Privacy Policy
Last Updated: 3/18/2026
1. Introduction
loravae ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our copyright protection services and platform.
By using our services, you agree to the collection and use of information in accordance with this policy.
2. Data Protection Officer
Our Data Protection Officer (DPO) is responsible for overseeing our data protection strategy and ensuring compliance with applicable privacy laws.
DPO Contact:
Aaron Davies
Email: dp@chxr.uk
3. Information We Collect
3.1 Information Collected Automatically
When you visit our platform, our systems automatically log certain technical information:
- Device & Connection Data: IP address, device type, browser type, operating system, and user agent strings.
- Login & Security Logs: Timestamps of successful/failed logins, and device identifiers used to access your account.
- Activity Analytics: Pages visited, features accessed, and general interaction with our dashboard to improve the user experience.
3.2 Information Inputted Directly by Clients
This is the information you actively provide to us when using Loravae or filling out our forms:
- Account Details: Name, email address, phone number, and password.
- KYC Verification Data: Title, full legal name, government-issued IDs (passport, national ID, etc.), and biometric facial scans (handled securely).
- Copyright & Case Data: URLs of protected content, evidence files, descriptions of infringing content, and responses submitted on our Information Intake forms.
- Communications: Support tickets, live chat conversations (via Intercom), emails sent to our team, and case comments.
- Payment & Purchase Data: Product serial numbers, subscription levels, and payment verification methods (processed securely via PayPal/Sellauth).
3.3 Information Manually Inputted by Staff
During the lifecycle of your account or case, our internal administrative and legal teams may add data to your profile:
- Case Investigation Notes: Private administrative logs, details of copyright infringement investigations, and risk assessments.
- Platform Communication: Documentation of correspondence between our team and hosting providers, domain registrars, or infringing parties on your behalf.
- Account Status Updates: Flags regarding verification status, subscription amendments, or records of legal compliance reviews.
4. How We Use Your Information
We use your information for the following purposes:
4.1 Service Provision
- Providing copyright protection services
- Processing takedown requests
- Managing your account and subscription
- Facilitating communication between clients and administrators
4.2 Security and Authentication
- Verifying your identity, age compliance (13+), and preventing unauthorized access
- Monitoring login activity for security purposes
- Detecting and preventing fraudulent activity
- Maintaining platform security and integrity
4.3 Communication
- Sending service-related notifications
- Providing customer support
- Updating you on case progress
- Sending important account information
4.4 Legal Compliance
- Complying with legal obligations
- Responding to legal requests
- Protecting our rights and interests
- Enforcing our terms of service
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
5.1 Service Providers
- Third-party service providers who assist in our operations
- Payment processors for subscription management
- Cloud storage and hosting providers
- Communication and support platforms
5.2 Legal Requirements
- When required by law or legal process
- To protect our rights, property, or safety
- To protect the rights, property, or safety of our users
- In connection with legal proceedings
5.3 Copyright Enforcement
- Sharing necessary information with platforms for takedown requests
- Providing evidence to support copyright claims
- Communicating with alleged infringers when required
6. Data Storage and Security
6.1 Data Storage
- Data is stored on secure cloud infrastructure
- We use MongoDB for database storage with encryption
- Files and content are stored using secure cloud storage services
- Backups are maintained for data recovery purposes
6.2 Security Measures
- Passwords are encrypted using industry-standard hashing
- Secure HTTPS connections for all data transmission
- Regular security monitoring and updates
- Access controls and authentication requirements
- Login history tracking for security purposes
7. Data Retention
We retain your information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
Specific retention periods:
- Account Data: Retained while account is active plus 7 years after closure
- Login History: Last 10 login sessions per account
- Takedown Records: Retained for 7 years for legal compliance
- Communication Records: Retained for 3 years
- KYC Verification Documents: Retained until verification is adequate and then deleted
- Payment Records: Retained for 7 years for tax and legal purposes
8. Your Rights
Depending on your location, you may have the following rights:
8.1 Access and Portability
- Right to access your personal information
- Right to receive a copy of your data in a portable format
- Right to know what information we have about you
8.2 Correction and Updates
- Right to correct inaccurate information
- Right to update your personal details
- Right to complete incomplete information
8.3 Deletion and Restriction
- Right to request deletion of your data (subject to legal requirements)
- Right to restrict processing of your information
- Right to object to certain types of processing
To exercise these rights, please contact our DPO at liam@loravae.org.uk.
9. Cookies and Tracking
We use cookies and similar technologies for:
- Authentication: Maintaining your login session
- Security: Protecting against unauthorized access
- Functionality: Remembering your preferences
- Analytics: Understanding platform usage (anonymized)
Essential cookies are necessary for the platform to function. You can control non-essential cookies through your browser settings.
10. Third-Party Services
Our platform integrates with third-party services:
- Intercom: Customer support chat widget
- Payment Processors: Sellauth & PayPal for subscription payments
- Cloud Storage: Cloudflare R2 for file storage
- Database Services: MongoDB for data storage
These services have their own privacy policies, and we encourage you to review them.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
12. Children's Privacy
Our services are not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our platform and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
14. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact:
Data Protection Officer:
Aaron Davies
Email: dp@chxr.uk
General Inquiries:
loravae
Email: hello@loravae.org.uk
15. Complaints
If you believe we have not handled your personal information in accordance with this policy, you have the right to file a complaint with your local data protection authority.