Privacy Policy

1. Who We Are

DMCA+ is operated by Ruby Dev SRL, a company registered in Romania ("we," "our," or "us"). This policy explains what personal data we collect through dmcaplus.com and the DMCA+ service, why we collect it, and the rights you have under the EU General Data Protection Regulation ("GDPR").

2. Our Role

• Our customers and website visitors: Ruby Dev SRL is the controller of the data we collect about our customers and about visitors to dmcaplus.com.
• People named in notices: When someone sends a notice to a customer's DMCA+ address or form, we process the notice on behalf of that customer, who decides how it is handled. If you sent a notice, or are named in one, the website owner you contacted is responsible for that data, and you can also contact us.

3. Information We Collect

3.1. Information Customers Provide

• Account information: name, email address, password (stored only as a secure hash), and business name and address.
• Website information: the domain names you register with DMCA+.
• Responses: replies, removal confirmations, and counter-notifications you send through DMCA+, and internal notes you add.

3.2. Information in Notices

• Emailed notices: the full email, including the sender's name and email address, any contact details and signature in the message, and its attachments.
• Notice form submissions: the details the sender enters: name, email address, postal address, phone number, the reported and original URLs, the copyright owner, a description, and the sender's sworn statement.
• Integration data: for websites connected through an integration, the username of the member who uploaded reported content and the content's source.

3.3. Information Collected Automatically

• Log data: our servers record technical details of requests, such as IP address, browser type, and the pages requested.
• Analytics: our public pages use a cookie-free analytics service that records the pages you visit, the page that referred you, time spent and scroll depth on each page, and the links you click. It does not set cookies or store an identifier on your device.
• Cookies: see section 9.

3.4. When You Contact Us

If you email us, we keep your name, email address, and the content of your message so we can respond.

4. Why We Use Your Information

• To provide the service (performance of our contract with customers): receiving notices, notifying customers, sending their responses, and keeping a record of each notice.
• To keep the service secure and working (our legitimate interests): monitoring errors and performance and preventing misuse.
• To understand how our website is used (our legitimate interests): measuring visits to our public pages.
• To communicate with you (performance of our contract, or our legitimate interests): account and service messages and replies to your inquiries.
• To comply with the law (legal obligation): for example, accounting records and responses to lawful requests.

5. Who We Share Information With

• Website owners: notices sent to a customer's DMCA+ address or form are made available to that customer.
• Notice senders: replies and counter-notifications a customer sends through DMCA+ go to the person who sent the notice, and may quote the original notice.
• Service providers: companies that help us run the service, including our hosting provider, SendGrid (email delivery and receipt), Cloudflare (file storage), our website analytics service, and our application monitoring provider. They may only use the data to provide their services to us.
• Legal requirements: we may disclose information when required by law or in response to a valid legal request.
• Business transfers: if Ruby Dev SRL is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

We do not sell personal data.

6. International Transfers

Some of our service providers are based in, or process data in, countries outside the European Economic Area, including the United States. Where that happens, the transfer is covered by the safeguards in their data processing terms, such as the European Commission's Standard Contractual Clauses.

7. How Long We Keep Information

• Original notice emails are deleted automatically three years after they are received.
• Notice records and responses are kept while the customer's account is active, and afterwards for as long as needed to meet legal obligations or to establish or defend legal claims.
• Account information is kept while the account is active and deleted or anonymized when no longer needed, unless the law requires us to keep it.
• Emails to us are kept for as long as needed to deal with your inquiry.

8. Security

Connections to DMCA+ are encrypted in transit, passwords are stored only as secure hashes, and access to customer data is limited to the people who operate the service. No system is completely secure, so we cannot guarantee the security of information sent to us.

9. Cookies

We use only essential cookies. They keep you signed in to DMCA+ and protect forms against forgery, and the service does not work without them. We do not use advertising or analytics cookies. You can block or delete cookies in your browser settings, but you will not be able to sign in.

10. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate or incomplete data corrected
• Have your data deleted
• Restrict how we process your data
• Receive your data in a portable format
• Object to processing based on our legitimate interests

To exercise these rights, contact us at [email protected]. If your request concerns a notice handled for one of our customers, we may pass it to that customer, since they decide how the notice is handled. Some data, such as records of notices, may need to be kept for legal reasons even if you ask us to delete it.

You also have the right to complain to a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

11. Children

DMCA+ is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this policy from time to time. Changes will appear on this page with a new effective date, and we will tell customers about significant changes by email.

13. Contact Us

If you have any questions about this policy, contact Ruby Dev SRL at [email protected].