Data Controller: CripeHub Solutions LLC, United States
1. Data Collected
Account/Profile: Name, email, business details, IP address. Content: Reviews, support messages, profile data. Technical: Cookies, device info, browser type, analytics. No sensitive data (race, health, biometrics).
2. Legal Bases (GDPR)
- Contract performance (reviews, support)
- Legitimate interests (fraud prevention, analytics, sanctions compliance)
- Consent (non-essential cookies)
3. Purposes
- Provide Services (reviews, scoring, support)
- Fraud and abuse detection
- Legal compliance (sanctions, FTC, counter-terrorism)
- Analytics improvement
4. Sharing
Service Providers (U.S.-based): Vercel, Cloudflare, Google Analytics. Legal: Courts, regulators, law enforcement. No data sales.
5. International Transfers (GDPR)
EU/UK data transfers to the U.S. use Standard Contractual Clauses (SCCs) per Art. 46 GDPR.
6. Your Rights
Access, correction, deletion, portability, and objection. Submit via legal inquiry. Response within 30 days. CCPA: no sales; opt-out honored. EU DPO: contact here.
7. Security & Retention
AES-256 encryption. Reviews retained permanently unless deleted. Breaches notified per GDPR and CCPA.
8. Children
COPPA and GDPR-K compliant. No data collection from users under 16.