Privacy Policy

Last updated: October 24, 2026

This policy explains how Kelly Green Holdings LLC, operating the DataShield service at datashieldnow.com, handles personal information. Contact us at [email protected].

What we collect

Free exposure check. Your name, email address, city and state. Used only to perform the check and deliver results.

Paid account. Your legal name, any aliases, address history, phone numbers, email addresses, date of birth and state of residence. We use these to match your records at supported brokers and to prepare requests you have authorized.

Verification and consent records. Email verification timestamps, identity verification reference and result, the signed authorization PDF, its SHA-256 hash, your typed signature, consent timestamps, IP address and browser information. These evidence that you authorized us to act for you.

Service records. Requests submitted, broker responses, status history and the messages we send you.

Identity verification

Identity document and selfie checks take place on Stripe’s hosted pages. We do not receive or store identity images. We retain only the verification reference, the result and the date. Do not email identity documents to us.

How we use information

To perform the exposure check and deliver results
To verify your identity and record your authorization
To submit supported privacy requests to brokers on your behalf
To process payments and manage your subscription
To send service messages, including your signed copy and any broker confirmations we choose to forward
To maintain security, prevent fraud and meet legal obligations

We do not send your onboarding details to advertising networks, analytics providers or language-model APIs. We do not sell your personal information.

Who receives information

We share only what each recipient needs:

Brokers you have authorized us to contact — the minimum identifying information needed for the request, plus evidence of your authorization where required.
Vercel — website hosting and serverless functions
Neon — encrypted database storage
Upstash — job queue and rate limiting
Cloudflare — content delivery and bot protection
Stripe — payment processing and identity verification. We never see or store card numbers.
Resend — transactional email, including verification codes and your signed authorization PDF
Jina AI — fetching public broker pages during an exposure check

We do not share your information with data brokers for marketing, and we do not sell it.

Cookies

We use one essential, secure, HttpOnly session cookie to support verification and signing. It expires within one hour. We do not use advertising cookies, tracking cookies or third-party analytics, and we do not run session-recording tools.

Retention

We keep information only as long as needed for the purpose it was collected, plus any period the law requires.

Free check data — eligible for cleanup more than 30 days after completion, or after the start date if no completion date is recorded. Records associated with an active customer and records needing review are held. Automatic cleanup is currently paused, so we cannot promise removal within 30 days. Contact us to request deletion.
Abandoned signup — unsigned setup data is removed after a short recovery window.
Signed authorization, consent and payment records — retained while your account is active and afterward as needed to evidence consent, resolve disputes, meet tax and consumer-protection requirements, or satisfy a legal hold.
Broker correspondence — retained while a request is open and for a reasonable period afterward.

Cancellation, revocation or a deletion request does not automatically erase records we may or must retain for those purposes. We do not promise that every record is erased when a subscription ends. Backup copies expire under our backup cycle.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, to opt out of sale or sharing, and to limit the use of sensitive personal information. You may also have the right to use an authorized agent.

To exercise any of these, email [email protected]. We will verify your identity before acting. Some records may be exempt from deletion where the law requires us to keep them.

You can revoke our authorization at any time through the account revocation control or by email. Revocation stops new requests; it does not recall requests already delivered.

Security

Identity fields, signed documents and signature evidence are encrypted at rest. Access is limited to what operating the service requires. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the information.

Children

The service is for adults 18 and older. We do not knowingly collect information from children.

Changes

If we make a material change to this policy, we will post it here and, where required, notify you. The date at the top shows when it last changed.

Contact

Kelly Green Holdings LLC, operating DataShield
[email protected]
datashieldnow.com

← Back to DataShield