Privacy policy

Unvelar (2261 Market Street, San Francisco, CA 94114, United States) is the controller of the personal data described here. For any privacy question or request, email contact@unvelar.com.

Contact form. Your email address, company website and message. We use them to reply and to discuss a pilot. Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering business inquiries.

Scan requests. Your work email, the product or property you want monitored, and the reference images you upload. We send a verification code to your email and use the rest to run the scan and follow up. Legal basis: steps taken at your request before entering a contract.

Client accounts. Name, email, organization and the activity needed to run your account (sign-in sessions, monitored IP, review decisions). Legal basis: performance of our contract with your organization.

Technical data. Our hosting providers log IP addresses and request details to deliver the site and keep it secure. Legal basis: our legitimate interest in running a secure service.

Online listings and sellers. To detect counterfeits and infringement, the platform collects publicly available listings from marketplaces, social platforms and websites. These can include seller names, store names, profile details and listing content. We process this data for our clients to protect their intellectual property. Legal basis: the legitimate interest of rights holders in enforcing their IP rights. We collect only what is needed to identify and document a possible infringement.

We do not use advertising or analytics cookies, and we do not track you across other sites. The client portal stores a sign-in session and a few display preferences (for example, whether the sidebar is collapsed) in your browser. These are strictly necessary for the portal to work, so we do not ask for consent to store them. Fonts are served from our own site, not from a third party.

We do not sell personal data. We share it only with service providers that process it on our behalf:

• Web3Forms, which delivers contact form messages to our inbox.
• WorkOS, which handles sign-in to the client portal.
• GitHub, which hosts this website.
• Cloud infrastructure providers that host our application, database and file storage.

When a client approves a takedown notice, we send that notice, with the supporting evidence, to the platform where the listing appears. We may also disclose data when the law requires it.

Unvelar is based in the United States, and our service providers may process data there. When we transfer personal data from the European Economic Area, the UK or Switzerland, we rely on the EU-U.S. Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses.

We keep contact form messages and scan requests for as long as we are discussing working together, and delete them when that conversation ends without a contract. Client account data is kept for the length of the contract and deleted or anonymized after it ends, unless we must keep it longer by law. Listing and seller data is kept while it is needed to document and resolve a case for a client.

If you are in the EEA, the UK or another region with similar laws, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. Where we rely on legitimate interest, you can object at any time. To make a request, email contact@unvelar.com. We answer within one month.

You also have the right to lodge a complaint with the data protection authority in the country where you live or work.

Data is encrypted in transit, and access to client data is limited to the people who need it to run the service.

If we change this policy, we will update the date at the top of this page. For significant changes, we will tell clients directly.