Privacy Policy

3.1 Information Collected Automatically

When you visit our platform, our systems automatically log certain technical information:

• Device & Connection Data: IP address, device type, browser type, operating system, and user agent strings.
• Login & Security Logs: Timestamps of successful/failed logins, and device identifiers used to access your account.
• Activity Analytics: Pages visited, features accessed, and general interaction with our dashboard to improve the user experience.

3.2 Information Inputted Directly by Clients

This is the information you actively provide to us when using Loravae or filling out our forms:

• Account Details: Name, email address, phone number, and password.
• KYC Verification Data: Title, full legal name, government-issued IDs (passport, national ID, etc.), and biometric facial scans (handled securely).
• Copyright & Case Data: URLs of protected content, evidence files, descriptions of infringing content, and responses submitted on our Information Intake forms.
• Communications: Support tickets, live chat conversations (via Zendesk), emails sent to our team, and case comments.
• Payment & Purchase Data: Product serial numbers, subscription plan levels, and payment verification records (processed securely via PayPal).

3.3 Information Manually Inputted by Staff

During the lifecycle of your account or case, our internal administrative and legal teams may add data to your profile:

• Case Investigation Notes: Private administrative logs, details of copyright infringement investigations, and risk assessments.
• Platform Communication: Documentation of correspondence between our team and hosting providers, domain registrars, or infringing parties on your behalf.
• Account Status Updates: Flags regarding verification status, subscription amendments, or records of legal compliance reviews.

4.1 Service Provision

• Providing copyright protection services
• Processing takedown requests
• Managing your account and subscription
• Facilitating communication between clients and administrators

4.2 Security and Authentication

• Verifying your identity, age compliance (13+), and preventing unauthorized access
• Monitoring login activity for security purposes
• Detecting and preventing fraudulent activity
• Maintaining platform security and integrity

4.3 Communication

• Sending service-related notifications
• Providing customer support
• Updating you on case progress
• Sending important account information

4.4 Legal Compliance

• Complying with legal obligations
• Responding to legal requests
• Protecting our rights and interests
• Enforcing our terms of service

5.1 Service Providers

• Third-party service providers who assist in our operations
• Payment processors for subscription management
• Cloud storage and hosting providers
• Communication and support platforms

5.2 Disclosure to Law Enforcement & Legal Authorities

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other government authorities when required to do so by applicable law, valid legal process (e.g. court order, subpoena, search warrant), or where we reasonably believe disclosure is necessary to protect rights, safety, or property. Data shared in these circumstances may include, but is not limited to:

• Case Information: Full case records including takedown submissions, case timelines, investigation notes, infringement reports, and correspondence with platforms or registrars.
• Client Contact Information: Full name, email address, phone number, and any registered business details associated with the account.
• Intake Form Submissions: Data collected via our Information Intake forms, including the submitter's name, email, IP address, declared ownership information, and any evidence or URL data provided in the submission.
• Login & Session Information: Authentication timestamps, session identifiers, IP addresses used during login, and device/browser metadata where available and collected.
• Support Tickets & Communications: Full support ticket threads, internal staff notes, and where applicable, records of phone conversations conducted through our platform.
• KYC Verification Records: Government-issued identity document data (e.g. passport, national ID), biometric verification results, and age verification outcomes provided during our KYC process.
• Payment Records: Transaction reference IDs, subscription status, and billing confirmation data processed through PayPal.
• Any other data we hold: We reserve the right to disclose any additional information we hold on a user or third party where legally compelled to do so or where necessary to prevent harm, fraud, or abuse of our platform.

We will, where legally permitted, notify affected users of such requests prior to disclosure.

5.3 Copyright Enforcement

• Sharing necessary information with platforms for takedown requests
• Providing evidence to support copyright claims
• Communicating with alleged infringers when required

6.1 Data Storage

• Data is stored on secure cloud infrastructure
• We use MongoDB for database storage with encryption
• Files and content are stored using secure cloud storage services
• Backups are maintained for data recovery purposes

6.2 Security Measures

• Passwords are encrypted using industry-standard hashing
• Secure HTTPS connections for all data transmission
• Regular security monitoring and updates
• Access controls and authentication requirements
• Login history tracking for security purposes

8.1 Access and Portability

• Right to access your personal information
• Right to receive a copy of your data in a portable format
• Right to know what information we have about you

8.2 Correction and Updates

• Right to correct inaccurate information
• Right to update your personal details
• Right to complete incomplete information

8.3 Deletion and Restriction

• Right to request deletion of your data (subject to legal requirements)
• Right to restrict processing of your information
• Right to object to certain types of processing