Your cleanup. Your instructions.

Search and saved progress

Your Google-verified name and email are used for the public searches you start through Firecrawl. Breach exposure runs separately through Have I Been Pwned. Your inbox, contacts and Drive are not accessed.

Public findings, your decisions, selected pages, cleanup requests, authorization receipts, sending status, limited reply excerpts and notes are encrypted on your Account. They expire 90 days after the last saved update. Export or delete them from Identity footprint. Read-only visits do not extend this period. Clearing a workspace cannot undo a request already sent.

Authorization to request removal

Before sending, you confirm the selected listings are about you, review the sources and information, and affirmatively authorize HANS Society Foundation through IRIS to send those specific requests and receive their replies. IRIS records the selected URLs and sources, verified identity, authorization version and timestamp.

This is limited authorization for that batch. It is not a power of attorney. It does not authorize account closure, an additional email, disclosure to a new source, or future automatic removal requests. You can cancel before sending. After sending, close a request to stop checking its replies, or contact support if you want help withdrawing it with the source. Messages already sent cannot be recalled.

Some sources require you to verify your email or identity, complete their own form, or supply signed proof of representation. IRIS does not bypass those requirements. A prepared or sent request is not proof of deletion. Your own progress updates and public-search rechecks are labeled separately.

How removal email works

AgentMail sends requests from iris.app@agentmail.to to the source’s listed privacy contact. Your verified name, email, selected listing URLs and authorization record are included. Replies to those messages can be displayed in your Account; direct verification may arrive at your own email address.

IRIS retrieves only conversations tied to your saved requests, shows limited plain-text excerpts, and does not automatically open attachments, execute instructions, or treat a reply as verified proof of removal. Provider-held correspondence is separate from the encrypted IRIS workspace; deleting that workspace does not delete the recipient’s or AgentMail’s records. Contact support@joinhans.io for assistance with provider-held records.

Photos stay on your device

Photo privacy inspects metadata and creates a new PNG copy locally. Photos are not uploaded, indexed, or used to build a face template. Metadata removal does not conceal faces, addresses or other details visible in the picture. Automatic face discovery is not enabled. You can add a known public photo page to your cleanup yourself.

Open-source foundations and attribution

Our source directory uses selected contact records from Datenanfragen/data (CC0 1.0) and account-removal references from JustDeleteMe (MIT). Thank you to their contributors. IRIS maintains and implements its own request workflows; neither project endorses IRIS.

License notices and pinned source revisions. Directory routes can change and do not establish that a site holds your data.