1.Who is responsible for your data
SiddiTek LLC (“Renameproof”, “we”) is the controller of the personal data described here. Contact us at support@renameproof.com or 41551 Bostonian Place, Aldie, VA 20105, USA.
If your company uses Renameproof under our Data Processing Addendum, we process the data in its account on its behalf, as its processor.
2.What we collect
When you create an account
Your email address, your password (we store only a one-way hash of it, never the password itself), and when you signed up.
When you check or look for a name
The names you check, the optional description of what your product is for, the descriptions you give the name finder, and the reports we generate. If you’re signed in, the reports you run and the names you save are linked to your account.
When you request a professional report
Your email address, the names you want checked, what they’re for any notes you add, and optionally what made you want it. We use them to prepare and deliver the report and to take payment, and we keep the request and its payment status as a business record, including after you delete an account.
When you join the Name Watch list
Your email address, the name you want watched and the plan you picked. We use them to send the alerts or launch emails you asked for, and delete them when you leave the list or delete your account.
Technical data
Like most websites, our hosting provider records standard request logs, such as IP address, browser type and the time of each request. We use them to keep the Service secure and working, and keep them only for a limited period.
Stored in your browser
Your theme choice, your recent checks, your launch checklist ticks and, if you aren’t signed in, your shortlist of names are stored in your own browser. They aren’t sent to us, except that when you sign in, your shortlist is moved into your account.
4.How we use it
- To run checks, generate reports and show them to you.
- To provide your account and keep your saved reports and names.
- To protect the Service, for example by limiting password guessing and blocking abuse.
- To understand overall use and improve the Service, using aggregated information wherever we can.
- To contact you about your account or important changes.
We don’t sell your personal data and we don’t use it for advertising.
5.Legal bases
Where the GDPR or UK GDPR applies, we rely on: contract, to provide the Service and your account; legitimate interests, to secure and improve the Service, which we balance against your rights; legal obligation, where the law requires us to keep or disclose data; and consent, where we ask for it, which you can withdraw at any time.
7.Reports are reachable by link
Every report has a long, random link. Anyone with that link can open the report, including the name checked and any description you gave. Only share report links with people you trust with that information.
8.International transfers
Our providers may process data outside your country. Where data leaves the UK or the European Economic Area, we use recognised safeguards such as the European Commission’s Standard Contractual Clauses and the UK addendum.
9.How long we keep it
- Account data and saved lists: until you delete your account.
- Sessions: 30 days, or until you sign out.
- Reports: kept so their links keep working. Ask us and we’ll delete specific reports.
- Request logs: a limited period for security, then deleted.
10.Your rights and choices
Depending on where you live, you can ask to access, correct, export or delete your data, and to object to or restrict some processing. Two of these you can do yourself on your account page:
- Download my data gives you everything stored in your account as a file.
- Delete account removes your account and everything saved to it.
For anything else, email support@renameproof.com. We’ll answer within one month. You can also complain to your data protection authority.
11.Security
Passwords are stored only as salted hashes. Sign-in uses a secure, HTTP-only cookie, connections are encrypted, and repeated failed sign-ins are slowed down. No system is perfectly secure, so use a password you don’t use anywhere else.
12.Children
Renameproof isn’t meant for anyone under 16, and we don’t knowingly collect their data. If you think a child has given us data, contact us and we’ll delete it.
13.Changes to this policy
We’ll update the date at the top when this policy changes, and tell signed-in users about significant changes before they take effect.