Terms of Service

“Service” means the DeData platform, website at dedatalabs.org, mobile applications, APIs, browser automation tooling, and all related features and functionality.

“User,” “you,” or “your” means any individual or entity that accesses or uses the Service.

“PII” means personally identifiable information that you provide to DeData, including but not limited to your name, addresses, phone numbers, email addresses, dates of birth, and associated identifiers.

“Data Broker” means any third-party entity that compiles, aggregates, sells, or otherwise disseminates personal information, including but not limited to people-search websites, public-records aggregators, surveillance databases, and advertising-data networks.

“Removal Request”means a machine-submitted or human-initiated request sent on your behalf to a Data Broker requesting deletion, suppression, or opt-out of your PII from that broker’s database.

“Subscription” means a recurring payment plan (Free, Basic, Plus, or Premium) that governs access to Service features.

“Intellectual Property” means patents, copyrights, trademarks, trade secrets, software code, algorithms, databases, and all related rights.

Age Requirement.The Service is intended solely for individuals who are 18 years of age or older. By registering for an account you represent and warrant that you are at least 18 years old. DeData does not knowingly collect personal information from anyone under 18. If we discover that a user is under 18, we will promptly terminate that account and delete associated data in accordance with the Children’s Online Privacy Protection Act (“COPPA”) and applicable law. If you are a parent or guardian and believe your child has provided us with personal information without your consent, contact us immediately at privacy@dedatalabs.org.

Account Accuracy. You agree to provide accurate, current, and complete information when creating your account and to update that information promptly if it changes. You are solely responsible for maintaining the confidentiality of your login credentials. You agree to notify us immediately of any unauthorized access or suspected compromise of your account at privacy@dedatalabs.org. DeData is not liable for any loss or damage arising from your failure to protect your credentials.

One Account Per Person. Each individual may maintain only one account unless DeData has expressly authorized otherwise in writing. Creating duplicate accounts to circumvent subscription limits, free-trial restrictions, or disciplinary actions is prohibited and will result in immediate termination.

Entity Accounts.If you register on behalf of a company or other legal entity, you represent that you have authority to bind that entity to these Terms, and “you” will refer to that entity. DeData reserves the right to request proof of such authority.

DeData operates a privacy-as-a-service platform that, at your direction, submits automated opt-out and data-deletion requests to Data Brokers and people-search websites on your behalf. The Service also monitors surveillance camera-network databases (such as license plate reader registries), ad-tracking opt-out systems, and other privacy-adjacent data repositories as described in our current feature documentation.

No Guarantee of Removal.YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT DATA BROKERS ARE INDEPENDENT THIRD PARTIES OVER WHICH DeData EXERCISES NO CONTROL. DeData’s sole obligation is to submit Removal Requests using commercially reasonable methods. DeData does not and cannot guarantee that any Data Broker will honor, process, complete, or maintain any Removal Request. Compliance with a Removal Request is at the sole discretion of each Data Broker and is subject to their own policies, legal obligations, and technical capabilities. The existence of a submitted Removal Request does not constitute a guarantee that your PII has been or will be deleted, suppressed, unlisted, or otherwise removed from any third-party database.

Data Reappearance. Even after a successful removal, your PII may reappear on Data Broker websites because brokers periodically refresh their data from public records, other brokers, or proprietary sources. Our ongoing monitoring is provided on a best-effort basis and does not constitute a guarantee that your data will remain permanently removed. Reappearance does not entitle you to a refund.

Scope Limitations. The Service covers only those Data Brokers listed on our supported-broker roster at the time of your scan. New brokers emerge regularly. DeData makes no representation that all existing or future Data Brokers are or will be included in the Service. We may add or remove brokers from our roster at any time without notice or liability.

Monitoring Cadence. Automated rescans and re-submission of Removal Requests are performed on schedules determined by us and described in plan feature documentation. Monitoring frequency is subject to change and is not a guaranteed service level.

Your Obligation of Accuracy. You are solely responsible for the accuracy, completeness, and lawfulness of all PII you submit to the Service. DeData processes Removal Requests based exclusively on the information you provide. If you submit incorrect, outdated, or misleading information, Removal Requests may fail, be misdirected, or result in the removal of records belonging to another individual. DeData bears no liability for the consequences of inaccurate user-submitted PII.

Own PII Only. You represent and warrant that all PII you submit to the Service belongs to you personally or that you have valid legal authority to submit removal requests on behalf of the individual whose PII it is (e.g., as a legal guardian, authorized agent under CCPA, or pursuant to a valid power of attorney). You may not use the Service to request removal of PII that does not belong to you without such authority, and doing so constitutes a material breach of these Terms.

Designation of DeData as Your Authorized Agent.By submitting PII to the Service and accepting these Terms, you designate DeData as your verifiable authorized agent under, without limitation: California Civil Code § 1798.135(a)(1) (CCPA/CPRA); the Virginia Consumer Data Protection Act (Va. Code § 59.1-578); the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code Ch. 541) (“TDPSA”); the Illinois Biometric Information Privacy Act, 740 ILCS 14 (“BIPA”); the Colorado Privacy Act, Colo. Rev. Stat. § 6-1-1301 et seq.; the Oregon Consumer Privacy Act, ORS § 646A.570 et seq. (“OCPA”); the Florida Digital Bill of Rights, Fla. Stat. Ch. 501.701 et seq. (“FDBR”); and equivalent state and EU/UK data-subject-rights laws. You grant authorization under each of the foregoing statutes individually and collectively. You authorize DeData to submit opt-out, deletion, correction, do-not-sell-or-share, opt-out-of-targeted-advertising, opt-out-of-profiling, and access requests to Data Brokers and other recipients on your behalf for the duration of your subscription. This authorization is effective until you revoke it in writing by emailing privacy@dedatalabs.org or deleting your account. DeData will retain a record of your authorization (account creation timestamp, IP address, and these Terms version) for regulatory inspection. If a Data Broker requires additional verification (e.g., a signed power-of-attorney or notarized statement), DeData may request that you provide it; failure to provide such verification may cause that specific Removal Request to be denied.

Encrypted Storage.PII you provide is stored using AES-256 encryption at rest and TLS 1.2+ in transit. You acknowledge that no storage system is completely impervious to breach and that DeData’s security obligations are limited to those described in our Privacy Policy. Our Privacy Policy is incorporated into these Terms by reference.

Deletion of Your PII from DeData. You may request deletion of your account and associated PII at any time by contacting privacy@dedatalabs.org. We will process deletion within 30 days subject to any legal hold or retention obligations. Note that deleting your account will terminate all ongoing monitoring and Removal Request submissions.

The Service operates automated browser scripts and related tooling (“Automation Tools”) to interact with Data Broker websites on your behalf. You understand, acknowledge, and accept the following:

Third-Party ToS.Data Brokers maintain their own terms of service, and DeData’s Automation Tools may interact with those sites in ways that such sites consider violations of their terms. DeData makes no representation that its automated access to third-party websites is expressly authorized by each site. You agree that DeData is not liable for any claim, legal action, or damages arising from such access, and you will not seek indemnification from DeData for any third-party claim arising out of automated access conducted on your behalf.

robots.txt and Crawling Policies.Third-party sites may publish robots.txt exclusion files or similar crawling directives. DeData’s Automation Tools may not comply with all such directives when submitting legally authorized opt-out and data-deletion requests under applicable privacy law (including the CCPA/CPRA, GDPR, and related statutes). You acknowledge this limitation.

Computer Fraud and Abuse Act.The Computer Fraud and Abuse Act, 18 U.S.C. § 1030 (“CFAA”), and analogous state laws prohibit certain unauthorized access to computer systems. DeData operates its Automation Tools for the limited, user-authorized purpose of submitting privacy opt-out requests and believes such access is lawful under applicable law. However, DeData makes no representation, warranty, or legal opinion regarding the CFAA status of any particular automation activity. DeData shall not be liable to you for any legal exposure arising from third-party claims under the CFAA or analogous statutes.

DMCA. DeData does not copy, reproduce, or distribute copyrighted content from Data Broker websites. The sole purpose of automated access is to submit opt-out and deletion forms. DeData complies with the Digital Millennium Copyright Act, 17 U.S.C. § 512. If you believe DeData has infringed your copyright, contact privacy@dedatalabs.org.

No Legal Advice.Nothing in these Terms, and nothing communicated by DeData’s staff or Automation Tools, constitutes legal advice. You should consult qualified legal counsel if you have questions about the legality of automated data broker opt-outs in your jurisdiction.

You agree to use the Service only for lawful purposes and in accordance with these Terms. The following uses are expressly prohibited:

• Using the Service to submit Removal Requests for PII that is not your own, except as authorized under Section 4.
• Using the Service for any purpose related to stalking, harassment, domestic abuse facilitation, or surveillance of any individual.
• Using the Service to compile, aggregate, or harvest personal information about individuals other than yourself for any purpose, including competitive intelligence, background checks, or investigative purposes.
• Attempting to reverse-engineer, decompile, disassemble, or otherwise derive source code from the Service or Automation Tools.
• Circumventing, disabling, or interfering with security features of the Service, including rate limits, authentication, or encryption.
• Selling, reselling, sublicensing, or otherwise transferring access to the Service to any third party without DeData’s written consent.
• Providing false or misleading information to DeData or using the Service under a false identity.
• Using the Service in any manner that could disable, overburden, damage, or impair our infrastructure or interfere with any other party’s use of the Service.
• Using the Service in violation of any applicable federal, state, local, or international law or regulation.
• Using the Service to remove legitimate law enforcement records, court-ordered publications, or other legally required public disclosures.

DeData reserves the right, in its sole discretion, to investigate any suspected violation of this Section and to take any action it deems appropriate, including account suspension or termination, without notice or liability.

Subscription Plans.The Service is offered under the following subscription tiers, with features and pricing as published at dedatalabs.org/pricing and subject to change upon 30 days’ written notice: Free, Basic, Plus, and Premium. Paid subscription fees are billed in U.S. dollars on a monthly recurring basis (or annual basis if you select an annual plan).

Automatic Renewal. Paid Subscriptions automatically renew at the end of each billing period unless you cancel prior to the renewal date. By subscribing, you authorize DeData (through its payment processor) to charge your payment method on a recurring basis. It is your responsibility to ensure your payment information is accurate and current.

Price Changes.DeData may change subscription fees upon at least 30 days’ prior written notice. Continued use of the Service after a price change takes effect constitutes your acceptance of the new fee.

Taxes. All fees are exclusive of applicable taxes. You are responsible for all sales, use, GST, VAT, and similar taxes associated with your Subscription.

Refund Policy. DeData offers a 7-day satisfaction guarantee for new subscribers. If you are unsatisfied with the Service, you may request a full refund within 7 calendar days of your initial subscription payment by contacting privacy@dedatalabs.org. After 7 days, ALL FEES ARE NONREFUNDABLE. Partial-month refunds are not available. Cancellation of your Subscription stops future billing but does not entitle you to a refund of any already-charged fees. Refunds for annual plans, if applicable, are issued as prorated account credit only, not cash, except where required by law.

Cancellation. You may cancel your Subscription at any time through your account settings or by contacting support. Upon cancellation, your Subscription will remain active through the end of the current paid billing period, after which your account will revert to the Free tier (if available) or be deactivated. Cancellation does not trigger a refund except as described above.

Failed Payments.If a payment fails, DeData may retry the charge and may suspend your account until payment is received. Continued non-payment may result in account termination and deletion of associated data after 30 days’ notice.

Disputes. If you dispute a charge, you must contact DeData before initiating a chargeback with your financial institution. Initiating an unjustified chargeback may result in immediate account termination and pursuit of collection for the disputed amount.

This Section is the controlling refund and cancellation policy for the Service and is incorporated into Section 7. The full standalone Refund Policy is published at dedatalabs.org/legal/refund-policy and is incorporated by reference.

14-Day Money-Back Guarantee. New paid subscribers (Basic, Plus, or Premium) may request a full refund of their first paid charge within fourteen (14) calendar days of that charge, no reason required. The 14-day guarantee applies once per customer, on the first paid plan only.

Service-Quality Pro-Rated Refund.If DeData cannot complete auto-removal for at least eighty percent (80%) of the brokers covered by your tier within thirty (30) days of subscription activation, you may request a pro-rated refund of fees paid for that 30-day window. The request must be made within fourteen (14) days of the close of the 30-day window. Eligibility requires accurate PII, an account in good standing, and completion of any broker-side identity verification we cannot perform on your behalf. Brokers flagged in your dashboard as “manual-guide-only” for your tier are excluded from the 80% calculation.

Non-Refundable Charges. The following are not eligible for refund: (a) completed annual plans past the 14-day window (cancellation stops future renewals but the paid annual term is non-refundable in cash; pro-rated account credit may be offered at our discretion); (b) accounts where activity consisted entirely of viewing manual opt-out guides without triggering automated removal jobs; (c) accounts terminated for ToS violation under Sections 6 or 13; (d) partial months on monthly plans after the 14-day window; (e) reappearance of previously removed records (which is the basis for re-submission, not refund); and (f) charges older than 90 days.

How To Request. Email billing@dedatalabs.org with subject line “Refund Request — <Account Email>” or use the in-app refund form at Settings → Billing → Request Refund. We will acknowledge receipt and respond within five (5) business days. Approved refunds are issued to the original payment method via Stripe.

State-Law Caveats. Where state or national consumer law grants greater rights, that law controls. California residents who notify us in writing within thirty (30) days of their first paid charge that they are exercising rights under California Civil Code §1789.30 et seq. (cooling-off provisions for ongoing-services contracts) will receive a full refund of that charge. Send notice to billing@dedatalabs.org with subject line “California Cooling-Off Notice.” Consumers in the EEA, UK, and Switzerland have a 14-day right of withdrawal under EU Directive 2011/83/EU, subject to the loss-of-withdrawal exception when a digital service has been fully performed with the consumer’s prior express consent.

Stripe Disputes — Required Pre-Notice. Before initiating a chargeback or payment dispute with your card issuer or bank, you agree to first contact billing@dedatalabs.org and give DeData at least five (5) business days to attempt resolution. If you initiate a chargeback without first contacting us, DeData may, at its sole discretion: (i) decline future service to your account and to any account sharing your billing identity, payment method, or device fingerprint; (ii) treat the dispute as a material breach of these Terms and terminate your subscription immediately under Section 13; (iii) submit evidence (audit logs, removal-job records, and login history) to Stripe’s dispute system; and (iv) pursue collection of the disputed amount if the dispute is not resolved in your favor. Nothing in this Section limits your statutory rights to dispute unauthorized charges.

Failed Payments and Dunning.If a recurring charge fails, DeData will attempt automatic retries on a published schedule and notify you by email at each retry. If the failure is not resolved within thirty (30) days, your subscription will be cancelled. During the retry window, your account may transition to a read-only “on hold” state in which new automated scans and removals are paused; previously submitted removals are not rolled back and continue to process at the broker’s discretion.

Cancellation.You may cancel your Subscription at any time through Settings → Billing → Cancel Subscription or by emailing billing@dedatalabs.org. Cancellation takes effect at the end of the current paid billing period; cancellation alone does not entitle you to a refund except as provided in this Section 7A.

DeData’s Rights.DeData and its licensors own all right, title, and interest in and to the Service, including all software, code, algorithms, databases, user interface designs, trade secrets, trademarks, and documentation (“DeData IP”). These Terms do not transfer any ownership interest in DeData IP to you. You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service for your personal, non-commercial privacy management purposes during your Subscription term.

Your PII. You retain all ownership rights in the PII you submit to the Service. By submitting PII, you grant DeData a limited, worldwide, royalty-free license to process and store your PII solely as necessary to provide the Service. DeData will not sell your PII to third parties.

Feedback.If you provide DeData with suggestions, ideas, or other feedback regarding the Service (“Feedback”), you hereby assign to DeData all rights in such Feedback and agree that DeData may use it without restriction or compensation.

Trademark.“DeData,” “DeData Privacy Labs,” the DeData logo, and related marks are trademarks of DeData Privacy Labs. You may not use these marks without prior written permission.

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, DeData EXPRESSLY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO: (A) IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT; (B) ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE; (C) ANY WARRANTY THAT DEFECTS WILL BE CORRECTED; (D) ANY WARRANTY THAT THE SERVICE WILL MEET YOUR REQUIREMENTS OR EXPECTATIONS; AND (E) ANY WARRANTY THAT DATA BROKER REMOVAL REQUESTS WILL RESULT IN THE DELETION, SUPPRESSION, OR PERMANENT REMOVAL OF YOUR PII FROM ANY THIRD-PARTY DATABASE.

DeData makes no warranty that the removal of your data from Data Brokers will prevent any future harm, including but not limited to identity theft, fraud, unwanted contact, stalking, harassment, reputational damage, employment discrimination, or any other harm you may have sought to prevent by using the Service. The Service is a best-effort submission tool, not an insurance product or legal guarantee.

Some jurisdictions do not allow the exclusion of implied warranties; to the extent such exclusions are not permitted, they are limited to the maximum extent permitted by applicable law.

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL DeData, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, LICENSORS, OR SERVICE PROVIDERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO: LOSS OF PROFITS, LOSS OF DATA, LOSS OF GOODWILL, SERVICE INTERRUPTION, COMPUTER DAMAGE OR SYSTEM FAILURE, OR THE COST OF SUBSTITUTE GOODS OR SERVICES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF, OR INABILITY TO USE, THE SERVICE OR THESE TERMS, WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER LEGAL THEORY, EVEN IF DeData HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Cap on Damages.DeData’S TOTAL CUMULATIVE LIABILITY TO YOU FOR ANY AND ALL CLAIMS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE TOTAL AMOUNT YOU PAID TO DeData IN THE THREE (3) CALENDAR MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM. IF YOU HAVE NOT PAID ANY FEES IN THAT PERIOD (E.G., YOU ARE ON THE FREE TIER), DeData’S MAXIMUM LIABILITY IS ZERO DOLLARS ($0.00).

The limitations in this Section apply even if any limited remedy fails of its essential purpose. Some jurisdictions do not allow certain limitations of liability; to the extent such limitations are not permitted in your jurisdiction, they are limited to the maximum extent permitted by applicable law.

You agree to defend, indemnify, and hold harmless DeData Privacy Labs, its affiliates, subsidiaries, officers, directors, employees, agents, successors, and assigns (collectively, “DeData Parties”) from and against any and all claims, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to:

• Your use of or access to the Service;
• Your violation of any provision of these Terms;
• Your violation of any third-party right, including any intellectual property right, privacy right, or contractual right;
• Any claim by a Data Broker, third party, or government entity arising from Removal Requests submitted on your behalf, including claims under the CFAA, DMCA, or analogous statutes;
• Any inaccuracy in PII or other information you provide to DeData; or
• Any claim that content you provided to DeData caused damage to a third party.

DeData reserves the right, at its own expense, to assume the exclusive defense and control of any matter subject to indemnification by you, in which case you agree to cooperate fully with DeData in asserting any available defenses.

Please read this Section carefully. It affects your rights.

Informal Resolution First. Before initiating any formal dispute, you agree to contact DeData at privacy@dedatalabs.org and describe the dispute in reasonable detail. The parties will attempt to resolve the dispute informally for 30 days. If the dispute is not resolved within 30 days, either party may initiate arbitration as described below.

Binding Arbitration.EXCEPT AS SET FORTH BELOW, ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE (INCLUDING THE BREACH, TERMINATION, ENFORCEMENT, INTERPRETATION, OR VALIDITY OF THESE TERMS) WILL BE RESOLVED EXCLUSIVELY BY BINDING INDIVIDUAL ARBITRATION ADMINISTERED BY THE AMERICAN ARBITRATION ASSOCIATION (“AAA”) UNDER ITS CONSUMER ARBITRATION RULES, AS AMENDED BY THESE TERMS.

Arbitration will be conducted by a single neutral arbitrator. The arbitration will take place in Wilmington, Delaware, or, at your election, by video conference. The arbitrator’s award will be final and binding and may be entered as a judgment in any court of competent jurisdiction. The AAA Consumer Arbitration Rules are available at www.adr.org/consumer.

Fees. DeData will pay all AAA filing, administrative, and arbitrator fees for claims that do not exceed $10,000, unless the arbitrator finds your claims frivolous. For claims exceeding $10,000, AAA fee allocation will be governed by the AAA Consumer Arbitration Rules.

CLASS ACTION WAIVER.YOU AND DeData AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION. THE ARBITRATOR MAY NOT CONSOLIDATE MORE THAN ONE PERSON’S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A REPRESENTATIVE OR CLASS PROCEEDING. IF THIS WAIVER IS FOUND UNENFORCEABLE, THEN THE ENTIRETY OF THIS ARBITRATION PROVISION WILL BE NULL AND VOID.

Exceptions.Notwithstanding the foregoing, either party may bring: (a) an individual action in small claims court for disputes within that court’s jurisdiction; and (b) an application for emergency injunctive or other equitable relief in any court of competent jurisdiction to prevent irreparable harm pending arbitration. This arbitration provision does not apply to claims that applicable law expressly requires to be resolved in a particular forum.

Opt-Out. You may opt out of this arbitration agreement by sending written notice to privacy@dedatalabs.org within 30 days of the date you first accepted these Terms. Your notice must include your name, account email, and a clear statement that you opt out of arbitration. Opting out does not affect any other provision of these Terms.

Governing Law; Venue. These Terms are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict-of-law provisions. For disputes not subject to arbitration (including opt-out disputes and injunctive relief), you consent to exclusive personal jurisdiction and venue in the state and federal courts located in New Castle County, Delaware.

By You. You may terminate your account at any time by canceling your Subscription through account settings and requesting account deletion at privacy@dedatalabs.org. Termination does not entitle you to a refund except as set forth in Section 7.

By DeData — With Notice.DeData may terminate or suspend your account for any reason or no reason upon 30 days’ written notice to the email address associated with your account. If DeData terminates your account without cause during a prepaid billing period, we will refund a prorated portion of any prepaid fees.

By DeData — Immediately. DeData may suspend or terminate your account immediately and without prior notice if:

• You materially breach these Terms;
• Your use of the Service violates applicable law or poses a legal risk to DeData;
• You engage in abusive, fraudulent, or harassing conduct toward DeData employees, agents, or other users;
• You fail to pay fees when due after a cure period; or
• Continued provision of the Service to you creates legal or regulatory risk for DeData.

Upon termination, your license to use the Service ceases immediately. Sections 4, 8, 9, 10, 11, 12, 13, and 16 survive termination.

This Section applies to residents of California and supplements our Privacy Policy. DeData complies with the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020 (“CPRA”).

Categories of Personal Information Collected. In providing the Service, DeData collects identifiers (name, email, address, phone number, IP address), commercial information (subscription records), internet or other network activity (usage logs), geolocation data (optional, based on your input), and inferences drawn from the above. We collect this information directly from you, from your use of the Service, and from automated monitoring activities.

Business Purposes. We use personal information to provide the Service, process payments, communicate with you, comply with legal obligations, detect fraud, and improve our platform. We do not sell your personal information.

Your California Rights. As a California resident, you have the following rights, subject to exceptions under applicable law:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. If this practice changes, we will update this Section and provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: We use sensitive personal information (e.g., PII you submit for removal requests) only for the purpose of providing the Service.
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA/CPRA rights.

Exercising Your Rights. To submit a CCPA/CPRA request, email privacy@dedatalabs.org with the subject line “CCPA Request.” We will verify your identity before processing the request. You may authorize an agent to submit requests on your behalf by providing written authorization. We will respond to verifiable requests within 45 days (extendable by an additional 45 days with notice).

Shine the Light. California Civil Code § 1798.83 permits California residents to request, once per year, information about disclosures of personal information to third parties for their direct marketing purposes. Contact us at the address above to make such a request.

This Section applies to individuals located in the European Economic Area (“EEA”), United Kingdom, or Switzerland. DeData processes personal data subject to Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) in accordance with our Privacy Policy.

Legal Basis for Processing. DeData processes your personal data under the following lawful bases: (a) performance of a contract (providing the Service to you); (b) compliance with legal obligations; (c) legitimate interests (fraud prevention, security, product improvement); and (d) consent, where obtained.

Data Controller. For EEA users, DeData Privacy Labs acts as the data controller of your personal data. Contact: privacy@dedatalabs.org.

International Transfers. Your personal data is processed and stored in the United States. By using the Service, you consent to the transfer of your data to the United States, which may not provide the same level of data protection as your home country. Where required, DeData relies on Standard Contractual Clauses adopted by the European Commission as the transfer mechanism.

Your GDPR Rights. You have the right to access, rectify, erase, restrict processing of, and portability of your personal data, as well as the right to object to processing and the right to withdraw consent. To exercise these rights, email privacy@dedatalabs.org. You also have the right to lodge a complaint with your local supervisory authority.

Retention. We retain personal data for as long as necessary to provide the Service and comply with legal obligations. Upon account deletion we delete or anonymize personal data within 30 days, except where retention is required by law.

Availability Disclaimer.DeData’s Service is primarily designed for U.S.-based Data Brokers. Coverage of EU-based data brokers or surveillance databases is limited. EU users should review our supported-broker list before subscribing.

Entire Agreement. These Terms, together with our Privacy Policy and any additional terms for specific features (incorporated by reference), constitute the entire agreement between you and DeData regarding the Service and supersede all prior and contemporaneous understandings, agreements, representations, and warranties.

Amendments.DeData may modify these Terms at any time. We will provide notice of material changes by updating the “Last Updated” date above and, for changes that materially affect your rights, by email or in-app notification at least 14 days prior to the change taking effect. Continued use of the Service after the effective date of any amendment constitutes acceptance. If you do not agree to amended Terms, you must cancel your Subscription before the effective date.

Severability. If any provision of these Terms is found invalid, illegal, or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.

Waiver.DeData’s failure to enforce any right or provision of these Terms will not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorized DeData representative.

Assignment.You may not assign or transfer these Terms or any rights or obligations hereunder without DeData’s prior written consent. DeData may freely assign these Terms in connection with a merger, acquisition, reorganization, or sale of all or substantially all of its assets, with notice to you.

Force Majeure. DeData will not be liable for any failure or delay in performance resulting from causes beyond its reasonable control, including natural disasters, acts of war or terrorism, civil unrest, government actions, pandemic, power or internet outages, or third-party platform outages.

No Third-Party Beneficiaries. These Terms do not create any third-party beneficiary rights.

Notices. Legal notices to DeData must be sent to privacy@dedatalabs.org and, where required, by certified mail to: DeData, Inc., Legal Department, 1209 Orange Street, Wilmington, DE 19801, USA. Notices to you will be sent to the email address associated with your account.

Export Controls.You represent that you are not located in a country subject to a U.S. Government embargo or on a U.S. Government designated “Terrorist Supporting” country list, and that you are not listed on any U.S. Government list of prohibited or restricted parties.

Questions. For questions about these Terms, contact us at privacy@dedatalabs.org.