Privacy Policy

At StormLock, we are committed to protecting the privacy of our users and the content owners we serve. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

1.1 Personal Information

When you register for an account or submit a request, we may collect personal information including your name, email address, company name, phone number, and billing information.

1.2 Content Data

To provide our anti-piracy services, we collect content fingerprints, metadata, URLs of infringing content, and related enforcement data. This information is used solely for the purpose of identifying and removing unauthorized copies of your content.

1.3 Usage Data

We automatically collect information about how you interact with our platform, including IP addresses, browser type, pages visited, and actions taken within the dashboard.

2. Data Usage

We use the information we collect to:

• Provide, maintain, and improve our anti-piracy monitoring and enforcement services
• Process takedown requests and generate compliance reports
• Communicate with you about your account, services, and updates
• Analyze platform usage to improve user experience
• Comply with legal obligations and enforce our terms of service

3. Monitoring Transparency

Our monitoring systems scan publicly accessible digital platforms for unauthorized copies of registered content. We do not access private accounts, encrypted communications, or content behind authentication barriers. All scanning is performed using publicly available data and authorized API integrations with partner platforms.

4. Data Sharing

We do not sell your personal information. We may share data with:

• Platform partners — to facilitate takedown requests and enforcement actions
• Legal authorities — when required by law or to protect our rights
• Service providers — trusted third parties who assist in operating our platform

5. Security Practices

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256), regular security audits, and access controls. Our infrastructure is hosted on SOC 2 Type II certified cloud providers.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Enforcement records are retained for a minimum of 3 years for legal compliance purposes. You may request deletion of your personal data at any time.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. To exercise these rights, contact us at [email protected].

8. Contact

For questions about this Privacy Policy, please contact our Data Protection Officer at [email protected].