Privacy Policy

1.1. This Policy covers how User data is collected and used. The Administration does not collect personal data of Users through the Service, unless otherwise is expressly stated in this Privacy Policy.

1.2. The purpose of this Policy is to ensure adequate protection of information about Users, including their personal data, from unauthorized access and disclosure.

1.3. The collection, storage, distribution and protection of information about Users are governed by this Policy, other official documents of the Administration and the effective legislation of the United Kingdom.

1.4. The Administration has the right to make changes to this Policy. When making changes to the Policy, the Administration notifies the Users about this by posting a new version of the Policy at https://leakzero.io.

1.5. By using the Service, the User agrees with the terms of this Policy and the processing of personal data in the manner prescribed by this Policy, as well as with the processing of personal data by third parties acting on behalf of the Administration in its legitimate interests.

1.6. If the User disagrees with the terms of this Policy, the User must immediately stop using the Service.

2.3. The Administration does not collect or process data of bank cards or accounts of Users. Information about bank cards is collected by the payment system of a third-party service provider specified in clause 4.3. of this Policy.

2.4. To confirm the payment of Plans, the Administration has access through the payment system of a third-party service provider to information about the payment status that does not contain bank card data.

2.5. The collected data can be changed at the request of the User if they are inaccurate or irrelevant after his identification.

2.6. The Administration protects the data provided by the User with reasonable and sufficient security measures against loss or theft, as well as against unauthorized access, disclosure, copying, use or modification.

2.7. When searching for leaks without creating an Account by e-mail address entered by the User in the search form of the Site or in the Bot's request, the specified data is not stored anywhere, their backup copies are not created, etc. Before sending a request on the side of the User's web browser, the SHA256 hash from the entered email address is calculated, truncated to 24 characters, and after that the calculated hash is sent to the server. When creating an Account, the function of checking leaks by email address by creating a SHA256 hash from the entered email address is available when the User selects the relevant option in the Account or sends a relevant request to the Bot.

2.8. The Administration does not store on its servers or those ensuring the operation of the Service, the data specified in the paragraph above entered in the verification form on the Sites or in the Bot's request text. When the User uses the Service, the Administration does not collect or access the requested email addresses, phone numbers, keywords, passwords and domain names requested for verification.

2.9. User and Payment data are stored and processed until the processing goals are achieved, that is, until the User stops using the Service and requests the deletion of User data. User and Payment data may also be erased in connection with the termination of the Account on the grounds provided for in clause 5.16 of the Terms of Use. Some personal data may be processed after the termination of the use of the Service, to the extent required by applicable law.

2.10. User and Payment data may be disclosed by virtue of the law or at the inquiries of law enforcement agencies or at the court orders, including to protect the rights of third parties during legal proceedings, administrative procedures, operational search or investigative measures; to protect the rights and interests of other Users; to protect the life and vital interests of other individuals; to ensure the proper level of security of the Service and User data; as well as in order to protect the intellectual property rights, as well as other rights and legitimate interests of the Administration.

2.11. The operator takes technical, organizational and legal measures in order to ensure the protection of the User's personal data from unauthorized or accidental access to them, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.

2.12. The storage of information about Users is carried out in secure databases, access to which is limited to third parties.

2.13. The Administration does not sell, does not transfer any data about Users for a consideration and does not provide access to persons not affiliated with or not in contractual relations with the Administration.

3.1. Whereas the sources of the collection of information about leaks available using the Service do not allow to determine, directly or indirectly, an individual (article 4 (1) General Data Protection Regulation of the European Union 2016/679), the Administration cannot provide information about the set of data in accordance with Art. 15 of the General Data Protection Regulation of the European Union.

3.2. Registered Users have the right to withdraw their consent to receive informational messages, notifications about authorization and authentication events on the Sites and about the expiration of the period paid for the Plan, sent to their e-mail address specified by them when creating an Account or via Bot messages. To withdraw consent to receive e-mail or the Bot messages, the User shall perform actions confirming the refusal to receive such messages.

3.4. Registered Users have the right to demand from the Administration rectification of his personal data, restriction of its processing or erasure in the event, including if the personal data is incomplete, outdated, inaccurate, unlawfully obtained or no longer deemed necessary for the initially stated purpose of processing, as well as take measures provided for by law to protect their rights.

3.5. Erasure (deletion) and processing restriction of all collected User data is carried out within 24 hours upon the receipt of the relevant request. A request for erasure (deletion) of User data necessary to perform the Terms of Use amounts to refusal to further use of the Service on an onerous basis and perform the Terms of Use.

3.7. The User is entitled to address any personal data protection issues to the Data Protection Authority of his residence.

4.1. The Administration transfers User data to some of the third-party service providers in accordance with the terms of agreements restricting the use and the processing of the User data. In some cases, these service providers may need access to User data in order to provide services related to the Administration's performance of its obligations under the Terms of Use and this Policy. Such service providers are allowed to use User data only to process data or provide services on behalf of the Administration within the framework of contractual obligations to protect the security and confidentiality of the processed User data. In some cases, these service providers may disclose User Data to governmental authorities due to the requirements of applicable law.

4.2. The Sites use hCaptcha from Intuition Machines, Inc. (350 Alabama St, San Francisco, CA 94110 USA) to prevent automatic requests to the Sites. hCaptcha is a service that protects web pages from spam and request abuse. The Administration uses hCaptcha to protect input forms. When using hCaptcha, Intuition Machines, Inc. uses data to determine if the User is human. What data Intuition Machines, Inc. collects and for what they are used, you can read here and its Terms of Use here.

4.3. For processing of payments for the Plans, a third-party provider's payment system is used - Stripe, Inc. The third-party provider, acting in the interests of the Administration, collects and processes Payment data, as well as bank card data and other financial data necessary to execute and process license fees for the right to use the Service. When paying for Plans using cards of Mastercard or Visa payment systems, the Administration transfers to Stripe Inc. email address and the User transfers Payment Data to Stripe Inc. and Administration. The Administration does not receive and does not have access to card or bank data, as well as to the data that Stripe, Inc. uses to execute and process payments, except for the data specified in clause 2.3 of this Policy. You can read Stripe, Inc. Privacy Policy here.

The Services may contain or provide the ability to follow links to unrelated third-party web resources and services. These web resources and services may operate independently of the Administration and / or may have their own terms of use, policies and privacy notices, which the Administration strongly recommends to review. After referring to such web resources or services, the Administration no longer has any control on the processing of any data that is transferred to the unrelated third party, since the behavior of such parties is beyond its control. Therefore, the Administration does not assume any responsibility for the processing of any such data by unrelated third parties. In addition, the Administration is not responsible for the information posted and / or damage caused as a result of actions on any web resources and services that can be accessed by referring to the link available through the Services or using information obtained during the use of the Services and that are not owned or controlled by the Administration or are not bound by this Policy.