Last updated September 7, 2026
PrivacyClock is a service of Futurist IP. We are the controller of the information described below, and where we process information on your behalf as your service provider, that role is set out under “Our role under privacy law”.
From you, our customer: company name, your name and work email, your data broker registration identifiers, billing information (processed by our payment processor. We never store card numbers), and support communications.
From your use of the service: one-way hashes of consumer identifiers rather than the identifiers themselves; DROP work-item identifiers, list types, match results, status codes, exemption notes you write, and timestamps; your suppression list, held as hashes; and operational logs covering requests, errors, and performance.
From the contact form on this site: the company name, email address, and any note you submit.
To provide the service. Run the matching cycle, track deadlines, generate filings, and maintain your evidence log. And to support you, bill you, secure and improve the service, and meet our own legal obligations. We do not sell or share personal information, we do not use your data to train models, and we do not use your data to benefit other customers.
Where you are a business or data broker and we process information on your behalf, we act as a service provider under the CCPA and as a processor under comparable laws. We process that information only on your documented instructions and only to provide the service. Separate contractual terms govern this relationship.
We use a small number of third parties to run the service, covering hosting and logging, email delivery, and payment processing. They act on our instructions and may not use your information for their own purposes. We will give notice before a change that materially affects how your information is handled, and we will name them on request.
Account and billing records are retained while your account is active and afterward as required for tax and legal purposes. Compliance records. Your evidence log, cycle history, and suppression list, are retained for the life of the account, because you need them for audits beginning in 2028. On termination you may export everything; we then delete it within 30 days unless you ask us to retain it or law requires otherwise.
Data in transit is encrypted with TLS. We hold hashes, statuses and evidence rather than consumer identities, so the information we retain is deliberately limited. Production access is restricted to personnel who need it. No system is perfectly secure, and we do not claim otherwise.
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, and to withdraw consent. Contact us and we will respond within the period the applicable law requires. Note that for hashed consumer identifiers we generally cannot determine whose data is whose. That is by design. So requests about consumer records should be directed to the data broker who holds them.
The service is sold to businesses and is not directed to children.
We post changes here and update the date above. Material changes are notified to account holders by email.
Questions about this policy: contact@privacyclock.com