Privacy Policy

Data Controller

SL SOLUTIONS SAS
SIRET: 99494942800019
Registered Office: CS 48756 58 RUE DE MONCEAU, 75008 PARIS, France
Email: [email protected]

Thank you for choosing SuppressLeak. We are committed to protecting your personal information and your right to privacy in accordance with the General Data Protection Regulation (GDPR) and French data protection law.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website at https://suppressleak.com and the content protection services we offer.

1. Information We Collect

Information You Provide

We collect personal information that you voluntarily provide when you:

Register an account: Name, email address, password
Subscribe to our services: Payment information (processed by our payment provider)
Use our services: Usernames to monitor, platform preferences, content you want protected
Contact us: Messages, support tickets, correspondence

Information Collected Automatically

When you visit our website, we automatically collect:

Device information: Browser type, operating system, device identifiers
Usage data: Pages visited, features used, time spent on site
Log data: IP address, access times, referring URLs
Cookies: See our Cookie Policy for details

2. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Contract performance: To provide you with our content protection services
Legitimate interests: To improve our services, ensure security, and prevent fraud
Legal obligations: To comply with applicable laws and regulations
Consent: For marketing communications (you can withdraw consent at any time)

3. How We Use Your Information

We use your personal information to:

Provide services: Content monitoring, DMCA takedown services, leak suppression
Manage your account: Create and maintain your account, process payments, manage subscriptions
Communicate with you: Send service updates, security alerts, and important notifications
Improve our services: Analyze usage patterns, develop new features, fix issues
Ensure security: Protect against fraud, unauthorized access, and abuse
Comply with law: Meet legal obligations, enforce our terms, respond to legal requests

4. Data Recipients

We may share your information with:

Payment processors: To process subscription payments securely (Stripe, Paddle)
Cloud providers: To host and store data securely (AWS, Google Cloud)
Analytics services: To understand website usage (in anonymized form)
Legal services: To assist with DMCA takedowns and legal enforcement

All third-party providers are contractually bound to protect your information, comply with GDPR, and use it only for specified purposes.

5. International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs): We use EU-approved contractual clauses
Adequacy decisions: We prioritize countries with adequate data protection laws
Additional safeguards: Technical and organizational measures to protect your data

6. Data Retention

We retain your personal information only as long as necessary:

Active account: For the duration of your subscription
After account closure: Up to 3 years for legal, tax, and audit purposes
Legal requirements: As required by applicable law
Anonymized data: May be retained indefinitely for analytics

You may request earlier deletion of your data, subject to legal requirements.

You have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete data
Right to erasure: Request deletion of your personal data ("right to be forgotten")
Right to restriction: Request limitation of how we process your data
Right to data portability: Receive your data in a structured, machine-readable format
Right to object: Object to processing based on legitimate interests or for marketing
Right to withdraw consent: Withdraw consent at any time (without affecting prior processing)

How to Exercise Your Rights

To exercise any of these rights, contact us at:

Email: [email protected]

We will respond to your request within 30 days, as required by GDPR.

8. Right to Lodge a Complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: https://www.cnil.fr

You may also lodge a complaint with the supervisory authority in your country of residence.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption: All data encrypted in transit (TLS) and at rest (AES-256)
Access controls: Role-based access, limited to authorized personnel only
Regular audits: Security assessments and vulnerability testing
Secure infrastructure: Hosted on certified, regularly updated servers
Incident response: Procedures to detect, report, and respond to data breaches

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with personal data, please contact us immediately.

11. Cookies and Tracking

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated:

By email to your registered address
By notice on our website

Your continued use of SuppressLeak after changes constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights:

SL SOLUTIONS SAS
CS 48756 58 RUE DE MONCEAU
75008 PARIS, France