InfoBrokerPurge

Security at InfoBrokerPurge

You are trusting us with the one record that, in the wrong hands, undoes everything this service exists to do. This page states what we do with it, in plain terms, and what we will never do. It describes outcomes and guarantees, not internal mechanics.

Where your data is

  • Your identity vault is stored on hardware operated by SupportCALL in Australia. There is no US cloud, no sub-processor and no analytics vendor anywhere in the path.
  • Every identity value is encrypted individually at rest with AES-256-GCM. Encryption keys are held separately from the data and are never present in the web-facing part of the system.
  • Staff administering the platform see case status and broker correspondence. They do not see decrypted identity values in the course of normal operation.

Accounts and sessions

  • Passwords are hashed with Argon2id. Two-factor authentication (time-based codes) is available to every account and recommended.
  • Sessions are bound to your browser, rotated regularly and expire on inactivity. Repeated failed sign-ins lock the account for a cooling-off period.
  • Every sign-in, export, vault change and account closure is written to an audit log that cannot be edited or deleted, even by administrators.

What brokers receive

  • Only the identifiers needed to locate and delete your record, inside a formal request that cites the governing law.
  • Brokers reply to a case-specific address operated by us. They never receive your personal email address or a direct channel to you.
  • You are never required to provide identity documents to start. If a broker insists, the choice is yours; uploads are encrypted, sent with a destroy-after-verification instruction, and deleted from our storage after 14 days.

Retention

  • Identity vault: for as long as your account exists. Closing the account wipes the vault and shreds documents immediately.
  • Correspondence record: kept as evidence that requests were made, with personal data removed on account closure.
  • Broker replies and evidence captures: trimmed on a fixed schedule so nothing is kept longer than it is useful.

Backups and continuity

  • Encrypted backups run nightly and are verified after every run. Backup archives are encrypted under a separate key that is never stored with the data.
  • The platform monitors itself continuously and alerts the operator when any component degrades.

What we never do

  • Sell, share, license or "partner" your data with anyone, including other privacy companies.
  • Run analytics, advertising pixels, session recording or third-party fonts on any page.
  • Use third-party email, CRM, chat or support tools that would see your details.
  • Send marketing email. You receive case notifications you can switch off, and nothing else.

Reporting a vulnerability

If you believe you have found a security issue, email privacy@infobrokerpurge.com with enough detail to reproduce it. We acknowledge reports within two business days, do not pursue good-faith researchers, and credit fixes on request. A machine-readable version of this policy is published at /.well-known/security.txt.

Who operates this

InfoBrokerPurge is built and run by SupportCALL, an Australian ICT business operating since the 1990s. Questions about this page: privacy@infobrokerpurge.com.