Privacy Policy

1. Information we collect

• Account information: email address and password (stored only as a salted hash).
• Identity and notice details: legal name, stage names and aliases, mailing address and phone number. The law requires these, or an authorized agent’s details, in DMCA notices.
• Proof of ownership: links to your original content and profiles, plus any verification documents you choose to provide.
• Enforcement data: infringing URLs you submit or that our scanning finds, host names, preview thumbnail URLs, match details, notice text, status history and notes.
• Billing: handled by Stripe. We receive limited details such as plan, billing status and the last four digits of your card. We do not receive or store full card numbers.
• Technical data: IP address, browser type and server logs, used for security and troubleshooting.

2. How we use information

We use it to: provide the service (find leaks, prepare and send notices, track results); verify identity and authority to prevent fraudulent takedowns; process payments; communicate about your account; secure and improve the service; and comply with legal obligations. We do not sell your personal information, and we do not use it for third-party advertising.

3. How notices disclose your information

A valid DMCA notice must contain the complaining party’s signature and contact information (17 U.S.C. § 512(c)(3)). When we send a notice for you, the recipient (a host, platform or search engine) receives your legal name and the contact details in your profile. Some recipients forward notices to the person who posted the material, and some, including Google, may publish copies to the Lumen database with personal details partly redacted.

Where the recipient accepts it, you can ask us to list VitalDrip LLC (doing business as ClearTrace) as your authorized agent and use our contact details instead of your address and phone number. Email contracts@vitaldripllc.com to request this. Your legal name may still be required.

4. Sharing

We share personal information only: with notice recipients as described above; with service providers that run the service for us, such as hosting (Render), payments (Stripe) and email delivery, under contracts that limit their use of it; when required by law or to protect rights and safety; and in connection with a merger or acquisition, subject to this policy.

5. Cookies

We use one strictly necessary session cookie to keep you signed in. We also use Google Analytics, which sets analytics cookies to help us understand how visitors find and use our site (for example, pages viewed and referring sources). We do not use advertising cookies. You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout. Our pages load fonts from Google Fonts, which receives your IP address when the fonts load.

6. Retention

We keep account and enforcement records while your account is active. After you close it, we delete or de-identify personal information within 90 days, except for records we must keep for legal, tax, dispute or fraud-prevention reasons, such as copies of notices sent in your name. Those we keep for 3 years.

7. Security

We use reasonable safeguards: hashed passwords, encrypted connections (HTTPS), restricted access and separate API keys for automation. No system is completely secure. If a breach affects your information, we will notify you as the law requires.

8. Your rights

Everyone: you can view and update most information in your profile, and ask us at contracts@vitaldripllc.com for a copy of your data or to delete it.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. Sensitive information we collect, such as account log-in details and any ID you provide, is used only to provide the service. You may use an authorized agent to make a request, and we will verify requests before acting on them.

EEA/UK residents (GDPR): VitalDrip LLC (doing business as ClearTrace) is the controller of your data. Our legal bases are performing our contract with you, legitimate interests (security and fraud prevention), legal obligations, and consent where we ask for it. You have the right to access, correct, delete, restrict or object to processing, to data portability, to withdraw consent, and to complain to your local data protection authority. Your data is processed in the United States; where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

We respond to verified requests within the time the law requires, usually 30 to 45 days.

9. Adults only

ClearTrace is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.

10. Changes

We will post updates here with a new effective date and notify you of material changes by email or in the app.

11. Contact

VitalDrip LLC (doing business as ClearTrace)
2323 Piedmont Rd NE, Apt 3220, Atlanta, GA 30324
contracts@vitaldripllc.com