Privacy Protocol

Effective Date: June 2026

At MKG Labs Ltd ("Revoke", "we", "us"), privacy is our core operational mandate. We operate an automated data takedown infrastructure designed to protect public figures, creators, and executives. This Privacy Protocol outlines our strict minimal-extraction approach to the operational data required to execute privacy mandates on your behalf.

1. Data We Do NOT Sell or Share

Our business model is predicated entirely on defending your privacy, not monetizing it. Therefore:

  • We do not sell your personal information (PII) to data brokers, marketing agencies, or AI training datasets.
  • We do not share your information with any third party other than the specific data brokers we are legally forcing to delete your records.
  • We are fully compliant with the "Do Not Sell or Share My Personal Information" provisions of the CCPA/CPRA.

2. Operational Data We Collect

To execute takedown requests and monitor compliance, we strictly extract only what is structurally necessary:

  • Authorized User Information: Your legal name, past aliases, date of birth, current/past addresses, and associated phone numbers. This is required to locate and match your exact footprint within data broker registries.
  • Account Information: Your email address for delivering executive privacy reports and billing notices.
  • Payment Data: Handled entirely and securely by our authorized Merchant of Record (MoR) and payment gateways. We never store or process your credit card details on our servers.
  • Verification Documents (If Required): In rare instances where a data broker requires identity verification (e.g., a redacted ID) to process a takedown, this document is transmitted via end-to-end encrypted channels strictly to the broker. We do not store these documents on our permanent servers; they are irreversibly destroyed immediately upon task completion.

3. US Residents & State Privacy Rights (CCPA/CPRA)

If you are a resident of the United States (particularly California, Virginia, Colorado, Connecticut, or Utah), you have specific rights regarding your personal data. We grant you total control over your digital footprint:

  • Right to Know / Request a Copy: You may request a detailed export of the specific personal data we have collected to perform our services.
  • Right to Deletion: You may command us to permanently delete your account data from our internal systems (Note: doing so will terminate our ability to continuously protect you from data brokers).
  • Right to Non-Discrimination: We will never deny you service or alter pricing for exercising your privacy rights.

To execute any of these requests, contact Operations at operations@revoke.so. We resolve all verifiable data requests free of charge within thirty (30) days.

4. Data Storage & Erasure Policy

We retain your identity data only for as long as your Revoke protection retainer is active. Upon permanent cancellation of your service, your active privacy monitoring services are terminated. All associated personal identifiers used for scanning are securely deleted from our active servers within thirty (30) business days, rendering the data irreversibly destroyed.

5. Corporate & Legal Information

Revoke is operated by MKG Labs Ltd, a company registered in the United Kingdom.

Company No: 17179813
ICO Registration: ZC142979
Registered Office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: hello@revoke.so