Privacy Policy

What we collect

To run an account we store your email address, name and a hashed password. We never store your password in a readable form.

For each brand you protect we store the keywords and domains you enter, plus the detections we find and the evidence captured alongside them.

Why we hold it

• To find sites impersonating your brand
• To file abuse and takedown reports on your behalf
• To keep a defensible record of what was reported and when
• To bill for credits and keep your balance accurate

Evidence retention

Screenshots, WHOIS records and hosting data are retained with the detection they belong to. This record is what makes a report actionable, so we keep it for as long as the detection exists in your account.

Sharing

Report contents are sent to the abuse and legal contacts of the providers involved — this is inherent to filing a takedown. We do not sell personal data, and we do not share it for advertising.

Your choices

You can delete a brand, a detection or your whole account from the dashboard. Deleting an account removes your personal data; anonymised records of reports already filed may remain where we are required to keep them.

Contact

For any privacy question, or to request removal of your data, write to our contact address.