These Terms of Service (“Terms”) govern your access to and use of Hushfolk (“Hushfolk”, “we”, “us”), a personal-data-broker takedown platform. By creating an operator profile or running a free scan, you agree to these Terms.
1. The service
Hushfolk provides:
- Free OSINT scanning against your own email or handle.
- The Ghost engine — continuous breach surveillance across the email and phone vectors you register, sourced from Have I Been Pwned and equivalent breach-corpus partners.
- The Janitor engine — concierge takedown service. For V1, every takedown is drafted and dispatched by a human privacy operator; the Janitor pipeline is notautomated. See the Privacy Policy §5b for the full plaintext-PII contract. We expect to migrate to an automated, tokenised dispatcher in V1.5 (Q3 2026); we will update these Terms before that change takes effect.
- The Command Centre dashboard for reviewing and managing your sovereign identity perimeter.
We add and deprecate features in line with our roadmap; material changes are announced in advance.
2. Eligibility and account
You must be at least 18 and legally able to enter into these Terms. One operator profile per individual. You are responsible for the security of the email address tied to your operator profile — we use six-digit one-time codes in place of passwords; we do not maintain a long-lived password.
3. Subscription, billing, and refunds
Paid tiers are billed monthly in advance through Stripe. You may cancel at any time from the Billing Portal reachable from the Command Centre; cancellation ends your subscription at the current period end.
Refund policy. Subscriptions are non-refundable for partial months and we do not pro-rate cancellations. In-place upgrades charge a pro-rated invoice against your existing card; downgrades take effect at the next period start. VAT and applicable sales tax are added at checkout. EU / UK consumers retain any statutory cooling-off rights; if you exercise a statutory right within the applicable window, we refund the full purchase price.
4. Acceptable use
You agree to use Hushfolk only for your own identity perimeter. You must not (a) scan, register vectors for, or file takedowns against any person other than yourself, (b) attempt to deanonymise other Hushfolk operators, (c) interfere with the integrity or performance of the service (including rate-limit evasion or scraping), or (d) use the service for any unlawful purpose. We reserve the right to suspend an operator profile that breaches this clause and to decline a takedown that we cannot link to your own identity data.
5. Takedown dispatch authority (V1 concierge)
When you submit a Janitor takedown, you grant Hushfolk a limited agency to act on your behalf in filing GDPR Article 17 / CCPA §1798.105 erasure notices against the named data broker. You represent and warrant that the identity data referenced in the request belongs to you. Hushfolk may refuse, pause, or close a takedown if the broker address cannot be verified, the request appears duplicative, or the request appears to be filed against a person other than yourself.
Concierge nature of V1.For V1, your takedown intake (full legal name and postal address) is transmitted to our privacy operator’s secure inbox so a human operator can draft and dispatch the letter. The operator on-call SLA is 24 hours from submission to dispatch. The intake email is purged from the operator inbox after dispatch. See the Privacy Policy §5b for the full contract.
6. Data ownership
You own the identity data you submit. Hushfolk does not claim ownership and does not sell personal data. Processing terms, retention windows, and the subprocessor list are in the Privacy Policy.
7. Availability and service levels
We target 99.5% monthly availability on paid tiers but make no contractual uptime commitment at launch. Janitor takedowns carry a 30-day broker SLA from dispatch under GDPR Article 17; if a broker misses the deadline the request is moved to theHOSTILE state and we email you. The operator on-call SLA for our own dispatch step is 24 hours from your submission.
8. Termination
We may suspend or terminate an operator profile that violates these Terms or that creates a risk to the security of the service. You may terminate at any time by cancelling your subscription and triggering the erasure flow at /dashboard/settings (“Erase my account”). Erasure is honoured within 30 days of OTP verification; see the Privacy Policy §6 and §8 for what happens to each table.
9. Disclaimers
The service is provided on an “as is” and “as available” basis. We make no warranty that breaches will be discovered exhaustively, that takedowns will be honoured by every broker, or that identity data cannot resurface after a successful deletion. Hushfolk does not provide legal advice; the Janitor letter templates are standardised and may be reviewed with your own counsel.
10. Limitation of liability
To the maximum extent permitted by law, Hushfolk’s aggregate liability arising out of these Terms is capped at the greater of (a) EUR 100 or (b) the fees you paid in the 12 months before the event giving rise to the claim. Nothing in this clause limits liability that cannot be limited under applicable law (including for death, personal injury, fraud, or fraudulent misrepresentation).
Broker non-compliance. Hushfolk dispatches statutorily-correct erasure notices; we cannot guarantee that any specific data broker will respond, comply, or do so within the statutory window. Broker non-compliance is not a default by Hushfolk under these Terms, and the cap above applies in full to any claim arising out of broker behaviour. We escalate non-compliant brokers via the Janitor HOSTILE state and document the broker-response observation log so you can pursue your own regulatory complaint if you choose.
11. Changes
We post changes at this URL. Material changes take effect 14 days after posting and we email active operators in advance. Continued use of the service after the effective date means you accept the revised Terms.
12. Governing law
These Terms are governed by the laws of [GOVERNING JURISDICTION TO BE CONFIRMED], without regard to its conflict-of-laws principles. Disputes are subject to the exclusive jurisdiction of the courts of that jurisdiction, save where mandatory consumer-protection law gives you rights in your country of residence.
13. Contact
Questions: legal@hushfolk.com. Data protection: privacy@hushfolk.com.