Data controller
SL SOLUTIONS
Société par actions simplifiée (SAS, French simplified joint-stock company) with a share capital of €1,000, RCS Paris 994 949 428
Registered office: 58 rue de Monceau, CS 48756, 75008 Paris, France
Email: [email protected], phone: +33 7 56 96 85 78
SL SOLUTIONS is not required to appoint a data protection officer. Any question about your data can be sent to [email protected].
This policy explains which personal data we process when you visit https://suppressleak.com or use the SuppressLeak service, why we process it, who we share it with, how long we keep it, and how to exercise your rights. It applies in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. The data we process
Data you give us
- Account: your email address and, if you provide them, your name, the name of your agency, your phone or WhatsApp number, your Telegram handle, your language and your communication preferences. We do not ask for a password: you log in with a one-time code sent by email.
- Profiles to protect: the names and usernames you publish under, the links to your official profiles, and the reference images you send us. When you declare an official profile, we automatically retrieve its public profile picture and banner, in order to recognize your content.
- Identity document and signature: only if you use fake account reporting, because some platforms require proof of identity to process an impersonation. You can delete these documents at any time from your dashboard.
- Requests and conversations: the addresses you report to us, your messages to support, your feedback, and the reason you give if you cancel.
Data generated by using the service
- Scan results: the addresses of the pages and files detected, the matching thumbnails, the removal requests sent and their status.
- Subscription and billing: the plan you subscribed to, its status, your invoices, and the customer and subscription identifiers held by our payment provider. The billing address and the VAT number are entered on Stripe's payment page. We neither receive nor store your full card number.
- Emails: the history of the emails we send you, with their content and the delivery and open information reported by our email provider.
Data collected automatically
- Technical data: IP address, browser and device type, and the approximate location derived from the IP address (city, region, country, internet provider) at signup.
- Browser fingerprint: a technical identifier computed from the characteristics of your browser, used only to prevent fraud and the circumvention of account bans.
- Origin of your visit: the landing page, the external website you came from and the campaign parameters present in the address (utm parameters and ad click identifiers). This information is attached to your account at signup.
- Browsing and audience: pages viewed, clicks, scrolling and the course of your visit, through the tools described in our cookie policy.
- Logs: the log of actions performed on your account, technical logs and error logs.
Data about third parties
To detect and report content distributed without authorization, we process information that is publicly accessible on the pages concerned: their address, their content, the usernames shown on them, and the contact details websites publish to receive reports. This processing is based on our legitimate interest and that of our customers in enforcing their rights. The people concerned can exercise their rights at the address given above.
2. Why we process this data, and on what basis
Data marked as optional really is optional. Only the email address is required to create an account, and the names and links of your profiles are required to perform the service.
No decision producing legal effects concerning you is taken by fully automated means. Automatically generated alerts (for example about a username that is too generic) are reviewed by a person.
3. Who we share your data with
Our providers
We use providers that process data on our behalf, within the limits of what their task requires.
If you choose to write to us on WhatsApp, your conversations are also processed by WhatsApp under its own terms.
Recipients of removal requests
To perform the service, we send removal requests to hosting providers, website operators, platforms and search engines (in particular Google and Microsoft Bing). These requests contain the name you publish under, the addresses of your official profiles, the addresses of the content to be removed, and our identity as your agent. They do not contain your civil identity, except where a platform requires an identity document to process an impersonation and you gave it to us for that purpose.
Recipients may forward a request to the author of the targeted publication, or publish it in public transparency registers such as the Lumen database or Google's Transparency Report. Such publication is their decision alone.
Other cases
We do not sell your data. We may disclose it to our advisers (lawyers, accountants), or to an administrative or judicial authority where the law requires it.
4. Transfers outside the European Union
Our servers are located in Germany. Some of the providers listed above are established outside the European Union, mainly in the United States. Where the recipient is certified under the EU/US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision. Otherwise, it is governed by the standard contractual clauses adopted by the European Commission. You can ask us for a copy of the applicable safeguards.
Removal requests are by nature sent to wherever the recipient is located, including outside the European Union: this transfer is necessary for the performance of the contract concluded with you.
5. How long we keep your data
You can ask for your account and your data to be deleted at any time. We then keep only what the law requires us to keep (accounting records) or what is necessary to defend our legal rights.
6. Your rights
You have the following rights over your data:
- Access: obtaining a copy of the data we hold about you;
- Rectification: having inaccurate or incomplete data corrected;
- Erasure: having your data deleted;
- Restriction: having a processing operation suspended;
- Portability: receiving your data in a structured, machine-readable format;
- Objection: objecting to processing based on our legitimate interest, and at any time to marketing;
- Withdrawal of consent, where processing is based on it;
- Instructions after death: deciding what happens to your data after your death.
To exercise them, write to [email protected]. We reply within one month. If we have reasonable doubts about your identity, we may ask you to prove it. You can also edit your information, manage your email preferences and delete your documents directly from your dashboard.
If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, https://www.cnil.fr, or with the data protection authority of your country of residence.
7. Security
We protect your data with appropriate measures: encryption of communications (TLS), hosting in the European Union, passwordless login, internal access limited by role, logging of our team's actions, and backups. Identity documents are only accessible to the members of our team in charge of processing reports.
In the event of a data breach likely to create a risk for your rights, we notify the CNIL and, where the law requires it, the people concerned.
8. Minors
The service is reserved for adults. We do not knowingly collect data about minors. If you believe a minor has given us data, write to us so that we can delete it.
9. Changes to this policy
We may update this policy to reflect changes in the service or in the law. The date of the last update appears at the top of the page. In the event of a material change, we inform you by email or by a notice on the website.
10. Contact us
SL SOLUTIONS
58 rue de Monceau, CS 48756
75008 Paris, France
Email: [email protected]
Phone: +33 7 56 96 85 78