensory data: images you upload to use reverse image search.

We may also collect and retain limited security, audit, and fraud-prevention logs relating to use of the Services (e.g., timestamps, IP address, device identifiers, and event logs), subject to retention limits.

2.2 Reverse Image Search Processing

a) If you choose to use ReverseLookup's reverse image search feature, you may upload an image for the sole purpose of performing the requested search. Before an image is uploaded, users must confirm that they are at least 18 years old, own the image, appear in the image, or otherwise have the legal right and necessary permissions to submit it for processing. To perform the requested search, ReverseLookup may temporarily process the uploaded image, including creating cropped, resized, or other temporary derivative files that are reasonably necessary to compare image similarity, generate search results, and display the requested report. These temporary processing files are used solely for operational purposes and are retained only for the applicable retention period described in this Privacy Policy. ReverseLookup does not create or maintain a proprietary facial-image index or database of biometric profiles. Images uploaded solely for reverse image searches are not used for advertising, promotional purposes, or AI model training unless you separately provide your express consent.

b) By proceeding with an upload, users also consent to the processing of the uploaded image as described in this Privacy Policy and agree to the applicable Terms & Conditions.

2.3 Artificial Intelligence

We use third-party artificial intelligence providers to power certain features, such as AI Chat. When you use these features, your input is sent to that provider so a response can be generated.

We do not use your Personal Information — including uploaded images, search queries, report data, or AI Chat conversations — to train, develop, or improve any artificial intelligence or large language model. We also do not permit our AI providers to do so. We contract with these providers on terms that prohibit training on our data and that apply zero data retention, meaning your input is not stored by the provider once your request has been answered.

Any AI or machine learning technology used within our Services is limited to performing the specific search, matching, or response function you requested.

2.4 Sources of Information

We obtain the categories of personal information listed above from the following categories of sources:

a) Directly from our clients as part of the registration and transaction process.

b) Indirectly from our clients through website usage details collected automatically.

c) From third-party consumer data resellers and licensors.

d) Information collected from public websites.

3. Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

a) To provide you with information, products, or services that you request from us.

b) To provide, support, personalize, and develop our Website, products, and services.

c) To create, maintain, customize, and secure your account with us.

d) To process your requests, purchases, transactions, and payments and prevent transactional fraud.

e) To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.

f) To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

g) To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

h) To carry out our obligations and enforce our rights arising from any contracts entered into between you and us.

i) For testing, research, analysis, and product development.

j) For other purposes about which we notify you or are essential to the Site's functionality.

Service providers that host, store, or help deliver the Services (including, where enabled, storage of Cached Reports for your account), process payments, provide analytics, provide customer support tools, and perform security/fraud monitoring.

Third-party data suppliers and licensors that provide licensed data used to generate report outputs, and VIN partners such as ClearVin, in each case as necessary to provide the Services and subject to contractual restrictions and applicable law.

4. Cookies and Web Beacons

4.1 Use of Cookies and Web Beacons

Cookies and web beacons are small text files that are stored on your computer when you visit certain web pages. ReverseLookup collects information through cookies and web beacons about your web browsing activities such as the address of the page you are visiting, the address of the referrer page you previously visited, the time you are viewing the page, your browsing environment, and your display settings.

4.2 Purposes of Cookies and Web Beacons

We may use cookies and web beacons on our Site for the following purposes:

a) Understanding traffic patterns and the number of visitors to the Site and other websites that we partner with.

b) Understanding how you use and interact with the Site.

c) Improving ReverseLookup's products and services.

d) Optimizing your experience on the Site.

e) Providing anonymous individual or aggregate auditing, research, modeling, and reporting for our advertisers and other partners.

f) Storing your password so you do not have to re-enter it each time you visit the Site.

g) Providing you with relevant advertising and content.

h) Managing our Site.

4.3 Your Cookie Choices

You can control our use of cookies using the cookie consent tool we provide on our Site, by adjusting your browser settings, or by contacting us as set forth in "Contact Information" below. For more detailed information about how we use these technologies and how to manage them, please refer to our separate Cookie Policy [link to Cookie Policy].

5. Disclosure of Personal Information

We may disclose your Personal Information to the following categories of recipients. We use the terms "Service Provider," "Contractor," and "Third Party" as they are defined under the California Consumer Privacy Act (CCPA):

a) Service Providers: companies that process Personal Information on our behalf for a business purpose under a written contract that prohibits them from retaining, using, or disclosing it for any purpose other than performing the services we request. Examples include website and data hosting, payment processing, email delivery, customer support, and analytics.

b) Contractors: companies to which we make Personal Information available for a business purpose under a written contract that imposes the same restrictions that apply to our Service Providers.

c) Our affiliates, which act as Service Providers or Contractors where they process Personal Information on our behalf under contract, and as Third Parties where they use it for their own purposes.

d) Third Parties to whom you or your agents authorize us to disclose your Personal Information in connection with products or services we provide to you.

e) Third Parties in the form of law enforcement officers, courts, and government authorities, when appropriately requested and as required by applicable law, court order, or governmental regulations.

f) Other Third Parties as necessary or appropriate to protect the rights, property or safety of us, our customers, or others.

g) Third Parties that are potential buyers or other successors in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

Reverse image search: when you upload a photo, a cropped copy is transmitted to our image search provider, FaceCheck.ID (operated by Tech Solutions), solely to locate visually similar publicly available images. We do not receive or store biometric templates from this provider. Uploaded images and processing files are deleted within 7 days.

6. Interest-Based Ads

We may share your Personal Information with advertisers and other third parties who may use it for advertising purposes, including to serve targeted advertising on unaffiliated third-party sites. These companies may use cookies, pixels, or other technologies to collect information about your browsing activities over time and across different websites.

We may share your Personal Information with third-party advertising partners, including Google and Meta (Facebook), who may use cookies, pixels, or similar technologies to serve targeted advertising. For a full list of these partners and the specific cookies used, see our Cookie Policy.

To opt out of these types of ads, please visit the Network Advertising Initiative (NAI) for information about how to opt-out of interest-based advertising by their members. See http://www.networkadvertising.org/choices/ for general information about the NAI and http://www.networkadvertising.org/managing/opt_out.asp for the opt-out page. You may also visit http://www.aboutads.info/choices/ to learn about interest-based advertising and how to opt-out from online behavioral ads served by some or all participating companies.

7. Email Marketing and Communications

7.1 Marketing Communications

To unsubscribe from receiving email messages from us, from our affiliates, or from other third parties, click on the "Unsubscribe" link contained in each email.

7.2 Contests, Sweepstakes, and Surveys

ReverseLookup may conduct or co-sponsor contests, sweepstakes, or other offerings. In such circumstances, the Personal Information we obtain from you may be disclosed to our co-sponsor, who will be identified at the point where you submit your information.

7.3 Testimonials

We may publish testimonials provided by our customers on our Site in addition to other endorsements. If you provide a testimonial, we may publish it on our Site using your first name and last initial.

7.4 Email Open and Click Tracking

We use tracking pixels (web beacons) and unique tracked links in the emails we send to understand engagement — for example, whether and when an email was opened, your approximate location (derived from your IP address), and which links you clicked. We use this to measure and improve our communications. This tracking is provided through our email service provider, Customer.io.

You can opt out at any time by clicking the "Manage Tracking Preferences" link in the footer of our emails. You can also limit open tracking by disabling automatic image loading in your email client (this does not prevent link-click tracking). Opting out of tracking does not unsubscribe you from our emails; to stop receiving emails, use the "Unsubscribe" link described in Section 7.1.

8. Your Rights and Choices

All users, regardless of location, have the following rights regarding their personal information:

a) The right to access and obtain a copy of your personal information

b) The right to request deletion of your personal information

c) The right to correct inaccurate personal information

d) The right to opt-out of the sale of your personal information

e) The right to opt-out of certain sharing practices

f) The right to object to processing based on legitimate interests

In addition to the rights you have with respect to your Personal Information described above, you also have rights with respect to Publicly Available Information that may be obtained through our Site. If you would like to download the Publicly Available Information that we have retained about you, or suppress your information from appearing in others' searches, you may do so at https://reverselookup.com/help/do-not-sell-my-personal-info.

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

9. Data Security

ReverseLookup uses reasonable security measures to protect against the loss, misuse, and alteration of the information under our control. However, no system is 100% secure, and we do not accept liability for any unauthorized disclosure of your information.

10. Children's Privacy

The Site is not directed to children under 16, and we do not knowingly collect Personal Information from children under 16. If we become aware that a child under 16 has provided us with Personal Information, we will delete any Personal Information we have collected, unless we have a legal obligation to keep it, and terminate the child's account if applicable. If you believe we might have any information from or about a child under 16, please contact us.

Users located in Brazil should also see Section 13.9 for additional information regarding children and adolescents under the LGPD.

11. International Users

Our services are hosted and operated in the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our services, you consent to this transfer and processing of your information in the United States.

For international data transfers, we comply with applicable legal frameworks, including Standard Contractual Clauses and other lawful transfer mechanisms recognized under applicable data protection laws.

Users located in Brazil should also see Section 13.7 regarding international transfers of personal data under the LGPD.

12. Fair Credit Reporting Act (FCRA) Notice

This platform is not a consumer reporting agency as defined by the Fair Credit Reporting Act, and the information provided herein may not be used as a "consumer report" as defined by the FCRA. This information may not be used for any FCRA-regulated purpose, including but not limited to determining a consumer's eligibility for credit, insurance, employment, housing, or any other purpose regulated by the FCRA. Use of this information for any such purpose is strictly prohibited.

13. Brazil General Data Protection Law (LGPD)

This Section applies to individuals located in the Federative Republic of Brazil (“Brazilian Users”) and supplements, but does not replace, the other provisions of this Privacy Policy. It is intended to address the requirements of Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados Pessoais — LGPD, Law No. 13,709/2018), as amended. Where a conflict exists between this Section and any other part of this Privacy Policy with respect to a Brazilian User, this Section controls.

13.1 Applicability

This Section applies to the processing of personal data of data subjects (titulares) who are located in Brazil, regardless of their nationality, where such processing:

a) occurs in Brazilian territory;

b) is carried out for the purpose of offering or providing goods or services to individuals located in Brazil; or

c) relates to personal data collected in Brazil.

For purposes of the LGPD, ReverseLookup acts as the Data controller with respect to Personal Information described in Section 2 above, and as an Data processor where it processes personal data solely on behalf of, and under the instructions of, a business client. Our sub-processors and Service Providers listed in Sections 3 and 5 act as Data processors on our behalf under written contracts consistent with LGPD requirements.

13.2 Legal Bases for Processing

We process the personal data of Brazilian Users only where we can rely on one of the legal bases recognized under Article 7 (and, where applicable, Article 11 for sensitive personal data) of the LGPD, including:

a) Consent: for example, where you affirmatively agree to the upload and processing of an image for reverse image search, or where you opt in to marketing communications or non-essential cookies.

b) Compliance with a Legal or Regulatory Obligation: for example, responding to lawful requests from courts, law enforcement, or regulatory authorities, and complying with tax, accounting, or consumer protection laws.

c) Execution of a Contract: for example, processing necessary to create and administer your account, process payments, and deliver the Services you request.

d) Legitimate Interests: for example, compiling Publicly Available Information to generate report outputs, maintaining the security and integrity of the Site, preventing fraud, and improving our Services — always balanced against your fundamental rights and freedoms as required by Article 10 of the LGPD.

e) Exercise of Rights in Judicial, Administrative, or Arbitration Proceedings: where processing is necessary to establish, exercise, or defend our legal rights.

f) Credit Protection: where applicable to specific processing activities relating to credit protection, in accordance with pertinent legislation (noting, as stated in Section 12, that ReverseLookup is not a consumer reporting agency and does not provide reports for credit eligibility decisions).

Where our processing relies on consent, you may withdraw that consent at any time, free of charge, using the contact details in Section 13.4 or 13.5 below, without affecting the lawfulness of processing carried out prior to withdrawal.

13.3 Data Subject Rights

Under Article 18 of the LGPD, and subject to applicable exceptions, Brazilian Users have the right to:

a) Confirmation and Access: confirm whether we process your personal data, and access the data we hold about you.

b) Correction: request correction of incomplete, inaccurate, or outdated personal data.

c) Anonymization, Blocking, or Deletion: request the anonymization, blocking, or deletion of unnecessary, excessive personal data, or data processed in non-compliance with the LGPD.

d) Portability: request the portability of your personal data to another service or product provider, in accordance with regulations issued by the ANPD, subject to our trade and industrial secrets.

e) Deletion of Personal Data Processed with Consent: request deletion of personal data processed on the basis of your consent, except where retention is permitted or required by law.

f) Information About Sharing: obtain information about the public and private entities with which we have shared your data.

g) Information About the Possibility of Not Providing Consent: be informed of the consequences of denying consent, where consent is the applicable legal basis.

h) Revocation of Consent: revoke your consent at any time, as described in Section 13.2 above.

i) Opposition: object to processing carried out in non-compliance with the LGPD, including processing based on legitimate interest that you believe is unwarranted.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.4 below. We will respond in accordance with Section 13.10.

13.4 Data Protection Officer

In accordance with Article 41 of the LGPD, ReverseLookup has designated the following Data Protection Officer to receive communications from data subjects and the ANPD, provide clarifications, and adopt measures for the protection of personal data:

  • Data Protection Officer: Maria Avramova

13.5 Complaints Channel

Brazilian Users may raise complaints or concerns about the processing of their personal data, or about this Privacy Policy generally, through our dedicated Grievance channel:

We will acknowledge and address complaints submitted through this channel in accordance with the response timeframes described in Section 13.10.

13.6 Complaints to the National Data Protection Authority (ANPD)

If you are not satisfied with our response, or if you believe your rights under the LGPD have not been adequately addressed, you have the right to lodge a complaint directly with Brazil’s National Data Protection Authority (Autoridade Nacional de Proteção de Dados — “ANPD”), the government authority responsible for enforcing the LGPD, at https://www.gov.br/anpd. This right is in addition to, and does not require you to first exhaust, the internal channels described in Sections 13.4 and 13.5.

13.7 International Data Transfers

As described in Section 11, ReverseLookup’s Services are hosted and operated in the United States, and personal data of Brazilian Users may be transferred outside of Brazil for processing. Any such international transfer is carried out in accordance with Article 33 of the LGPD, relying on one or more of the following mechanisms, as applicable: (i) your specific and informed consent to the transfer; (ii) standard contractual clauses or other contractual instruments approved by the ANPD; (iii) global corporate rules; or (iv) another legal basis for international transfer recognized under the LGPD and applicable ANPD regulations.

13.8 Data Security Incidents

In the event of a security incident that may create relevant risk or harm to Brazilian Users, ReverseLookup will notify the ANPD and affected data subjects within three business days, as required by Article 48 of the LGPD, and will describe the nature of the affected data, the information used to safeguard the data, the risks related to the incident, and the measures adopted or to be adopted to mitigate the effects of the incident.

13.9 Children and Adolescents

The LGPD defines a “child” as a person up to 12 (twelve) years of age and an “adolescent” as a person between 12 and 18 years of age. Consistent with Article 14 of the LGPD, we do not knowingly collect personal data from children without the specific and prominent consent of at least one parent or legal guardian, and we process any personal data of adolescents in their best interest, consistent with Section 10 of this Policy and applicable law. If you believe we may have collected personal data from a child or adolescent in Brazil without appropriate consent, please contact our DPO using the details in Section 13.4.

13.10 Response Timeframes and Cost of Exercising Rights

Requests to exercise the rights described in Section 13.3 may be submitted free of charge. We will provide a simplified, immediate response confirming receipt of your request where feasible, and a complete response within fifteen (15) days from the date of the request, or such other period as may be established by ANPD regulations. We may request information reasonably necessary to verify your identity before responding to your request.

14. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

a) The length of time we have an ongoing relationship with you

b) Whether there is a legal obligation to which we are subject

c) Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations)

Cached Reports (Reports History) Retention: If the Reports History / Cached Reports feature is enabled and you use it, we retain Cached Reports for up to one hundred twenty (120) days (unless a different period is disclosed at the point of use) and then delete them from our active systems within a commercially reasonable timeframe, subject to limited exceptions for security, fraud prevention, backups, and legal compliance. If the reverse image lookup feature is enabled and you use it, we retain uploaded images together with related temporary processing files and report-cache assets generated to perform the requested search for up to seven (7) days and then delete them from our active systems within a commercially reasonable timeframe, subject to the same limited exceptions.

15. Changes to Privacy Policy

ReverseLookup may amend this Privacy Policy from time to time, at its sole discretion. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make significant changes to the Privacy Policy, we will notify you by posting a prominent notice on the ReverseLookup.com website and/or sending you an email notification. We encourage you to review this Privacy Policy periodically.

16. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Privacy Officer at:

Mailing address: 2093 Philadelphia Pike #7776, Claymont, DE 19703, USA

Brazilian Users should contact our Data Protection Officer (Encarregado de Proteção de Dados) or our Ouvidoria channel using the details provided in Section 13.4 and Section 13.5, respectively.

17. Grievance Officer

For privacy-related complaints or concerns, you may contact our designated contact at [email protected].

18. State-Specific Privacy Laws

This Section applies if you are a resident of a U.S. state that has enacted a comprehensive consumer privacy law. The rights available to you, and the way we are required to describe our practices, depend on the state in which you reside. Nevada residents should also see Section 19. Where a state law does not apply to us, or where an exemption applies, we may still choose to honor your request but are not required to do so.

18.1 California

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), provides California residents with specific rights regarding their personal information, including the right to access or delete certain types of data and the right to direct us not to sell or share their personal information. Under the CCPA, businesses that process these requests must publish information about them.

If you are a California resident, subject to applicable law and any exemptions, you may have the right to:

a) Know and Access: Obtain the categories and the specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, and the categories of recipients to which we disclosed it. (This right applies only to personal information relating to you, and not to any other user.)

b) Delete: Request that we delete personal information we have collected from you. This right may be limited to the extent we are permitted or required by applicable law to retain the information. (If you request deletion of your personal information, you may no longer be able to use or access the Site. If you decide to use or access the Site again, we may consider this a new account, and may collect personal information associated with that account in accordance with this Privacy Policy.)

c) Correct: Request that we correct inaccurate personal information that we maintain about you.

d) Opt Out of Sale or Sharing: Direct us not to sell your personal information and not to share it for cross-context behavioral advertising. You may exercise this right using the controls we make available in our cookie banner, your browser controls, a Global Privacy Control signal, the link at https://reverselookup.com/help/do-not-sell-my-personal-info, or by contacting us as set forth below. Requests to opt out do not require identity verification.

e) Limit the Use of Sensitive Personal Information: To the extent we use or disclose sensitive personal information for purposes beyond those permitted by the CCPA, direct us to limit that use and disclosure.

f) Obtain Additional Details Regarding Our Information Practices: Request disclosures regarding our information practices. (Note that this information is generally available in this Privacy Policy.)

Certain of our advertising practices may qualify as a “sale” or a “share” under the CCPA, and as “targeted advertising” under the laws of other states (collectively, “personalized advertising”). Section 18.8 describes the categories of personal information we disclose for cross-context behavioral advertising and the categories of recipients.

18.1.1 California “Shine the Light” Disclosure

California residents are entitled to ask us for a notice that identifies the categories of Personal Information that we disclose to our affiliates and/or third parties for marketing purposes, and provides contact information for such affiliates and/or third parties. If you are a California resident and would like this information, please submit a written request to us using the contact information below.

18.2 Other States With Comprehensive Consumer Privacy Laws

The following states have enacted comprehensive consumer privacy laws that may grant you rights over your personal data. Whether a particular law applies to us depends on thresholds set by that law, and each law contains its own exemptions:

  • Colorado (Colorado Privacy Act)

  • Connecticut (Connecticut Data Privacy Act)

  • Delaware (Delaware Personal Data Privacy Act)

  • Indiana (Indiana Consumer Data Protection Act)

  • Iowa (Iowa Consumer Data Protection Act)

  • Kentucky (Kentucky Consumer Data Protection Act)

  • Maryland (Maryland Online Data Privacy Act)

  • Minnesota (Minnesota Consumer Data Privacy Act)

  • Montana (Montana Consumer Data Privacy Act)

  • Nebraska (Nebraska Data Privacy Act)

  • New Hampshire (New Hampshire Data Privacy Act)

  • New Jersey (New Jersey Data Privacy Act)

  • Oregon (Oregon Consumer Privacy Act)

  • Rhode Island (Rhode Island Data Transparency and Privacy Protection Act)

  • Tennessee (Tennessee Information Protection Act)

  • Texas (Texas Data Privacy and Security Act)

  • Utah (Utah Consumer Privacy Act)

  • Virginia (Virginia Consumer Data Protection Act)

If you are a resident of one of these states, subject to applicable law and any exemptions, you may have the right to:

a) Confirm and Access: Confirm whether we are processing your personal data and obtain a copy of that data.

b) Delete: Request that we delete personal data you provided to us or that we obtained about you.

c) Correct: Request that we correct inaccuracies in your personal data.

d) Data Portability: Obtain a copy of your personal data in a portable and, to the extent technically feasible, readily usable format.

e) Opt Out: Direct us not to process your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

f) Use a Universal Opt-Out Mechanism: Where your state recognizes one, signal your opt-out of targeted advertising and the sale of personal data through a preference signal such as Global Privacy Control, as described in Section 18.7.

g) Appeal: Appeal our refusal to act on your request within a reasonable period, as described in Section 18.5.

These laws are not identical. The following differences apply:

  • Iowa and Utah do not provide a right to correct inaccurate personal data, a right to opt out of profiling, or a right to appeal a decision on your request.

  • Minnesota and Oregon residents may request a list of the specific third parties to which we have disclosed personal data. Minnesota residents may also question the result of profiling, be informed of the reason for that result, and be informed of what actions they might take to secure a different outcome.

  • Rhode Island residents may request the categories of personal data we have disclosed and the categories of third parties to which we disclosed it.

  • Maryland law prohibits the sale of sensitive personal data and the sale of the personal data of a consumer we know or should know is under 18 years of age, and requires that the collection and processing of sensitive data be limited to what is strictly necessary to provide the requested service. We apply these limits to Maryland residents.

We will not discriminate against you, in terms of price or services that we offer, if you exercise any of the rights listed above.

18.3 How to Exercise Your Rights

You may submit requests through our designated request forms or by emailing [email protected]. To opt out of the sale or sharing of your personal information, or of targeted advertising, you may also use the controls in our cookie banner, your browser controls, or the link at https://reverselookup.com/help/do-not-sell-my-personal-info. We will respond to verifiable consumer requests within the timeframe required by applicable law.

Requests to exercise these rights may be granted in whole, in part, or not at all, depending on the scope and nature of the request and as permitted by applicable law. Your exercise of these rights is subject to certain exemptions to safeguard the public interest (for example, the prevention or detection of crime) and our interests (for example, the maintenance of legal privilege). Where required by applicable law, we will notify you if we reject your request and of the reasons we are unable to honor it.

To opt-out of the sale of your personal information, click here or email.

18.4 Verification Process

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Requests to Opt-Out of the sale or sharing of your personal information do not require identity verification. We will honor a request to opt-out if it reasonably indicates your intent to do so.

We are required by law to take reasonable steps to verify your identity prior to responding to your request. If we are unable to process your request via you authenticating yourself on the Site, we may verify your request by asking for information sufficient to confirm your identity, such as your name, email address, and phone number.

18.5 Appeals (Applicable Under State Privacy Laws Other Than the CCPA)

If you are a resident of Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, or Virginia, you have the right to appeal a request we deny when we have verified your identity and still decline to honor your request. The process for that appeal will be sent to you separately if your request is denied. Iowa and Utah law does not provide an appeal right.

18.6 Authorized Agent

Depending on where you live, you may have the right to use an authorized agent on your behalf to exercise a privacy right discussed above. If you are an authorized agent acting on behalf of a user to communicate with us or to exercise a privacy right discussed above, you must be able to demonstrate that you have the requisite authorization to act on behalf of the user. If you are an authorized agent trying to exercise rights on behalf of a ReverseLookup user, then you can make a request on the user's behalf by contacting us as set forth below in the “Contact Information” section. Such requests must include a written authorization from the consumer that includes the consumer's full name, address, telephone number and valid email address used by the consumer to interact with ReverseLookup that is signed by the consumer and clearly bestows upon the agent the proper authority. Alternatively, an acting agent can provide a valid power of attorney signed by the consumer on the agent's behalf and a valid email address used by the consumer to interact with ReverseLookup. In addition, for a request under the Right to Know, Right to Delete, or Right to Correct, the email address of the consumer will be used to separately verify the agent's authority directly with the consumer.

18.7 “Do Not Track” / “Global Privacy Control”

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Additionally, some browsers or plug-ins use a “Global Privacy Control” (“GPC”), which you can learn more about at https://globalprivacycontrol.org/. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers. However, if our site detects a GPC signal from your device, we will interpret it as either a Do Not Sell request or a request to limit the sale or sharing of personal information for targeted advertising depending on the law applicable to your jurisdiction.

18.8 Personal Information Disclosed for Cross-Context Behavioral Advertising

We share the following categories of personal information for cross-context behavioural advertising: identifiers (such as IP address, device identifiers and cookie IDs) and internet or network activity (such as pages viewed on our Site). We disclose these categories to advertising networks, social media platforms and analytics providers.

18.9 Processing of Deletion and Suppression Requests

If you submit a verified request to delete or suppress personal information, we will process it in accordance with applicable law. This may include suppressing future display of certain identifiers within the Services and, where technically feasible and/or required by law, deleting, de-identifying, or restricting access to Cached Reports that contain the relevant identifiers. We cannot control or remove information at third-party sources, and previously generated report outputs may not be retroactively editable, though Cached Reports expire and are deleted under our retention practices described above.

19. Nevada Privacy Rights

Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to us at [email protected]. We will endeavor to respond to your verified request within 60 days of receipt. If we need more time (up to 30 days), we will inform you of the reason and extension period in writing.

20. Do Not Track Signals

We do not currently respond to "Do Not Track" signals from web browsers.

21. Third-Party Sites

The Site contains links to websites not operated by ReverseLookup. We are not responsible for the privacy practices or the content of such websites. We encourage you to review the privacy policies of any third-party sites you visit.

22. Automated Decision-Making

We do not use automated decision-making or profiling that has legal or similarly significant effects on you. If we introduce such practices in the future, we will provide you with information about the logic involved and the significance and consequences of such processing.

23. Accessibility

If you need this Privacy Policy in an alternative format, please contact us using the information provided in the "Contact Us" section.

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.