What we use, what we send, and when we delete it.

Who operates the service

Protect Indiana operates protectindiana.org and the phone number 1-888-985-6187. Postal mail may be sent to Protect Indiana, PO Box 125, Wilkinson, IN 46186. Privacy and deletion requests go to contact@protectindiana.org.

The website

We do not run ads or use tracking tools that follow you around the internet. Our server keeps basic security logs for up to 30 days. These may include the time, page, internet address, and browser type. We keep a small part longer only when we are looking into a specific attack on the site.

Free breach and scam guidance

If you use an email-exposure checker, our server may send the email address you enter to the public breach or stolen-password indexes named by that tool. A clean result covers only those sources at that moment. We never retrieve or save an actual password.

The chat on our website and in our iPhone and iPad app is AI, not a person, and the app's scam-message checker uses the same AI. What you type or dictate is sent to our server and then to Anthropic's Claude service, our AI provider, along with Protect Indiana help material, to create your answer. Anthropic processes it as our service provider and, under its commercial API terms, does not use it to train its AI models. The app asks for your agreement to this before its first use. Do not enter passwords, one-time codes, account numbers, card details, Social Security numbers, or medical information. If you ask for email help, your chat and email address are sent to a member of our team. Replies are not instant.

The phone line is also an AI system, provided through Retell AI. It should identify itself as AI at the beginning of a call. Retell processes the call in real time. The agent is configured not to retain recordings or transcripts; basic call metadata is automatically deleted after 30 days. The phone line is not 911, a bank, law enforcement, a lawyer, or an emergency service.

Indiana Breach Watch

If you sign up for breach-register alerts, we keep your email address, a hash of it, the page you signed up on, a shortened hash of your IP address, and the dates we sent a confirmation, you confirmed, and you stopped. We send one confirmation email first and nothing else until you click the link in it. Every alert carries a one-click stop link. A stopped address stays on file marked stopped so it is not added again by mistake; write to contact@protectindiana.org to have it deleted entirely. Alert content is drawn only from the Indiana Attorney General’s public breach register and never includes anyone’s personal data.

Free screenshot, letter, family, quiz, and website tools

The screenshot checker reads the picture on your device. Protect Indiana does not receive the picture. The page replaces likely email addresses, phone numbers, long numbers, codes, ZIP codes, and links in the words it reads. You see those words and can change them before asking for an answer. The redacted words you submit are sent to Anthropic's Claude service for the scam answer.

If you leave “help warn other Hoosiers” checked and the answer is a likely scam, Protect Indiana keeps only the redacted wording. Similar reports are grouped. A public warning page is created only after the same useful pattern is separately reported several times. To avoid counting one visitor over and over, the server turns the internet address already used for the request into a short scrambled code that changes each month. The raw address is not stored with these community reports, and the old counting codes are deleted after about two months. Public pages never show a visitor's picture or the details our redaction removed.

The breach-letter reader keeps the photo or PDF on your device. The browser reads the file and makes the plain-language checklist there. The file and its text are not sent to Protect Indiana. The reader can point out common notice wording and matching safety steps, but it cannot prove a letter is genuine.

The Protect-a-Parent builder keeps the trusted person's name, phone number, and family phrase in the open page only. They are used on your device to make the help-text link, printable plan, and lock-screen picture. They are not sent to Protect Indiana and disappear when the page is closed or refreshed. The lock-screen picture does not include the secret phrase.

The Scam IQ challenge does not save answers tied to a person. The free partner widget sends only the message a visitor chooses to check to the same AI scam checker. A partner website does not receive that message. Protect Indiana keeps anonymous daily totals such as a tool being opened, completed, shared, or followed to a plan. Those totals contain no name, email, document text, family detail, cookie, internet address, or browser value.

Kelsie’s personal-search services

The Basic Exposure Search uses the name, email, full phone number when supplied, and Indiana locality that the customer expressly authorizes us to research. The optional Discretion Search requires separate authorization and can cover sensitive privacy concerns described on Kelsie’s checkout page. A result can be wrong or belong to someone with the same name, so findings carry evidence IDs, safe source titles, confidence, and affected-identifier labels.

The operational customer record may retain the customer’s name, email, full phone when supplied, Indiana locality, authorization version, chosen scope, evidence IDs, safe source titles, case status, and ordinary payment and email-delivery records. Raw or transient search material does not become part of that customer record. Restricted source URLs are kept separately for reproducibility and response work and are not placed in customer-facing reports.

We do not buy stolen data, download raw breach dumps, retrieve or test passwords, access accounts, or retain passwords, card numbers, Social Security numbers, authentication secrets, raw breach rows, intimate images, or unrelated people’s data. A report describes a supported reference; it does not redistribute exposed material.

Removal guides are self-service. Protect Indiana does not submit people-search removal requests on a customer’s behalf. Supported follow-on work, if offered after a case file, is separately discussed and scoped.

We never ask for or store your passwords, one-time codes, credit-freeze PINs, bank credentials, or remote-access credentials. Password changes, two-step sign-in, credit freezes, broker confirmation emails, and device cleanup remain actions only you should perform.

Permission and age

Every customer must be at least 18 and authorize research into their own information. We reject requests to investigate an unrelated person and do not accept identity data or personal-search work for children.

Monitoring

A $39 or $99 one-time search is a bounded research service, not continuing monitoring. Customers with a completed case file may separately choose $99/month Proactive Protection. Its scope is described before checkout and can be canceled through the billing process.

Payments and email

Card information goes directly to Stripe. Protect Indiana receives payment status, amount, transaction reference, and contact details tied to the purchase; it does not see or store the full card number. Transaction and invoice records may remain with Stripe as required for accounting, disputes, and tax records.

Paid-case receipts, acknowledgements, case files, and requested follow-up are sent by email. We keep delivery-attempt records so a missing or filtered report can be traced and resent safely. We do not sell contact information or add customers to an unrelated marketing list.

How long we keep local records

• Free tools: on-device material described above disappears when the page is closed or refreshed. Server security logs follow the website retention described above.
• Paid cases: minimized authorization, case, report, payment, and delivery records are kept securely for practical fulfillment, customer support, accounting, disputes, and reproducibility. Transient sweep material is not retained as a customer file.
• Payments: Stripe keeps its transaction record; a minimized payment/accounting record may remain with us where required.
• Deletion request: we remove records that are not required for an active service, security incident, accounting duty, dispute, or other legal obligation, and explain any narrow record we must retain.

Access, correction, deletion, and appeal

Email contact@protectindiana.org to ask if we have a record about you. You can ask for a copy, fix a result, delete your local record, or stop email checks. We may ask for enough information to make sure the private record is yours.

If we say no and you disagree, reply with “privacy appeal” in the subject and tell us why. We will look again and explain the final answer. Each adult family member controls their own record. Deleting the buyer's account does not delete another adult's record after that adult gave permission. Family links that were never accepted are removed.

Protect Indiana does not sell personal data, use it for targeted advertising, or profile people to make decisions about credit, employment, housing, insurance, or eligibility.

What this is not

A Protect Indiana plan is prepared for you, about you, at your request. It is not a consumer report, and Protect Indiana is not a consumer reporting agency. The service must not be used to decide credit, employment, housing, insurance, or another person's eligibility. We reject requests to investigate an unrelated third party.

Children

The service is directed to adults. Protect Indiana does not accept identity data or removal work for a minor. A child should not use the chat, phone line, or check.

Last updated August 29, 2026. Material changes will be reflected by a new date here.