Privacy Policy

1. Who we are

Protect My Catalog operates the website at protectmycatalog.com and the associated enforcement platform. For privacy questions or to exercise your rights, contact us at privacy@protectmycatalog.com.

2. Information we collect

• Account & contact data — name, work email, company, and role, provided when an administrator provisions an account or when you submit an intake form.
• Enforcement data you load — titles, catalog metadata, and infringement references you or your organization add to the platform.
• Evidence we capture on your behalf — public web pages (HTML, screenshots), host/registrar contact lookups, and outcomes, attached to a finding.
• Usage & device data — IP address, browser type, pages viewed, and timestamps, collected through standard server logs and essential cookies.

3. How we use it

• To provide the service: detection, evidence review, human-approved reporting, and delisting workflows.
• To authenticate users and scope access to an organization’s provisioned titles.
• To communicate about onboarding, support, security, and service changes.
• To maintain an audit trail and to meet legal, contractual, and security obligations.

We do not sell personal data, and we do not use customer enforcement data to train third-party models.

4. Legal bases

Where the GDPR or similar laws apply, we process personal data on the bases of contract performance (operating the service for your organization), legitimate interests (security, anti-abuse, and product improvement), consent (where required, e.g. non-essential cookies), and legal obligation.

5. Sharing & processors

We share data with service providers who help us run the platform — cloud hosting, evidence storage, email delivery, and scheduling — under contracts that limit their use of the data. We may disclose data where required by law or to protect rights, safety, and the integrity of the service. We do not share an organization’s enforcement data with other customers.

6. International transfers

Data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

7. Retention

We keep personal data for as long as your account is active and as needed to provide the service, maintain a defensible enforcement record, and comply with legal obligations. On request and subject to those obligations, we will delete or anonymize personal data.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Email privacy@protectmycatalog.com and we will respond within the time required by applicable law. Account data managed by your organization’s administrator may need to be routed through them.

9. Security

We use industry-standard safeguards including encrypted transport, scoped access controls, hashed credentials, and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify affected parties of material breaches as required by law.

10. Cookies

We use essential cookies for authentication and security. Any non-essential analytics are loaded only where permitted and can be controlled through your browser or our cookie controls.

11. Changes

We may update this policy; we will revise the “last updated” date and, for material changes, provide additional notice. Continued use of the service after an update constitutes acceptance of the revised policy.