Identity Protection and Privacy Protect

1. What These Services Actually Do

A source Banrox watches can contain health information about you. Banrox does not ask you for health data and does not collect it to run any feature. But breach files and public records sometimes carry health insurance identifiers, provider names, medical record numbers or court filings, so a monitoring source can return one in a finding about you. Where that happens Banrox shows the finding to you, uses it only to alert you and to send the removal requests you asked for, never sells it, never shares it for advertising, and never uses it to price anything. Banrox deletes it when you ask, when you switch the feature off, or when you close your account. Ask at [email protected] and Banrox will delete it and confirm in writing.

2. The Honest Limits

Monitoring is detection, not prevention. An alert tells you something has already happened or already appeared somewhere. It does not stop identity theft, it does not block an account being opened, and it does not remove information from the internet. No monitoring service can promise otherwise, and if one does, that promise is the thing to be suspicious of.

• We monitor the sources our vendors reach. We do not see everything, and much of the criminal market is closed to any commercial scanner. An absence of alerts is not proof that nothing has happened.
• Coverage can change without notice when a vendor loses access to a source, and we will not pretend coverage is wider than it is.
• Alerts can be late, and they can be false positives. Verify anything that matters at the source before you act on it.
• We do not insure you, indemnify you, or reimburse a loss. Banrox does not sell identity theft insurance and does not have a restoration guarantee. Where a plan ever includes one it will be underwritten by a named insurer under its own policy, and the policy will be linked before you buy.
• We cannot correct or delete anything in your credit file. That is the bureaus' file. See Credit Data and Your FCRA Rights.
• An automated check can affect you at Banrox. Banrox scores a signup and a login for automation, stolen credentials and account takeover, and it runs an identity check before your file is retrieved. Banrox can refuse, suspend or close an account on the result of either. That is a decision about you and this page does not pretend otherwise. Where a failed identity check is any part of the reason, the questions came from your credit file, so Banrox owes you a written notice under the Fair Credit Reporting Act and a human review on request. Both are set out at Credit Data and Your FCRA Rights.

3. How Removal Works, and What It Cannot Guarantee

In a state that gives you a deletion or opt out right, a data broker must honour a valid request. Outside those states a broker is under no legal obligation at all, and Banrox does not know what share of them comply voluntarily and will not guess at a number. Banrox sends the request anyway and shows you what came back. In every state, this is the shape of it:

• A broker can refuse, can demand additional identity proof, can take weeks, and can simply not answer.
• Removal from one site does not remove you from a site that bought the data earlier.
• Brokers re-acquire data from public records, so a record removed today can reappear months later. Removal is maintenance, not a one time fix. Banrox re-sends a request to each broker on your list every 90 days for as long as your plan is active, and shows you the date of the last send for each one.
• Some records cannot be removed at all, including court filings, property records, and other public records that the law requires to remain public.
• To send a request on your behalf, a broker usually requires the very information you want removed. Banrox sends the minimum needed, tells you what was sent, and does not use it for anything else.
• A removal request contains only the identifiers you gave Banrox yourself, which is normally your name, your former names, your date of birth, your current and former addresses, your email addresses and your telephone numbers. It never contains anything taken from your credit report or your credit score, including anything derived from either. It never contains your Social Security number, a government ID number or a financial account number. Banrox tells you exactly what was sent, for every request.

Banrox records and shows you the outcome of each request it sends, including refusals, partial removals, and no reply at all. A request with no reply after 45 days is shown to you as "no response", not as a success. A dashboard that showed only successes would be a marketing surface, not a record.

4. The Authority You Give Us

When you enable Privacy Protect you sign an authorisation appointing Banrox as your authorised agent, for the limited purpose of submitting opt out and deletion requests about you to data brokers, people search sites and similar businesses, and receiving their responses. Ticking the box is your electronic signature, as described in the Electronic Signatures and Records Consent. Banrox sends a copy of that authorisation with every request it makes for you, and you can ask for a copy at any time at [email protected].

Why a signature and not a toggle. California's rules let every business Banrox writes to demand written permission signed by you before it acts on an agent's request, at 11 C.C.R. section 7063(a), and let it verify you directly as well, at 11 C.C.R. section 7063(c). A company that captured only a switch in account settings would be sending requests that any broker could refuse at will. So Banrox captures a signed authorisation. Banrox also may not use what you give it for anything but the request, verification and fraud prevention, under 11 C.C.R. section 7063(f), and Section 3 says the same thing in plain words.

What Banrox records today, and what is still being built. Banrox records that you signed the authorisation and the date you signed it. Banrox does not yet store the exact wording that was displayed to you at that moment, or the internet address the signature came from. Banrox is building that capture. Do not read this page as saying the evidence already exists, because today it does not. Until it is built, the version of the authorisation wording published on this page on the date you signed is the wording Banrox will treat as the wording you agreed, and Banrox will not argue otherwise against you. If a broker refuses a request because the evidence Banrox can produce is not enough for it, Banrox tells you that is what happened rather than recording it as a refusal on the merits.

A business is entitled to contact you directly to confirm you gave permission and to verify your identity, and some will. That authority is limited to those requests. It does not let Banrox enter contracts for you, spend money for you, make representations about you beyond what is needed to identify you, or contact anyone other than those businesses.

You can revoke the authority at any time in your account settings or by writing to [email protected]. Revocation stops future requests. It does not undo a removal already made, and it does not restore a listing.

You confirm that the information you give us is about you and is accurate, and that you are not asking us to remove information about anyone else. We cannot act for another adult without their own written authorisation.

5. The Free Steps That Do More Than Any Paid Service

These cost nothing and we would rather you did them than not.

• If you live in California, use the state's free deletion mechanism first. The California Privacy Protection Agency runs it, you submit one request, it costs nothing, and every data broker registered in California must check it at least once every 45 days from 1 August 2026 and delete what it holds about you. It covers brokers Banrox would otherwise write to one at a time, and you do not need a paid plan, or a Banrox account, to use it. Start at cppa.ca.gov, which links to the deletion platform. Banrox would rather you used it. Privacy Protect is for what it does not reach: people search sites and businesses that are not registered California brokers, an individual request to each one, re-sent every 90 days, with the answer recorded.
• Freeze your credit at Equifax, Experian and TransUnion. A freeze is free, it blocks most new accounts being opened in your name, and it is the single most effective step available to you.
• Place a fraud alert, free, at any one bureau, which must tell the other two.
• If you have been a victim, file an identity theft report at identitytheft.gov, which produces a recovery plan and the report you need to block fraudulent items from your file.
• Turn on multi factor authentication everywhere, especially on your email account, because email is the key to everything else.

Banrox does not charge for telling you this and does not hide it behind a plan.

6. Alerts and How We Contact You

Alerts go by email, and by text if you turned that on, to the contact details on your account. Keep them current. An alert that cannot be delivered is an alert you did not get. Alerts about your account and about detected exposure are service messages under the Calls, Texts and Email Policy and are not marketing.

7. What We Do With What We Find

Exposure findings about you are shown to you and are used to run the service. They are not sold, not shared for advertising, and not used to price anything. Retention is set out in the Privacy Policy. The removal audit trail is kept for two years after your account closes, because it is the proof that a request was sent, and you can ask for a copy at any time.

8. Cancelling

Cancel the plan any time from your account Settings, on the subscription itself. It is not in a section called Billing. Cancellation stops future charges, stops monitoring, and stops the 90 day removal cycle described in Section 3. Listings already removed stay removed unless a broker re-acquires the data. Refund terms are at Subscriptions, Billing, Auto Renewal and Refunds.

9. No Guarantee, Stated Once, Plainly

Banrox does not guarantee that your information will be removed, that it will stay removed, that you will be alerted to every exposure, or that you will not become a victim of identity theft or fraud while using these services. The disclaimers and the limitation of liability in Sections 17 and 18 of the Terms of Service apply. Nothing in this page limits any right you have under the Fair Credit Reporting Act or any other law that cannot be waived.