Provisional draft. This text is still under legal review and will be completed with the company details before publication.
Who we are
UNRECON (working name) finds personal data published on the internet, assesses the exposure and requests its removal. Company name, registration number, address and the contact of our data protection officer will be added here before publication.
What we collect on this site
- On the request form: name, email, city (optional) and, for companies, the company name.
- On sign-in: email and password, used only to authenticate access.
- On each visit to the public pages: the page address and the site you came from (only the domain, or the link's utm_source parameter), added up per day. No cookie, no IP address and nothing that identifies you. If you send a request, this origin is stored with it.
This site uses no advertising cookies and no third-party analytics. Fonts are served by the site itself, so your browser does not connect to outside services to load them.
What we collect from clients
- Details for the search: names, national ID numbers, date of birth, emails, phone numbers, current and past addresses.
- ID document and proof of address, sent to a site only when it requires proof that the data belongs to you.
- Signed authorization and contract.
- Account credentials, only if the client hires removal through their own accounts, with scope and duration set in a specific agreement.
What we use it for
To find where the client’s data is exposed, request removal on their behalf, follow up on each request and warn about new exposures. We do not sell, rent or share client data for any other purpose.
Who we share it with
Each site, search engine or platform that receives a removal request gets only the minimum needed to find the record. Hosting and email providers process data under contract and will be listed here.
How we protect it
Data and documents are stored encrypted, with access limited to the team serving the client and a log of every access. Credentials, when hired, stay in a vault, each sign-in needs the client’s approval, and they are revoked when the agreed period ends.
How long we keep it
While the contract is active. After cancellation, we delete the registration details and documents and keep the request history and evidence only as long as needed to defend a possible dispute, as stated in the contract.
Your rights
Depending on where you live, laws such as the GDPR (European Union and United Kingdom), CCPA and CPRA (California), PIPEDA (Canada), LGPD (Brazil) and the data protection laws of Mexico, Colombia, Chile and Argentina let you ask for access, correction, deletion and portability of your data, ask who it was shared with, withdraw consent and complain to the data protection authority. Requests will go to the data protection officer contact published on this page.