SecureDataerase SecureDataerase

Privacy Notice

---

1. Introduction

At SecureDataerase, your privacy is our priority. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal data when you use our web application. We comply with global privacy regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), and we endeavor to respect other jurisdictions' data protection laws where applicable.

2. Data Controller and Processor Roles

SecureDataerase acts as a Data Controller with respect to personal data collected directly from you (e.g., account details, billing information). For personal data contained in documents you upload for processing, we act as a Data Processor, processing your data strictly under your instructions.

• Company Name: SecureDataerase
• Address: Kecskemét, 6000, Katona József utca 14, Hungary
• Email: securify@securedataerase.com
• Phone Number: +36 30 79 333 91

3. What Personal Data We Collect

We collect the following categories of personal data:

• Identity Data: Name, email address, tax ID, address, phone number.
• Account Information: Username, encrypted passwords, MFA settings, and security-related data.
• Transactional Data: Payment information for subscriptions (processed through Stripe), invoice details (via Billingo).
• Technical Data: IP addresses, session logs, and usage metadata.
• Usage Data: Feature usage, pages visited, links clicked, user preferences.
• Cookie Data: Information collected through strictly necessary cookies and tracking technologies.

4. How We Collect Your Data

We obtain your personal data through:

• Direct Interactions: When you register, subscribe, use our services, or contact support.
• Automated Technologies: Server logs and essential cookies.
• Third Parties: Payment processors (Stripe), invoicing services (Billingo), and infrastructure providers (e.g., AWS).

5. How We Use Your Personal Data

We use your personal data to:

• Account Setup and Management: Create and maintain your account.
• Security and Authentication: Implement MFA, password resets, and security features.
• Service Provision: Enable access to our redaction and compliance tools.
• Compliance Monitoring: Support GDPR, CCPA, and other compliance assessments.
• Technical Support and Improvement: Diagnose and address technical issues, enhance service efficiency.
• Legal and Regulatory Obligations: Meet financial, tax, and legal record-keeping obligations.
• Marketing Communications: Send you promotional materials if you have opted in. You may withdraw consent at any time by clicking the 'unsubscribe' link in emails, adjusting your account settings, or contacting us at securify@securedataerase.com.
• Aggregated Data: Analyze usage patterns to improve and develop our services. This data is anonymized and cannot identify you.

6. Legal Basis for Processing Personal Data

Our legal bases include:

• Contractual Necessity: To provide services as agreed with you.
• Legitimate Interests: To secure and improve our services while respecting your rights.
• Consent: For sending marketing communications, which you can withdraw anytime.
• Legal Obligation: To comply with laws (e.g., invoicing and retention requirements).

7. Data Retention

• Account Data: Retained as long as your account is active.
• Transactional Data: Invoices and related data retained for 8 years, as legally required.
• Technical Data: Stored for up to 24 months unless otherwise required.

8. Data Security

We apply industry-standard security measures:

• Encryption: Uploaded files are encrypted and deleted within 72 hours.
• MFA & Access Controls: Safeguarding sensitive accounts and data.
• Secure Data Centers: ISO 27001 certified facilities.
• Regular Audits: Periodic security assessments and penetration tests.
• Data Backups & Recovery: Regular backups and tested recovery procedures.

9. Sharing Your Data

We share your data only when necessary and with appropriate safeguards:

• Payment Processors: Stripe for handling payments.
• Invoicing Services: Billingo for invoice generation, fully compliant with EU regulations.
• Service Providers: For hosting, security, and related services.
• Legal Requirements: When obliged by law or in response to lawful requests from authorities.

10. International Data Transfers

If we transfer personal data outside the EEA, we rely on recognized transfer mechanisms such as the latest Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework (where applicable). We no longer rely on the invalidated EU-U.S. Privacy Shield. We ensure equivalent levels of data protection through appropriate safeguards.

11. Your Rights

Under GDPR and CCPA, you have the right to:

• Access: Receive a copy of your personal data.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal data when legally permissible.
• Restriction: Limit certain data processing activities.
• Data Portability: Transfer your data to another service provider.
• Object: Object to processing based on legitimate interests.
• No Sale of Personal Data: We do not sell personal data. California residents have the right to opt-out of any future 'sale' of personal information as defined by CCPA.

For California residents: You have the right to know about the personal information collected, request its deletion, and opt-out of its sale (we do not sell data). For users outside the EU and California, we respect applicable local laws and will endeavor to provide similar rights where possible.

To exercise any of these rights, contact us at securify@securedataerase.com or use the self-service tools in your account settings.

12. Cookies and Tracking Technologies

We use only strictly necessary cookies that are essential for the operation and security of our service. These do not require user consent as per the ePrivacy Directive. We provide this transparency to comply with GDPR principles and maintain your trust.

13. Third-Party Links

Our website may include links to third-party sites or services. Their privacy practices are not controlled by us. Please review their policies.

14. Children's Privacy

Our services are not intended for individuals under 16. We do not knowingly collect data from children under 16.

15. Data Breach Notification

We will notify you and, if required, regulatory authorities of any data breach within 72 hours of becoming aware, as mandated by GDPR.

16. Changes to This Privacy Notice

We may update this notice to reflect changes in our practices or legal obligations. Significant changes will be communicated at least 30 days before they take effect. The latest version is always available on our website.

17. Contact Us

For inquiries or exercising your rights:

• Email: securify@securedataerase.com
• Phone: +36 30 79 333 91
• Address: Kecskemét, 6000, Katona József utca 14, Hungary

18. Data Protection Officer

You can contact our Data Protection Officer (DPO) at securify@securedataerase.com.

19. Complaints

If you believe your rights have been violated, you can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

• Address: Szilágyi Erzsébet fasor 22/C, 1125 Budapest, Hungary
• Phone: +36 (1) 391-1400
• Email: ugyfelszolgalat@naih.hu

We also encourage you to contact us first to seek a resolution.

20. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling.

21. Lawful Requests

We may disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

22. Consent Withdrawal

If processing is based on consent, you may withdraw it at any time by contacting us or via your account settings. Withdrawing consent does not affect the legality of prior processing.