Privacy Policy | Antileak

Antileak (“we,” “us,” or “our”) operates the website antileak.io and related services. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

1.1 When you run a free scan

The website address you submit, the scan results generated from it, and the time of the scan.
Your IP address and country, used for rate limiting and abuse prevention.
If you choose to leave your email address on a scan report, we store it with that report's domain so we can follow up about it.

1.2 When you create an account

Your email address (sign-in is by emailed one-time link; there are no passwords).
The domains you add and the ownership proof we observed (the DNS record or meta tag), with its timestamp.
Subscription status from our payment processor. We never see or store your card number.

1.3 Website analytics

We use Cloudflare Web Analytics, which is cookieless and does not track you across sites, to count page views and understand how the site is used. The main site sets no cookies; the customer dashboard uses session cookies that exist only to keep you signed in.

2. Data about businesses we scan and contact

Antileak scans publicly accessible business websites and may contact a business about what its own scan found. For that we process public, business-facing information: the website address, public directory details (business name, sector, address, phone as published), scan results, and a record of any contact we made. Two commitments apply:

Provenance is recorded. We keep a record of where every business record came from, and we will tell you what it says: email services@antileak.io.
Opting out is permanent. Every outreach email carries a working one-click unsubscribe. An unsubscribed address goes on a suppression list that is checked before any message is sent, and a domain owner can additionally block or opt out of scanning entirely (antileak.io/bot), which also removes any stored report for the domain.

3. How We Use Your Information

To perform scans and generate reports.
To create and manage your account and subscription, and to send sign-in links you requested.
To follow up when you leave your email on a scan report.
To detect and prevent abuse of the service.
To comply with legal obligations.

We do not sell, rent, or trade personal information, and we do not use your data to train AI models.

4. Data Sharing

We share data only with the providers that run the service, bound by their data processing terms:

Cloudflare (hosting, analytics), Supabase (database), Stripe (payments), Zoho (email delivery).
Authorities, when required by law, court order, or to protect our rights, safety, or property.

5. Data Security

HTTPS for all data in transit.
Sign-in links and session tokens are single-use or short-lived and stored only as hashes.
Scan reports live at unlisted, non-guessable links and are excluded from search indexing.
If a scan encounters exposed credentials on a site, we flag the finding without storing the sensitive content.

6. Data Retention

Free scan reports: 90 days, then deleted automatically.
Account data: for as long as your account is active.
Business outreach records: leads with no activity are expired after 12 months; suppression entries are kept indefinitely, because they are what prevents renewed contact.
You can request deletion of any or all of your data at any time.

7. Your Rights

Whether you are a user or a business we scanned, you have the right to access the data we hold about you, correct it, delete it, export it in a portable format, and object to or restrict processing. Contact support@antileak.io; we respond within 30 days.

8. Children’s Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect information from children, and we delete any such data promptly on discovery.

9. International Data

Our services are operated in the United States. If you use our service from outside the United States, your data will be transferred to and processed in the United States.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting a notice on our website or emailing account holders at least 14 days before the changes take effect.

11. Contact Us

If you have questions about this Privacy Policy, contact us at support@antileak.io.