SAVE Privacy Policy

Effective date: October 27, 2026
Last updated: October 27, 2026

This Privacy Policy explains how SAVE collects, uses, discloses and protects personal information, and the choices and rights you have. SAVE helps people find and remove their personal information from people-search and data-broker websites. We have tried to describe our practices accurately and in plain language, including the ones you may not expect.

• What we collect. Your name, email address and phone number when you request a Free Check, and how you use our Site. If you subscribe, we also collect payment details through our payment processor and, through our short Intake Form, other names you have used and places you have lived, which help us find and remove your listings.
• The Free Check. When the breach check is on, we send your email address to an independent breach-database provider and show you the breaches it reports. When it is off, your email address goes to no breach database and the Free Check shows an estimate only. The exposure score and the types of broker sites we show you are estimates. The Free Check does not search data-broker sites for your listings.
• Your phone number. We use it only to find and remove your listings. We never call or text you, never use your phone number for marketing and never send it to Meta.
• Paid plans. We check the 450+ people-search and data-broker sites we cover (listed at https://saveprivacy.net/covered-sites), email you reports with screenshots of what we find, and send removal requests as your authorized agent, which you appoint us to be at checkout. We use what we collect in that role only to provide and verify the removal requests and reports you asked for, prevent fraud (including payment-dispute fraud and misuse of our money-back guarantee), keep a record of our work and comply with the law. We never use it for marketing or advertising.
• Cookies and advertising. Like most websites, we use cookies, our own analytics and the Meta Pixel. For visitors in the United States they are on by default, and our cookie notice tells you so on your first visit. State laws treat the Pixel as "sharing" for targeted advertising, and some may treat it as a "sale". You can opt out at any time with the "Do Not Sell or Share My Personal Information" link (https://saveprivacy.net/do-not-sell), and we automatically honor Global Privacy Control. You can turn off our analytics in Cookie settings. Our content-delivery provider also measures how our pages load for every visitor, without cookies (Section 6.1).
• What we never sell. We never sell or share your name, email address, phone number or mailing address. We do not sell or share your payment details, your Free Check results or the information you give us for removals.
• Email only. We contact you only by email. You can unsubscribe from marketing emails at any time.
• Family plans. Each adult Family Member authorizes us themselves, by replying to their own invitation email, and their reports are private to them.
• Your rights. Wherever you live in the United States, you can ask to access, delete or correct your information and opt out of targeted advertising. Email [email protected]. See Sections 14 and 15.

1. About this Policy
2. Notice at Collection
3. Information we collect
4. The Free Check and the Breach Database
5. How we use personal information
6. Analytics, cookies and the Meta Pixel
7. How we disclose personal information
8. Sale, sharing and targeted advertising: your right to opt out
9. Sensitive personal information
10. When we act as your authorized agent
11. Family plan members
12. How long we keep information
13. How we protect information
14. Your privacy rights
15. How to exercise your rights
16. Emails from us
17. Additional state disclosures
18. Children
19. Users outside the United States
20. Third-party websites and services
21. Changes to this Policy
22. Disputes
23. Contact us

1.1 Who we are. "SAVE", "we", "us" and "our" mean NEXT MATH INC, a corporation organized under the laws of Delaware, with its mailing address at 220 East 23rd Street, STE 400, New York, NY 10010. We are responsible for the personal information described in this Policy.

1.2 What this Policy covers. This Policy applies to personal information we collect through:

• our website at https://saveprivacy.net and any page that links to this Policy (the "Site");
• the free privacy check offered on the Site (the "Free Check");
• our paid subscription plans, Individual and Family (each a "Subscription"), including our Intake Form; and
• our emails with you.

Together these are the "Services". We sell and provide the Services online only. We do not make sales or support calls or send text messages.

1.3 Who the Services are for. Only adults 18 or older who live in the United States may request a Free Check or buy a Subscription. A Family plan covers the Subscriber and up to 4 other adults who live in the Subscriber's Household, each of whom authorizes us themselves (see Section 11). No one under 18 can be added.

1.4 Related documents. Your use of the Services is governed by our Terms of Service at https://saveprivacy.net/terms, and billing, cancellation and refunds by our Refund & Cancellation Policy at https://saveprivacy.net/refunds. Capitalized terms that this Policy does not define have the meanings given in the Terms of Service.

1.5 Defined terms. In this Policy:

• "Personal information" means information that identifies, relates to, describes or could reasonably be linked to you or your household. It does not include information that has been de-identified or aggregated so that it can no longer reasonably be linked to you.
• "Data Broker" means a people-search, data-broker, background-check or similar website or company that collects and publishes or sells information about people.
• "Listing" means a profile, record or page about a person on a Data Broker site.
• "Removal Request" means an opt-out, deletion or suppression request that we submit to a Data Broker on a person's behalf.
• "Intake Form" means the short form on our Site, shown right after payment, in which a Covered Person gives us details that help us find their Listings (other names they have used and places they have lived), or the same details sent to us by email in reply to our request. An adult Family Member gives them by replying to their own invitation email, the same reply in which they authorize us (Section 11.2).
• "Report" means an email report about a Covered Person's Listings and Removal Requests, which may include screenshots of Listings.
• "Subscriber" means the person who buys and pays for a Subscription.
• "Family Member" means a person other than the Subscriber who is added to a Family plan. "Covered Person" means each person a Subscription covers: the Subscriber and, on a Family plan, each Family Member.
• "Household" means the people who live at the same residential address. For the money-back guarantee, we identify a Household by the billing ZIP code given at checkout, together with the Subscriber's email address, the payment method and the names of the Covered Persons (Section 3.4).
• "Initial Payment" means the first charge on a Subscription. Our 30-day money-back guarantee applies only to the Initial Payment.
• "Agent Information" means the information we collect or create while acting as a Covered Person's authorized agent, as described in Section 10.1.
• "Service provider" means a company that processes personal information for us, on our instructions, under a contract that limits its use of that information.
• "Sell", "share" and "targeted advertising" have the meanings given by the state privacy laws that apply to you. In general, "share" means making personal information available for advertising based on a person's activity across other businesses' websites. Laws also call this "cross-context behavioral advertising".

This section is our notice at collection. It summarizes what we collect, why, whether we sell or share it, and how long we keep it. Sections 3 to 12 give the full details.

We disclose information to Meta only from browsers we locate in the United States that have not opted out and do not send Global Privacy Control.

Sources. We collect this information from you; from your device and browser; from the Subscriber (for Family Members); from our payment processor and, through it, card networks (updated card details); from our content-delivery provider (approximate location, and page-load measurements from your browser); from the Breach Database, an independent third party (breach results); from Meta (the ad-click ID in links you click); and from Data Broker sites. See Section 3.

Your right to opt out. You can opt out of sale and sharing at any time with the "Do Not Sell or Share My Personal Information" link in the Site footer (https://saveprivacy.net/do-not-sell), by using Global Privacy Control, or by emailing us. See Section 8.

Sale. We do not sell your information for money. Our use of the Meta Pixel is "sharing" and may be a "sale" or "targeted advertising" under state laws, and you can opt out. We do not sell or share sensitive personal information. We have no actual knowledge of selling or sharing the personal information of anyone under 16.

Before the Intake Form. You get this notice before the Intake Form asks for anything. A Subscriber gets it at checkout: the notice above the "Agree and continue" button links to this Policy, and the form tells you that we use what you add only to find and remove your Listings; our email asking for the same details says so too and links this Policy. An adult Family Member gets it in their invitation email, which links to this Policy and this Notice at Collection before they reply with anything.

To get a Free Check, you fill in a short form with your first and last name, email address and phone number. Along with the form, we record:

• what the form showed you, including the version of the Terms and the notice next to the button, and the date and time you submitted it;
• the page, ad campaign or link that brought you to the Site. This includes campaign tags (UTM parameters), the Meta ad-click ID ("fbclid"), the referring website and the page you first landed on;
• technical details about your device and browser: device type, operating system and version, browser and version, whether you are using an in-app browser (for example, Facebook's or Instagram's), language settings, screen size, viewport size, pixel ratio, touch support, time zone, network type and speed, data-saver setting and reduced-motion preference;
• your IP address, and the approximate country, state, city and time zone that our content-delivery provider estimates from it;
• whether your browser sent a Global Privacy Control signal; and
• the random session ID and anonymous ID that our analytics assign to your browser (see Section 6). We use them to connect your request with your earlier visits to the Site.

Before you submit, our analytics (unless you have turned them off; see Section 6.4) record only which form fields you clicked into, whether each field was filled in, and how many characters it held. We do not record what you type until you submit the form.

We store the results of your Free Check with your request: the number of breaches the Breach Database reported for your email address, the names and years of those breaches, the types of data they exposed, and your estimated exposure score and level. We do not use the names of breached websites to infer anything about you. See Section 4.

When we email you, or you email us or use a form on the Site to contact us, we collect the content of those messages and your stated preferences, including any request to unsubscribe. We keep a record of each service email we send you about your Subscription (Section 16.2): the address it went to, its subject and text, whether and when it was sent, and our email provider's message ID. It is our proof of what we told you, for example that we confirmed your terms or reminded you before a renewal (retention: Section 12). For email open and click tracking, see Section 16.4.

Payments are handled by our payment processor, through a payment form embedded on the Site, which accepts cards, Apple Pay and Google Pay. Your card number and security code go directly to our payment processor, or to Apple or Google if you use their wallets. We never receive or store your full card number or security code. Our payment processor's privacy policy is linked from its payment form.

From our payment processor we receive your name, email address, the parts of your billing address its payment form asks for (for a U.S. card, the country and ZIP code), card brand and last four digits, its "fingerprint" of your payment method (a code that lets us recognize the same card without seeing its number), payment, refund and dispute status, and its customer and subscription IDs. We show the card brand and last four digits in your confirmation email and on the page you see right after paying (only in the browser you paid in), and we use the ZIP code (or state) of your billing address to send California's yearly notice (Terms, Section 24.1(a)) to subscribers there. You can update your payment method, see your invoices and cancel through our payment processor's customer portal; plan changes and changes to the email address on your Subscription are made by email to us. If you ask us to move your Subscription to a new email address because you can no longer use the old one, we ask for the last four digits of the card on it, its billing ZIP code and the amount and date of a recent charge, compare them with what our payment processor holds and email a notice to the old address (Refund & Cancellation Policy, Section 13.1). We use these details only to check that the request comes from the Subscriber, and keep the request with your support emails.

Checkout consent record. Before our payment form appears, you check one box, inside the "Renews automatically" block on our checkout page and directly below the renewal terms it shows (your plan, the price today and every month until you cancel, how and by when to cancel, and that the price may change), agreeing to those automatic renewal terms, and you click "Agree and continue" under a notice that clicking it accepts our Terms of Service and Refund & Cancellation Policy, appoints us as your authorized agent to file opt-out requests for you, and acknowledges this Policy. When you do, we record: the exact wording of the box, that you checked it (it is never checked in advance) and the wording's version; the exact wording of the notice, a SHA-256 fingerprint of it and the button's label; the words the notice and the button showed on your screen when you clicked, as our page read them back (a fingerprint of the notice and the button's words, which differ if, for example, your browser translated the page); where the notice was when you clicked and which version of our checkout page you saw; the full text of the checkout disclosure you were shown (the "Renews automatically" terms above the box, the statement "By continuing you enroll in automatic renewal" below the button, what its "Details" section contained and the seller line), its version, a SHA-256 hash of it (a fingerprint showing the text was not changed later), each of those parts on its own with where it appeared on the page, the dates it named (today's charge, the next charge and the rule your monthly charges follow) and the time zone your browser reported, which those dates are in; whether you opened "Details" before you clicked; whether our page found the renewal terms above the box and the seller line laid out on the page (not collapsed or hidden) when you clicked; the plan, the price and its currency, and our payment processor's ID for that price; which version of our Terms of Service and Refund & Cancellation Policy you accepted and of this Policy you acknowledged (each one's effective and "Last updated" dates and a SHA-256 fingerprint of its text) and the words shown next to the payment button, with their fingerprint; the date and time; your IP address; your browser's user agent (the description of your browser and device that it sends with every request); the approximate country our content-delivery provider estimates from your IP address; the page you were on; the lead ID of your Free Check request, if you made one in the same browser tab; and, if our analytics are on, your analytics session ID. Once you have paid, we add to the record your email address, our payment processor's IDs for the checkout, your customer record and your Subscription, and the brand, last four digits and its fingerprint of the card charged (which helps show, if a payment is disputed, that the same card paid before), so that it can be found by your email address or customer ID if a payment is disputed, a regulator asks or you ask for it. We keep it as proof that you agreed to the automatic renewal and the recurring charge, that you accepted our Terms of Service (including the arbitration agreement and class-action waiver in their Section 20) and Refund & Cancellation Policy, appointed us as your authorized agent and acknowledged this Policy, and of which versions of them applied, for example if a payment is disputed, a regulator asks or we need to show which terms govern a dispute between us, and we use it for no other purpose (retention: Section 12). If you change plans (by email to us, Section 9 of our Refund & Cancellation Policy), we keep a record of that change with it (the old and new plan and price, the email in which you confirmed it, when we made the change and our payment processor's IDs), for the same purpose and as long.

Our money-back guarantee applies only to the Initial Payment and is available once per Subscriber, once per Household, once per payment method and once per Covered Person. To apply this rule, and the 12-month waiting period after a guarantee refund (Section 6.7 of our Refund & Cancellation Policy), we compare your email address, billing ZIP code and payment-method fingerprint, and one-way coded versions ("hashes") of each Covered Person's name and, if we have it, date of birth, with those of past guarantee refunds. We identify a Household by the billing ZIP code together with these details. We do not use the addresses you give us for removals, or your phone number, for this purpose.

Right after payment: the Intake Form. When you click "Agree and continue" at checkout and complete your purchase, you appoint us as your authorized agent (Section 10). The page that confirms your payment then shows your Intake Form, a short form where you can add other names you have used and the cities and states where you have lived. It does not ask for your date of birth or any ID number. The form works in the browser where you opened checkout, for a short time after payment. If you do not complete it there, we email you to ask for the same details, and you can reply with them. Each time you use it, we add what you enter to what you gave before. We store what you add with your request (or, if you did not request a Free Check first, with your Subscription) and use it only to find and remove your Listings. It is Agent Information (Section 10), and we never use it for marketing, advertising or analytics.

If a Data Broker needs more to match a Listing to you, such as your age or another phone number or email address, we ask you by email, and you can say no. During the full check and each monthly re-check, we also collect the Listings we find and screenshots of them, the Removal Requests we submit, the responses we receive, re-check results and your Reports, and we keep the record of your appointment of us as your agent. All of this is Agent Information, and Section 10 limits how we use it.

We do not ask for your Social Security number or any part of it, a copy of a government ID, bank account details or card numbers (Section 9). Please do not send ID documents to us.

If you are a Subscriber on a Family plan, you give us the name and email address of each adult Family Member you add, so we can email them an invitation to authorize us (see Section 11). We collect a Family Member's other details from that person directly, when they reply to their invitation (Section 11.2).

When you use the Site, we and our providers automatically collect:

• Device and connection data: IP address, the device and browser details listed in Section 3.1, and the date and time of your visit.
• Approximate location: country, state, city and time zone estimated from your IP address.
• Site activity (our own analytics): pages viewed, sections viewed, clicks on buttons and links, how far you scroll, time on page, form interactions (as described in Section 3.1), errors, your session ID and anonymous ID, and the campaign that brought you to the Site. You can turn this off in Cookie settings (Section 6.4).
• Meta Pixel data: for visitors in the United States who have not opted out and do not send Global Privacy Control. See Section 6.2.
• Page-load measurements (by our content-delivery provider): for every visitor, the page address and referring page, browser and device details and how long the page took to load. See Section 6.1.

• Our payment processor: payment, refund and dispute status, and limited card details (see Section 3.4).
• Card networks, through our payment processor: updated card details if your card is replaced or its expiration date changes.
• Our content-delivery provider: approximate location estimated from your IP address, security signals, and totals of how our pages load (Section 6.1).
• The Breach Database: the breaches associated with your email address.
• Data Broker sites: the Listings about Covered Persons and their responses to Removal Requests.
• Meta: the ad-click ID in the link you clicked, and aggregated reports about how our ads perform. Meta does not give us your Facebook or Instagram profile information.
• The Subscriber: the name and email address of the adult Family Members they add.

Do not give us another person's information unless you have that person's permission or another legal right to do so. This includes running a Free Check on someone else's email address. For information about other people that appears in Listings, see Section 10.6.

4.1 What the Free Check does. When you submit the form and the breach check is on, we send your email address only to a third-party breach-database provider (the "Breach Database"). It is an independent service that keeps a database of email addresses found in known data breaches, and it tells us which known breaches include your address. We do not send it your name or phone number. The Breach Database handles the lookup under its own terms and privacy policy. We show you the breaches it reports (their number, names, years and the types of data exposed). When the breach check is off, we do not send your email address to any breach database and show no breach results; the Free Check then shows only the estimate described in Section 4.2. We may switch to another breach-database provider. If we do, it receives the same information for the same purpose.

4.2 How the estimate works. The Free Check does not search Data Broker sites for your Listings. What we show you is an estimate:

• Exposure score. A score on a 0 to 100 scale. It is calculated from the number of breaches the Breach Database reports for your email address (not counting spam lists), whether those breaches exposed passwords, phone numbers or physical addresses, whether you gave us a phone number, and whether you are in the United States, based on your IP address, plus a baseline that applies to everyone. If the breach check is off or the Breach Database does not respond, the score uses the other factors only.
• Site types. General types of Data Broker sites, such as people-search and background-check sites, that commonly list people in the United States. They describe the industry in general. They are not findings that any particular site lists you.

A check of Data Broker sites for your Listings happens only under a paid Subscription.

4.3 How we use your results. We use your results to show them to you. The exposure score is an automated estimate for your information only. We do not use it, or any other automated processing, to make decisions about you that have legal or similarly significant effects.

We use personal information to:

1. Provide the Free Check: run the Breach Database lookup and show your results.
2. Respond to your request: email you about your Free Check and our Services.
3. Provide the Subscription: send and process the Intake Form, run the full check and monthly re-checks, take screenshots, submit and track Removal Requests as your authorized agent, send Reports, and provide customer support by email.
4. Handle payments: process payments, renewals, cancellations and refunds; apply our money-back guarantee rules, including the 12-month waiting period in Section 6.7 of our Refund & Cancellation Policy; prevent payment fraud; and respond to chargebacks and payment disputes.
5. Send marketing emails: you can unsubscribe at any time (Section 16.3).
6. Measure and improve our advertising: learn which ads and campaigns bring visitors and customers, using our own records and, unless you opt out, the Meta Pixel (see Section 6).
7. Understand and improve the Site and Services: for example, find where visitors drop off and fix errors.
8. Keep the Services secure: detect and prevent spam, abuse, fraud and security incidents; limit repeated automated submissions; and debug problems.
9. Comply with the law and protect rights: keep records of consents, opt-outs and privacy requests; meet our legal, tax and accounting obligations; enforce our Terms of Service; and establish, exercise or defend legal claims, including payment disputes.
10. Complete business transfers: as part of a merger, acquisition, financing or sale of assets (see Section 7.3).
11. Act at your direction, or with your consent.

Limits we place on ourselves:

• Your phone number: we use it only to find and remove your Listings. For the Free Check estimate we note only whether you gave one. We never call or text you, never use your phone number for marketing and never send it to Meta.
• We use Agent Information only for the purposes in Section 10.2. We never use it for marketing, advertising or analytics. Marketing emails to Subscribers use only the email address they gave us on the Free Check form or at checkout.
• We currently do not collect, use or sell personal information to train large language models or other AI models. If we start, we will update this Policy before we do.
• We may create de-identified or aggregated information, such as overall removal success rates. We will keep it in de-identified form and will not try to re-identify it, except as the law allows.
• We never ask for card numbers by email.

We run our own ("first-party") analytics. For visitors in the United States they are on by default, and you can turn them off at any time in Cookie settings (see Section 6.4). The Site sends events directly to our servers, and we store them in our cloud database (Section 7.1). The events include page views, sections viewed, clicks, scroll depth, time on page, form interactions and errors, each with a session ID, an anonymous ID, device and browser details and the campaign that brought you. When you submit the Free Check form, we connect these events to your request.

We use this information only for ourselves, to understand and improve the Site and our marketing. We do not sell it or share it for targeted advertising. We currently do not use "session replay" tools that record your screen or keystrokes. If we start, we will update this Policy before we do.

Page-load measurement. Our content-delivery provider adds a small script to our pages that measures how they load. For each page view, it receives the page address and the referring page, your browser's user agent (from which it works out your browser, operating system and device type), your IP address (from which it works out your country) and measurements of how quickly the page loaded and responded. It does not set cookies or use browser storage, and nothing from it goes to Meta. Our content-delivery provider handles this data as our service provider and shows us only totals, such as page views and loading times by country or browser, not individual visits. It runs for every visitor, including visitors outside the United States and when our own analytics are turned off: the Cookie settings switch does not stop it.

The Site uses the Meta Pixel, a piece of code from Meta Platforms, Inc. that sends information about your visit to Meta. For visitors in the United States, the Pixel loads by default when a page opens. On your first visit, our cookie notice tells you that we use it. We do not load the Pixel:

• if your browser sends a Global Privacy Control signal;
• if you have opted out in that browser with the "Do Not Sell or Share My Personal Information" page (https://saveprivacy.net/do-not-sell); or
• if we locate you outside the United States.

When the Pixel is loaded, we send these events:

With each event, Meta receives your IP address, browser and device information, the page address and referring page, the event name and basic details (such as the plan and the price; for a Purchase, also our checkout's reference number, so Meta counts each purchase only once), and Meta's cookie IDs for your browser. If you are logged in to Facebook or Instagram in the same browser, Meta may be able to link this activity to your Meta account.

We have configured the Pixel so that it does not send your name, email address or phone number to Meta (Meta calls this "advanced matching", and we have turned it off). We have also turned off Meta's automatic event collection, so the Pixel sends only the events listed above, and we keep personal information out of our page addresses. If we change any of these settings, we will update this Policy first.

Meta uses this information to measure our ads, help deliver them to people likely to be interested, and show ads to people who have visited our Site. Meta may also use it for its own purposes, as described in Meta's Privacy Policy. Because of this, our use of the Meta Pixel is "sharing" for cross-context behavioral advertising under California law, "targeted advertising" under other state laws, and may be a "sale". You can opt out (see Section 8).

The Site and our providers store small pieces of information in your browser:

Our content-delivery provider's page-load measurement (Section 6.1) sets no cookies and stores nothing in your browser.

We may change the names of these items from time to time without updating this table, as long as their purposes stay the same.

• Cookie notice: on your first visit, a short notice tells you that we use cookies and similar technologies, including the Meta Pixel, for analytics and advertising, with links to this Policy and to Your privacy choices. Selecting "OK" closes the notice. It does not change any setting.
• "Do Not Sell or Share My Personal Information": the link in the footer of every page opens our Your privacy choices page (https://saveprivacy.net/do-not-sell). Turn advertising off there to stop the Meta Pixel in that browser (see Section 8).
• Global Privacy Control: if your browser sends it, we do not load the Pixel, and the Your privacy choices page shows "Opt-out preference signal honored" (Section 8.4).
• Cookie settings: the "Cookie settings" link at the bottom of every page lets you turn our own analytics off or on. It does not affect our content-delivery provider's page-load measurement, which uses no cookies (Section 6.1).
• Browser controls: you can block or delete cookies and local storage in your browser settings. If you delete our storage, the Site will no longer remember your choices, including your opt-out, unless you use Global Privacy Control.
• Meta controls: you can change your ad settings in your Facebook or Instagram account.
• "Do Not Track": some browsers send an older "Do Not Track" signal. No common standard exists for how to respond to it, so we do not act on it. We do honor Global Privacy Control, which state laws recognize.

The strictly necessary items in Section 6.3 (security and bot protection, remembering your privacy choices, and secure checkout) always run.

We may disclose personal information when we believe in good faith that it is needed to comply with the law, a court order, a subpoena or another legal process, or to protect the rights, property or safety of SAVE, our customers or others, including to prevent fraud.

If you dispute a charge with your bank or card issuer, we may give the issuer, the card network and our payment processor the records needed to respond, to prevent fraud and to defend against the dispute: your purchase and billing records; our records of your agreement to our Terms and to automatic renewal, including the IP address and device used; our emails with you about your Subscription, billing, cancellation or refunds; a delivery log of the Reports we sent (dates and recipient address only); and a summary of the work we did (the names of the Data Broker sites we checked or contacted and the dates and status of the requests). We do not give them your removal details, such as your date of birth or past addresses, the contents of your Reports or screenshots of your Listings.

If SAVE is part of a merger, acquisition, financing, reorganization (including a transfer to a new company formed to operate SAVE), bankruptcy or sale of all or part of its assets, personal information may be transferred to the buyer or successor. It will remain subject to the promises in this Policy, or you will be notified as required by law.

Where our providers offer them, we use contracts that limit their use of personal information to providing services to us. The Breach Database and our team's messaging app operate under their own standard terms, so we send them only the information described above.

We do not sell lists of people, and we do not publish or sell information about people to others.

8.1 What we do. Unless you opt out, the Meta Pixel on our Site makes the following available to Meta Platforms (an advertising and social media company), to measure our ads and show ads to people who visited our Site. In the past 12 months we have made available:

• identifiers: IP address, Meta cookie IDs and ad-click IDs;
• internet activity: pages viewed, Pixel events, and browser and device details;
• commercial information: the fact that you started checkout or made a purchase, the plan and price, and a reference number for each purchase (so Meta counts it only once); and
• approximate location, to the extent Meta estimates it from your IP address.

California law calls this "sharing". Other state laws call it "targeted advertising", and some may treat it as a "sale". We give you the right to opt out under all of these laws, wherever you live in the United States.

8.2 What we do not do. We do not sell or share your name, email address, phone number, mailing address, payment details, Free Check results, Agent Information, or any sensitive personal information.

8.3 How to opt out. You can use any of these methods. You do not need an account, and we will not ask you for more information than the method requires.

1. Click "Do Not Sell or Share My Personal Information" in the footer of any page on the Site, or go to https://saveprivacy.net/do-not-sell, and turn advertising off. This takes effect in that browser right away. If you want the opt-out applied to your records as well, you can also enter your email address on that page.
2. Turn on Global Privacy Control ("GPC"). GPC is a setting offered by some browsers and browser extensions, for example Firefox (in its privacy settings), Brave and DuckDuckGo. You can learn more at globalprivacycontrol.org. We honor it automatically.
3. Email [email protected] with the subject "Do Not Sell or Share". Give us the email address you used with SAVE, so we can apply your choice to your records.

8.4 How we process GPC. When your browser sends a GPC signal, we treat it as a request to opt out of sale and sharing for that browser and device, and for any profile we connect to it, such as our anonymous ID. We do not load the Meta Pixel in that browser. If we can connect the browser to you, we also apply the opt-out to you. This happens, for example, when you submit our Free Check form from that browser. A GPC signal overrides any earlier setting you chose on the Site. Our Your privacy choices page shows "Opt-out preference signal honored" when we have received and applied your signal.

8.5 What opting out does. We will not load the Meta Pixel in your browser, and we will exclude you from any sale or sharing linked to your email address. Opting out of sale and sharing does not by itself turn off our own first-party analytics or stop our use of service providers (Sections 6.1 and 7.1). You can turn our analytics off in Cookie settings (Section 6.4). You may still see ads that are not based on your activity elsewhere.

8.6 Timing. Opt-outs made with the Your privacy choices page or GPC take effect in that browser right away. We act on emailed requests, and on email addresses entered on the Your privacy choices page, as soon as we can, and no later than 15 business days after we receive them.

8.7 After an opt-out. We will wait at least 12 months before asking you to opt back in, unless you ask us to.

9.1 We do not collect it. We do not ask for or collect sensitive personal information, such as a Social Security number or any part of one, a copy of a government ID, account log-in details or precise location. A few Data Brokers will not process a Removal Request without a copy of a government ID or the last four digits of a Social Security number. We do not collect those for you: we tell you in your Report which sites asked for them and, where practical, how to submit the request to them yourself.

9.2 If you send it to us anyway. Please do not send us sensitive personal information. If you do, we do not use it, and we delete it as soon as we notice it, unless the law requires us to keep it.

9.3 No "Limit" link. Because we do not collect or use sensitive personal information, we do not use it to infer characteristics about you and do not sell or share it. California law therefore does not require a "Limit the Use of My Sensitive Personal Information" link, and we do not provide one.

When you click "Agree and continue" at checkout and complete your purchase, you appoint SAVE as your authorized agent to search Data Broker sites for your Listings and to submit Removal Requests to them for you (Terms of Service, Section 6). Adult Family Members authorize us themselves (Section 11). We do this work ourselves. If a service provider ever helps with it, we will add it to Section 7.1 before it receives any Agent Information, and it may use Agent Information only for this work.

10.1 Agent Information. "Agent Information" means everything we collect or create while acting as a Covered Person's agent. It includes the details given in the Intake Form (other names and past cities and states) or by email when a site needs more (such as your age or other contact details), the Listings we find and copies and screenshots of their content, the Removal Requests we submit, Data Broker correspondence, re-check results, Reports, our work log, and the record of your appointment of us as your agent.

10.2 How we use it. We use Agent Information only to:

• provide the removal requests and Reports you asked for: find Listings, take screenshots for your Reports, submit and follow up on Removal Requests, and re-check sites for re-listings;
• verify your identity and your requests;
• prevent fraud, including payment-dispute fraud (see Section 7.2) and misuse of our money-back guarantee (see Section 3.4);
• keep a record of the work we did; and
• comply with the law.

We never use Agent Information for marketing, advertising, ad measurement or analytics. We do not send it to Meta or put it in our team's notifications in our messaging app. We keep it logically separate from our marketing and analytics data, and only people working on your account can access it.

10.3 What we give Data Brokers. We give each Data Broker only the information it needs to process the request, plus proof of your authorization if the site asks for it. That proof is either a statement of your appointment made from your checkout consent record (your name, the words of the notice you accepted with the button's label, the date and time you clicked it, and our legal name; never your IP address, browser, device or card details), or a signed authorization (an adult Family Member's own, or one a site requires). Some sites need an email address or phone number to confirm a request, which can give the site information it did not already have. Where a site allows it and it is practical, we may use an email address that SAVE manages instead of yours. Some Data Brokers will contact you directly to confirm your identity or your request.

10.4 Data Brokers decide. Once a Data Broker receives a request, its own privacy policy governs how it handles the information. We do not control Data Brokers. They decide whether and when to remove a Listing, and they may list you again later. Our Terms of Service (Section 5) explain what we can and cannot promise about removals.

10.5 Records. We keep the record of your appointment of us as your agent (part of your checkout consent record, Section 3.4, or, for an adult Family Member, their own authorization) and records of the requests we submit for the periods in Section 12. We show a Data Broker only the statement described in Section 10.3, never the full consent record.

10.6 Information about other people in Listings. Listings often include information about other people, such as relatives' and associates' names, addresses and phone numbers. We use it only to confirm which Listings belong to the Covered Person. We keep it only inside our copies and screenshots of Listing content, which we delete as described in Section 12. Those people may make privacy requests to us under Section 15.

11.1 Who can be added. A Subscriber may add up to 4 Family Members. Each must be an adult (18 or older) who lives in the Subscriber's Household and authorizes us themselves (Section 11.2). No one under 18 can be added.

11.2 Adult Family Members authorize us themselves. When a Subscriber adds an adult, the Subscriber gives us that person's name and email address. We then email the adult their own invitation, with the full text of our authorization and links to our Terms of Service and this Policy. To join, they reply from their own email address: in that reply they confirm that they agree, sign our authorization by typing their full name, accept our Terms of Service and acknowledge this Policy, and they can add their Intake Form details. Until they do, we do nothing for them: we do not run a full check, collect their removal details or submit any Removal Request. If they decline, or do not respond within 60 days, we delete the details the Subscriber gave us, except a record that we sent the invitation and what the answer was.

11.3 What the Subscriber sees. An adult Family Member's Reports are private to them.

• The Subscriber can see whether each adult Family Member has accepted the invitation and is covered, for example "invitation sent", "pending authorization" or "active".
• The Subscriber sees a status summary, such as how many sites we found and how many requests are complete, only if that Family Member agrees. They can withdraw that agreement at any time.
• Reports go only to that Family Member. We never share the contents of an adult Family Member's Listings or Reports with the Subscriber, such as their screenshots, addresses, phone numbers or relatives.

11.4 Rights of Family Members. Each adult Family Member may exercise the privacy rights in Section 14 directly. They may also ask us at any time to stop acting for them or to stop sharing their status summary with the Subscriber. The Subscriber can remove a Family Member by emailing us.

11.5 No minors. No one under 18 can be added to a Family plan, and we do not search for Listings of, or submit Removal Requests for, anyone under 18 (Section 18).

We keep personal information only as long as we need it for the purposes in this Policy. Our standard periods are:

We may keep information longer when the law requires it, to resolve a dispute or chargeback, to enforce our agreements, or because of a legal hold. When these reasons no longer apply, we will delete the information or de-identify it. Information stored in your browser stays there until it expires or you clear it. Meta, our payment processor, the Breach Database and our team's messaging app keep information they receive under their own policies.

We use reasonable administrative, technical and physical safeguards that fit the sensitivity of the information. These include:

• encryption of data in transit (HTTPS/TLS);
• encryption at rest for our database, provided by our hosting providers;
• database access rules that limit reading and writing to our servers and authorized team members, not visitors' browsers;
• access to Agent Information limited to people working on your account;
• Reports sent only to the email address of the Covered Person they are about;
• rate limiting and anti-spam measures; and
• payment card data handled only by our payment processor.

No method of transmitting or storing information is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you as the law requires. Please never send us card numbers, passwords, ID documents or Social Security numbers by email.

A growing number of states give their residents rights over their personal information, including California, Colorado, Connecticut, Texas and Virginia, and other states whose laws take effect after the date of this Policy. We give the following rights to residents of every US state, subject to the exceptions the law allows:

1. Right to know and access: ask what personal information we have collected about you, its sources, why we use it, and who we disclose it to, and get a copy of specific pieces of it.
2. Right to portability: get a copy of your information in a portable, commonly used electronic format.
3. Right to delete: ask us to delete personal information we collected from you or about you.
4. Right to correct: ask us to correct inaccurate personal information.
5. Right to opt out of sale, sharing and targeted advertising: see Section 8.
6. Right to opt out of profiling: we do not use profiling to make decisions that produce legal or similarly significant effects about you.
7. Right to limit the use of sensitive personal information: see Section 9.
8. Right to a list of third parties: Section 7.1 names the recipients of personal information. You may also ask us for a list of the specific third parties we have disclosed your information to.
9. Right to appeal: if we decline your request, you can appeal (see Section 15.6).
10. Right to non-discrimination: we will not deny you the Services, charge you a different price or give you a lower quality of service because you exercised these rights. We will not retaliate against you in any other way either.

Limits. These rights are not unlimited. For example, we may keep information we need to complete a transaction you asked for, provide the Services, detect security incidents or fraud, comply with a legal obligation, honor your opt-outs, or establish, exercise or defend legal claims, including payment disputes. Even after a deletion request, we keep the limited records described in Section 12, such as consent, opt-out, money-back guarantee and transaction records. If you ask us to delete information we need to provide your Subscription, such as your removal details, we will explain what we can no longer do without it. If we can no longer provide the removal work, we will cancel your Subscription at the end of the current billing period, unless you cancel sooner (Refund & Cancellation Policy, Section 5.4). We may limit requests to know or access to two per 12-month period. We may refuse or charge a reasonable fee for requests that are clearly unfounded or excessive, as the law allows.

15.1 How to submit a request.

• Opt out of sale, sharing or targeted advertising: use the methods in Section 8.3.
• All other requests: email [email protected] with the subject "Privacy Request". We operate only online, so email is how we take these requests.

Tell us which right you want to use, and give us your name and the email address you used with SAVE.

15.2 Verification. To protect you, we must verify your identity before we act on a request to know, access, delete or correct. We do not need to verify opt-out requests. We will usually verify you by:

• matching the information you give us with our records; and
• asking you to confirm control of the email address we have on file, for example by replying from that address or clicking a link we send to it.

For copies of specific pieces of information, or for sensitive information, we may ask for more matching details and a signed statement, under penalty of perjury, that you are the person the request is about. We will not ask for a government ID unless there is no other reasonable way to verify you. We will use any information you give us for verification only for that purpose.

15.3 Authorized agents. You may use an authorized agent to make a request for you. For a request to know, access, delete or correct, we may require the agent to show your signed permission, and we may also ask you to verify your own identity with us or to confirm directly that you gave the agent permission. These steps do not apply if the agent holds a valid power of attorney. For an opt-out request, we may ask the agent only for your signed permission. We will not ask you to verify your identity or confirm the opt-out directly.

15.4 Timing. We respond within the time your state's law requires. For California residents, we confirm receipt of a request to know, access, delete or correct within 10 business days and respond within 45 calendar days. Most other state laws also allow 45 days. Where the law allows, we may take up to 45 more days, and we will tell you why. Where no state privacy law applies to you, we aim to respond within 45 days.

15.5 Our response. If we cannot fully meet your request, we will explain why, unless the law prohibits us from doing so.

15.6 Appeals. If we decline your request in whole or in part, you can appeal. Within 90 days after our decision, email [email protected] with the subject "Privacy Appeal". A person who did not make the original decision will review it. We will respond in writing within the time your state's law requires, and where no law sets a period, within 60 days. If we deny your appeal, we will tell you how to contact your state Attorney General.

16.1 Email only. We communicate with you only by email. We do not make phone calls or send text messages, for sales, support or anything else. If you receive a call or text that claims to come from SAVE, it is not from us. Please tell us at [email protected].

16.2 Service emails. If you subscribe, we email you what we need to provide the Services: receipts; a confirmation right after your first payment, with your plan, the amounts and dates, how to cancel and a copy of the wording you agreed to at checkout; requests for your Intake Form details; Reports; a reminder before each renewal charge, with a yearly summary of your plan; cancellation confirmations; price-change notices; and legally required notices. Our email provider sends them for us (Section 7.1). Unsubscribing from marketing does not stop these emails while you have a Subscription.

16.3 Marketing emails. We may email you about your Free Check and our plans. After a Free Check, we may send you up to two emails about our plans; they do not include your Free Check results. Every marketing email has an unsubscribe link and supports one-click unsubscribe in email apps that offer it. You can also unsubscribe by emailing us. If you reply DELETE to an email we send after a Free Check, we will delete your Free Check request and stop sending you marketing emails. We will process your request within 10 business days. Our marketing emails include our postal address and identify themselves as promotional.

16.4 Email tracking. Our emails may contain tracking pixels and tracked links that tell us whether an email was opened or a link was clicked. We use this to see whether Reports and notices reached you and to improve our emails. You can block images in your email app to prevent this.

16.5 Mobile information. We do not use your phone number to contact you, and we do not sell or share mobile phone numbers with anyone for marketing or promotional purposes. We include a Covered Person's phone number in a Removal Request only when a Data Broker needs it to find or remove that person's Listing.

Section 2 lists the categories of personal information we collected in the past 12 months, whether we sold or shared each one, and how long we keep it. The table below adds the sources and the business purposes for each category, and the recipients of each category for a business purpose. The purpose numbers refer to the list in Section 5.

Section 8.1 lists the categories we sold or shared and the recipient (Meta Platforms, an advertising and social media company). We did so to measure our ads and show ads to people who visited our Site.

We offer the Free Check without charge. To receive it, you give us your name, email address and phone number. Because the Free Check is offered in connection with collecting this information, California law may treat it as a "financial incentive".

• The terms: you provide your name, email address and phone number. We run the Free Check and show you the results. We use your email address to run the check and to email you about your check and our Services, as described in Sections 4, 5 and 16. We use your phone number only as described in Section 5 and never call or text you.
• How to opt in: by submitting the Free Check form. We link to this notice (https://saveprivacy.net/privacy#financial-incentive) next to the form's submit button.
• Your right to withdraw: you can withdraw at any time, without penalty. Unsubscribe from our emails or ask us to delete your information (Section 15).
• Value of your information: our good-faith estimate of the value of the personal information you give us for the Free Check is about $0.10 per Free Check. We calculated it by dividing our expected total cost of providing the Free Check in November 2026 (our breach-database subscription, about $9 per month, plus the hosting and database costs of running the check) by the number of Free Checks we expect to complete that month. We will update the estimate after each full month of data. We used this method because the Free Check is what we give in exchange for the information, so its cost is a reasonable measure of the value of that exchange. This is not a statement of what any person's information is worth.

We do not disclose the personal information covered by California's "Shine the Light" law (Cal. Civ. Code § 1798.83), such as your name, address, email address or phone number, to third parties for their own direct marketing purposes.

We do not sell "covered information" for monetary consideration as Nevada law defines those terms. Nevada residents may still send an opt-out request to [email protected].

If you need this Policy in another format because of a disability, contact us at [email protected].

The Services are for adults 18 and older and are not directed to children. We do not knowingly collect personal information directly from anyone under 18, including any child under 13, and no one under 18 can be added to a Family plan. If we learn that we did, we will delete it. If you believe a child has given us personal information, contact [email protected].

The Services are offered only in the United States. If we locate you outside the United States, we do not load the Meta Pixel or our own analytics (our content-delivery provider's page-load measurement, Section 6.1, runs for every visitor). We and our providers process personal information in the United States. Some providers process it in other countries: our content-delivery provider runs a worldwide network, and the Breach Database and our team's messaging app operate outside the United States. Data protection laws in those countries may differ from the laws where you live.

The Site links to, or relies on, services run by others, including our payment processor's payment form and customer portal, Apple Pay, Google Pay and Data Broker sites. Their own privacy policies govern how they handle your information. We are not responsible for their practices.

We may update this Policy from time to time, and we review it at least once a year. We will post the updated version on the Site and change the "Last updated" date. For material changes, we will give you notice before the change takes effect, by email (if we have your address) or by a notice on the Site. If the law requires your consent before we use information we already hold in a materially different way, we will ask for it.

This Policy describes our practices. It is not a contract and does not create rights beyond those the law gives you. If you have agreed to our Terms of Service, any dispute about how we handle personal information is resolved under the dispute-resolution section of our Terms of Service at https://saveprivacy.net/terms (Section 20), including its informal-resolution step, its small-claims option, its procedures for many similar claims and your right to opt out of arbitration within 30 days (Section 20.11), to the extent the law allows. Before you start any claim, please contact us (Section 23) so we can try to resolve your concern. Nothing in this Policy limits rights you have under laws that cannot be waived.

For questions about this Policy or our privacy practices, or to make a request:

NEXT MATH INC (SAVE)
Email: [email protected]
Telephone (calls and voicemail; we reply by email): +1 (347) 690-0190
Mail: 220 East 23rd Street, STE 400, New York, NY 10010, United States
Contact page: https://saveprivacy.net/contact
Your privacy choices (Do Not Sell or Share): https://saveprivacy.net/do-not-sell