Leak Remover OĆ ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital content protection platform (the "Service").
This policy applies to all users of our Service, including content creators, agencies, and administrators. We process personal data in compliance with the EU General Data Protection Regulation (GDPR) and Estonian data protection laws.
1. Data Controller
Leak Remover OĆ
Registry Code: 17166673
VAT Number: EE102831371
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
Email: admin@leakremover.com
For data protection inquiries: admin@leakremover.com
2. What Personal Data We Collect
2.1 Data You Provide to Us
Account Information
Email address, name, and profile picture obtained when you sign in using a third-party provider such as Google Sign-In or email/password authentication. We use these details solely to create and manage your account. We do not access your Google contacts, Gmail, Google Drive, or any other Google services. Role type (Creator, Agency, Admin) and login timestamps are also stored.
Profile Information
For content creators: username, display name, avatar image, country of origin, content categories, social media handles, the names and usernames you ask us to monitor (including ones you no longer use), and any custom search terms you add.
Gallery Images
Images you upload to your gallery for our AI-powered leak detection system. These images are used to train machine learning models that identify your content across the internet.
Payment & Billing Information
We collect payment information through our payment processor (credit card details are handled exclusively by our payment processor and never stored on our servers). We store: payment processor customer ID, subscription ID, billing history, wallet transactions, and payment metadata.
Communications
When you contact us via email or support chat, we collect: your email address, message content, and support conversation history.
2.2 Data We Collect Automatically
Usage Data
IP address, browser type and version, device information, operating system, pages visited, time and date of visits, time spent on pages, and other diagnostic data.
Cookies & Tracking Technologies
We use cookies and similar tracking technologies. For detailed information, please see our Cookie Policy.
2.3 Data from Third-Party Sources
Publicly Available Content
To provide our leak detection service, we automatically search and collect publicly available information from the internet, including:
- URLs, page titles, and snippets where your content may appear
- Images found online that match your gallery images
- Domain names and website information hosting potentially unauthorized content
- Publicly available DMCA contact information for website operators
Legal basis: This is special-category data concerning your sex life under GDPR Article 9 (information about your leaked or non-consensually shared intimate content ā the links, sites, and number of items found). We process it to detect and remove that content and to pursue takedowns on your behalf, on the basis of the establishment, exercise or defence of legal claims (Art. 9(2)(f)) together with the performance of our contract with you (Art. 6(1)(b)). We do not rely on legitimate interest for this special-category data. You can stop this processing at any time by closing your account; doing so does not undo takedown requests already submitted. We do not put your own leak figures inside marketing or offer emails.
3. How We Use Your Personal Data
We use your personal data for the following purposes, with the corresponding legal basis under GDPR:
Providing Our Core Service
- Monitoring the internet for unauthorized distribution using AI-assisted technology
- Identifying your content through machine learning models
- Automated classification of each detected violation, with expert human review applied where applicable (tier-dependent)
- Generating and sending DMCA takedown notices
- Safeguards that hold uncertain matches back for review, and exclusion lists that keep your own pages and profiles out of enforcement
- Tracking removal status and handling disputes with personalized attention
Legal basis: Contract performance (GDPR Article 6(1)(b))
Note: Our service combines AI-powered detection with automated validation, and expert human review applied where applicable. Most notices are issued automatically: this is what lets us act at scale and within hours rather than weeks. Automated decisions are constrained by safeguards rather than by a person looking at each one. Matches we are not confident about are held in a review queue, your own sites and social profiles can be excluded from enforcement, and we do not send notices to domains we have judged out of scope. If we get one wrong, tell us and we will withdraw it.
AI-Assisted Content Detection & Model Training
- Training creator-specific ML models for accurate content identification
- Using AI to detect image modifications, crops, and watermark removal
- Automated checks that hold a match back for review when the evidence is weak
- Expert human review of flagged and complex cases, applied where applicable (tier-dependent)
- Continuous improvement of detection accuracy through human feedback and error analysis
Legal basis: Contract performance (Art. 6(1)(b)) + Legitimate interest (Art. 6(1)(f))
Note: Your gallery images are used exclusively to train models for identifying your own content. AI does the detection at scale, and expert human review is applied where applicable. We work to keep incorrect notices as rare as possible, but we cannot promise they never happen. When one does, we withdraw it: you can flag anything you believe we got wrong and we will act on it. Models are creator-specific and isolated.
Account Management & Authentication
- Creating and managing your user account
- Authenticating your identity
- Maintaining session security
Legal basis: Contract performance (GDPR Article 6(1)(b))
Payment Processing
- Processing subscription payments
- Managing billing cycles and invoices
- Handling refunds and payment disputes
Legal basis: Contract performance (Art. 6(1)(b)) + Legal obligation (Art. 6(1)(c))
4. Who We Share Your Personal Data With
We may share your personal data with the following categories of recipients:
Service Providers
We work with trusted third-party service providers who assist us in operating our Service. These providers have access to your personal data only to perform specific tasks on our behalf and are obligated to protect your information.
- Authentication services (Auth0, Google Sign-In) - User identity verification and session management. When you sign in with Google, we receive only your name, email address, and profile picture. We do not request access to any other Google services or data.
- Payment processors - Processing subscription payments and billing
- Cloud infrastructure providers - Hosting, data storage, and computing services
- Customer support platforms - Live chat and support ticket management
- Email service providers - Transactional and notification emails
- Search and data providers - Web search capabilities for leak detection
Advertising & Conversion Measurement (Google Ads)
We use Google Ads to measure how our advertising performs. When you reach our site from a Google ad and later complete a purchase, we may share a Google click identifier (the "gclid" stored in your browser) together with the purchase event (the amount and currency paid) with Google. This lets us attribute the sale to the ad you clicked and understand which campaigns work. We do not share your name, email, or any gallery content for this purpose.
This sharing happens only with your consent. We capture your advertising-consent signal (Google "ad_user_data" / "ad_personalization") from your cookie preferences at checkout, and for users in the EEA, the United Kingdom, and Switzerland we upload a conversion to Google only when you have granted consent for marketing cookies. If you decline, no purchase data is shared with Google for advertising measurement.
Legal basis: Consent (GDPR Article 6(1)(a)). You can withdraw your consent at any time by updating your cookie preferences, which stops any further sharing of this data with Google.
Website Operators (DMCA Takedown Notices)
When we send DMCA takedown notices on your behalf, we share limited information with website operators: your name/username (as copyright holder), description of copyrighted work, URLs of infringing content, and our contact information as your authorized agent.
Legal Authorities
We may disclose your personal data if required by law, court order, or government request, or to protect our legal rights and the safety of our users.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified of any such change.
Important: We do not sell, rent, or trade your personal data to third parties for their marketing purposes.
5. How We Protect Your Personal Data
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:
Encryption
Data in transit (TLS/SSL) and at rest
Access Controls
Role-based access on need-to-know basis
Authentication
Multi-factor authentication for sensitive accounts
Infrastructure Security
Enterprise-grade cloud security practices
Monitoring
Automated security event detection and logging
Regular Updates
Timely security patches and system updates
We employ enterprise-grade security measures and maintain the highest industry standards. Our security team continuously monitors and updates our infrastructure to protect your data. Should you have any questions or concerns, we're here to help at admin@leakremover.com.
8. Your Rights Under GDPR
As a data subject in the European Union, you have the following rights regarding your personal data:
Right of Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate data
Right to Erasure
Request deletion of your data
Right to Restriction
Limit how we use your data
Right to Portability
Export data in machine-readable format
Right to Object
Object to certain processing
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
Email: admin@leakremover.com
Subject Line: "GDPR Data Request - [Your Right]"
We will respond within 30 days.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Leak Remover OĆ
Registry Code: 17166673
Email: admin@leakremover.com
Address: Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
Data Protection Contact: admin@leakremover.com