Datenschutzrichtlinie

2. Information We Collect

A. Personal Data You Provide to Us

We collect information you voluntarily provide when you register for an account or contact support:

• Account Data: Email address and encrypted password.
• Billing Data: Transaction history, invoices, and payment confirmation details. Note: We do not store full credit card numbers. All payment processing is handled by third-party PCI-DSS compliant payment processors (e.g., Stripe, Coinbase Commerce).
• Communication Data: Records of your correspondence with our support team.

B. Information Automatically Collected

When you access our Services, our servers automatically collect certain technical data:

• Log Data: IP address, browser type, operating system, and timestamp of access.
• API Usage Data: API keys used, endpoints accessed, request frequency, and error rates.
• Captcha Data: The images or tokens you submit to our API for solving. We process this data strictly to provide the result and do not retain solved captcha images longer than necessary for debugging and machine learning improvements (typically 24-48 hours).

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contractual Necessity: To provide the captcha solving services you purchased, manage your subscription (threads), and process payments.
• Legitimate Interests: To prevent fraud (e.g., detecting multi-account abuse), ensure network security, improve our solving algorithms, and defend against legal claims.
• Legal Obligation: To comply with tax laws (VAT invoicing) and law enforcement requests.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Services.
• Process your transactions and manage your "pay-per-thread" subscription.
• Detect and prevent fraudulent or abusive use (e.g., DDoS attacks, botting in violation of our ToS).
• Improve our API performance and solving accuracy.
• Communicate with you regarding account updates, security alerts, and administrative messages.

5. Sharing Your Information

We do not sell your personal data.

We may share information with:

• Service Providers: Third-party vendors who perform services for us, such as payment processing, hosting (e.g., AWS, Cloudflare), and customer support tools. These vendors are bound by Data Processing Agreements (DPA).
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy.

• Account Information: Retained as long as your account is active.
• Transaction Data: Retained for 7 years to comply with tax and accounting laws.
• API Logs: Retained for a limited period (e.g., 30 days) for security auditing and then deleted or anonymized.

7. International Data Transfers

Your information, including Personal Data, may be transferred to-and maintained on-computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction.

If you are located in the European Economic Area (EEA), we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses) for any data transfer outside the EEA.

8. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights:

• The Right to Access: You have the right to request copies of your personal data.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate.
• The Right to Erasure ("Right to be Forgotten"): You have the right to request that we erase your personal data, under certain conditions.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you.

To exercise any of these rights, please contact us at [email protected].

9. Cookies and Tracking

We use cookies strictly for essential functions:

• Session Cookies: To keep you logged in to your dashboard.
• Security Cookies: To prevent Cross-Site Request Forgery (CSRF).

We do not use third-party advertising cookies. You can instruct your browser to refuse all cookies, but you may not be able to use some portions of our Service.

10. Security of Your Data

We use administrative, technical, and physical security measures to help protect your personal information, including SSL/TLS encryption for all API traffic and salt-hashing for passwords. However, no electronic transmission over the Internet is 100% secure, so we cannot guarantee absolute security.

11. Children's Privacy

Our Services are not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.