Privacy Policy

1. Scope and company

Your Resource Group LLC is the company responsible for IdentityPro’s privacy practices. This Policy applies to identitypro.com, the IdentityPro account application, signup by an approved affiliate, and related communications and support. It does not govern a third party’s independent website or service, even when we link to it.

Some consumer-report information is regulated by the Fair Credit Reporting Act and may be exempt from portions of state privacy laws. Insurance information may also be governed by a separate privacy notice from the insurer. We honor rights that apply to the particular information and request.

2. Information we collect

Identity information such as your Social Security number, account credentials, and payment information is sensitive personal information. We collect it only where reasonably necessary for the purposes above. IdentityPro stores the identity profile you submit in application-encrypted form. Your verification provider may generate questions and possible answers; we transmit your selections for verification but do not retain the question text or selections.

Hosted card fields send your full card number and card security code directly to the payment processor. IdentityPro receives an opaque token and limited transaction details, not the full card number or security code.

When you enroll, checkout suggests the name and address from the identity profile you submitted or confirmed, and you can change them before you pay. When you update the card for your subscription, you enter a billing address. IdentityPro sends the billing address you confirm with the card token to the payment processor and its gateway, which store it with your card in their customer vault and transaction records, and we keep it with your payment method and payment records to process, renew, and reconcile charges. An address you confirm with a replacement card is used for renewals only after the processor approves that card.

3. Sources of information

We collect personal information from:

• you, when you visit, create an account, pay, complete onboarding, communicate with us, or exercise a right;
• an approved affiliate, when you authorize phone-assisted signup and access;
• Credit-data providers and consumer reporting agencies, including Equifax, Experian, and TransUnion, after you authorize access;
• data brokers and public sources, through the privacy scan you request;
• payment and communications providers, such as our payment processor and Resend; and
• your browser, device, and network, automatically when you use the sites and Services, including through Google Analytics while analytics is enabled.

4. How we use information

We use personal information to:

• create, authenticate, maintain, and support your account;
• verify your identity and prevent unauthorized credit-file access;
• enroll you in and deliver the benefits you request;
• obtain and display credit information under your written instructions;
• run and reconcile privacy scans and show normalized results;
• process the paid trial, renewals, cancellation, and payment support;
• send authentication, transactional, security, and legal messages;
• send one account setup reminder if you create an account but do not start the paid trial (see Your choices and privacy rights);
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, and technical failures;
• audit administrator and approved-affiliate access;
• measure aggregate visits and navigation and improve site content and usability;
• enforce our Terms, protect rights and safety, and resolve disputes; and
• comply with law, legal process, and regulatory obligations.

We do not use your Social Security number, credit report, privacy-scan results, or other sensitive personal information to build advertising profiles or infer characteristics for marketing. Where state law requires consent to process sensitive data, the onboarding disclosure and affirmative action provide that separate consent. You may withdraw consent, but doing so may require us to stop Services that cannot work without the information.

5. How we disclose information

We disclose personal information only as described here:

• Identity, credit, and privacy providers. We send necessary identity information and verification selections to our identity, credit-data, privacy-scan, and verification providers and exchange information with consumer reporting agencies to provide Services you authorize.
• Payment processor. Our payment processor and its NMI-compatible gateway collect card data and the billing address you confirm, store them in their customer vault and transaction records, and process trial and recurring charges.
• Infrastructure and operations providers. Cloudflare, hosting, database, email, security, audit, support, insurance, and restoration providers process information on our behalf as needed for their services.
• Analytics provider. Google LLC processes limited website and application usage information through Google Analytics. We disable Google Signals and advertising personalization, do not link Google Analytics to advertising products, and do not send account IDs, query strings, URL fragments, or sign-in links.
• Approved affiliates you authorize. If you choose affiliate-assisted signup, the named affiliate may access the workflow status and normalized credit reports within the permissions and time period covered by your separate authorization. Access is audited and may be revoked.
• Professional advisers. Lawyers, accountants, auditors, insurers, and similar advisers may receive information where reasonably necessary for their work and subject to duties of confidentiality.
• Legal and safety recipients. We may disclose information when reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or misuse, or establish, exercise, or defend legal claims.
• Business transfers. Information may be reviewed or transferred in a financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of the business. We will require the recipient to honor this Policy where applicable.

We may also disclose information at your direction or with your consent. We may use and disclose aggregated or deidentified data that cannot reasonably be linked to you, and we do not attempt to reidentify data maintained as deidentified.

6. No sale, targeted advertising, or profiling

IdentityPro does not sell personal information for money or other valuable consideration and does not share personal information for cross-context behavioral advertising. We have not done so in the 12 months preceding this Policy’s effective date. We do not use personal information for targeted advertising or profile you to make decisions that produce legal or similarly significant effects. We also do not knowingly sell or share the personal information of anyone under 18.

Because we do not engage in these activities, there is no sale, targeted-advertising, or qualifying profiling activity to opt out of today. If that changes, we will update this Policy and provide the required opt-out method before the new practice begins. We will honor legally recognized universal opt-out signals, such as Global Privacy Control, where applicable.

7. Cookies and device storage

The account application uses secure, host-only cookies for authentication and request protection. The session cookie is not available to page scripts. Your browser’s local storage holds your light, dark, or system theme preference and, after sign-in, a non-secret user ID and session-expiration marker so the interface can keep tabs in sync. The authentication secret remains in the secure cookie.

We use Google Analytics on the IdentityPro landing site and account application to understand aggregate visits and navigation. When you have not saved a choice, analytics is on by default unless your browser sends a Global Privacy Control signal. Google Analytics uses first-party cookies named _ga and _ga_<container-id> for client and session measurement; we configure them to expire after no more than one year. The identitypro_analytics_consent first-party cookie keeps your analytics choice for one year across identitypro.com and the account application. It contains only a versioned “on” or “off” value.

Use the Analytics choices control on either site to turn analytics off or back on. Turning it off stops future Google Analytics collection and asks the browser to delete readable Google Analytics cookies. Global Privacy Control makes that initial setting off. Your saved choice then applies until you change it through the control, and you may still turn analytics on. We do not use analytics for advertising or to track your activity across unrelated sites. Other “Do Not Track” signals are not standardized, so they do not change this behavior.

Blocking essential cookies may prevent account sign-in or protected requests. Blocking local storage may prevent theme and tab-sync preferences from persisting but does not stop basic browsing.

8. Retention

The table above states the criteria for each category. In general, we retain information only for as long as reasonably necessary to provide the Services, maintain security and continuity, honor your choices, comply with law and contracts, and establish or defend legal claims. Retention depends on the type and sensitivity of the information, the reason we collected it, the account and provider lifecycle, fraud and security risk, and legal, accounting, insurance, chargeback, audit, and dispute obligations.

Cancellation does not itself delete your account. Some records—such as subscription authorizations, transaction history, consent history, and security audits—may be retained after account information is deleted because they are needed to prove authorization, prevent fraud, resolve disputes, or meet legal obligations. When information is no longer needed, we take reasonable steps to delete or deidentify it. Backups may retain residual copies until they are overwritten under the backup lifecycle.

We retain email addresses and records of account setup reminders submitted for delivery to track past submissions and prevent repeat reminders, including when delivery is uncertain. These records remain after an email address change or account deletion, even if you never asked to stop reminders. We also retain addresses associated with requests to stop reminders. These records have no scheduled expiration; we keep them to enforce the one-reminder limit and honor requests to stop reminders.

The payment processor and its gateway keep their own copies of your card details and billing address. IdentityPro handles requests to delete or correct those copies with the processor on your behalf; submit them as described below.

9. Your choices and privacy rights

Depending on where you live and the law that applies, you may have the right to confirm whether we process your information; access and receive a portable copy; correct inaccuracies; delete information; limit or withdraw consent for sensitive-data processing; and opt out of sale, targeted advertising, or qualifying profiling. You may also have the right to appeal our decision and to receive equal service without retaliation for exercising a right.

Submit a request by emailing support@identitypro.com with the subject “IdentityPro privacy request,” or write to the address below. State the right you want to exercise and the email linked to your account. Do not send your Social Security number, password, authentication code, or full card details. We may ask you to verify account access or provide information reasonably necessary to verify the request. If we cannot fulfill all or part of a request, we will explain why when the law requires.

An authorized agent may submit a request where permitted by law. We may require proof of the agent’s authority and may ask you to verify your identity directly. To appeal a decision, reply to our response with “Privacy appeal” and explain why you believe the decision should change. We will respond within the time required by applicable law.

Account setup reminders: if you create an account but do not start the paid trial, we may send one email about finishing setup. To stop account reminders, select “Unsubscribe from account reminders” in that email and confirm on the page it opens, or use your email app’s unsubscribe option if it shows one. You don’t need to sign in, and the request takes effect as soon as we record it. Reminders sent before we added that link don’t include it. You can also reply to that email or write to support@identitypro.com; we honor those requests within ten business days. Stopping reminders does not stop authentication, transactional, security, or legal messages.

You can cancel recurring charges as described in the Terms of Service. To correct consumer report information, contact the bureau or company that furnished it; a privacy correction request cannot change another company’s credit file. Withdrawing the identity and credit authorization may require us to end the affected monitoring Services.

10. Security

We use administrative, technical, and physical safeguards designed for the sensitivity of the information, including encryption in transit, application-level encryption for the stored identity profile, access controls, secure session cookies, rate limiting, audit trails, provider tokenization for card data, and restricted administrative and affiliate access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

If you believe your account or information may be at risk, contact support@identitypro.com without including sensitive identity or card details in the email.

11. Children

IdentityPro is for adults age 18 and older. We do not knowingly collect personal information from children under 13 or knowingly permit anyone under 18 to enroll. If you believe a child provided information to us, contact us so we can investigate and take appropriate action.

12. U.S. service and processing

IdentityPro is offered to eligible consumers in the United States. We and our providers may process information in the United States and other locations where they operate. Those locations may have different privacy laws. We use contractual and other safeguards where required for a transfer.

13. Changes to this Policy

We may update this Policy as our Services, providers, and legal duties change. We will post the updated Policy with a new effective date. If a change materially affects how we use information already collected, we will provide additional notice or request consent when required by law. We do not apply a materially different new purpose retroactively without the notice or consent the law requires.

14. Contact us

For privacy questions, requests, or appeals, email support@identitypro.com. Never email your Social Security number, password, authentication code, or full payment-card details.