Privacy policy
Draft for legal review: not yet checked by a lawyer.
Who is responsible
misebannin.shop (https://kagami-check.towers.app) is run by Duke Security, Inc., 1000 N. West St. Suite 1400, Wilmington DE 19801, United States. We decide what personal data this website and app collect and why: we're the controller. Questions about your data: hello@kagami-check.thetowers.ai.
What we collect and why
- Visits. We count visits without cookies. Your IP address is only used, hashed with the day, to count unique visitors, and it isn't stored. Legal basis: our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR).
- Waitlist. If you join our waitlist: your email address, and a note if you add one, to tell you when we open. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by writing to us.
- Your account. Your email address, your name and a hash of your password (never the password itself), and a sign-in cookie that only this site can read, kept for 30 days. Legal basis: our contract with you (Art. 6(1)(b) GDPR); the cookie is strictly necessary to keep you signed in.
- What you save in the app and the files you upload, to provide the service to you. Legal basis: our contract with you.
- Error reports when something goes wrong in the app (what you were doing, and your browser), to fix it. Legal basis: our legitimate interest in an app that works.
- Payments. Stripe takes your payment. We receive your plan, whether it's paid and a Stripe customer reference, never your card details. Stripe processes your payment details as its own controller (stripe.com/privacy). Legal basis: our contract with you, and our legal duty to keep invoices (Art. 6(1)(c) GDPR).
Who processes it for us
This website and app run on Syngularity (Duke Security, Inc., Wilmington, Delaware, USA), which hosts them and stores the data for us under a data processing agreement (Art. 28 GDPR), on servers of Amazon Web Services in Frankfurt, Germany. Syngularity's own sub-processors include Neon (the app's database, in Frankfurt) and Anthropic (the AI Syngularity works with, in the United States). Where data goes to the United States, the transfer relies on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. We don't sell your data and don't use it for advertising.
How long we keep it
Your account and what you saved: until you delete your account (on your account page) or ask us to; it's then deleted within 30 days, and from backups within 30 more. Waitlist addresses: until we open, or until you ask us to remove yours. Invoice records: as long as tax law requires.
Your rights
You can ask us for access to your data, to correct or delete it, for a copy of it, to restrict its use or to object to it, and you can withdraw your consent at any time: write to hello@kagami-check.thetowers.ai. You can also complain to a data protection authority, in particular where you live or work.