Data Storage and Security Measures

We store your personal data to prevent misuse of Findmoby.io and, if necessary, to investigate any offenses. We take all necessary steps to ensure your personal information is secure.

Data Transfer to Third Parties

Personal data will not be transferred to third parties, except in cases where it is necessary to provide Findmoby.io services or when required by government authorities under legal obligations or criminal proceedings.

However, in line with data protection laws, we may share the following information with the holder of a target device (e.g., the owner of the phone number whose location is being sought) upon their request:

• IP address

• Email

• Browser information (browser name, version)

• Device type (Web, Mobile, Laptop)

• Operating System (Windows, Android, MacOS)

• Browser language

• Device screen size

Use of Personal Data

We do not permit third parties to use your personal data except in the situations described above. We use industry-standard security measures to protect your data, ensuring that your personal information remains private and secure.

Account and Payment Information

When registering an account or making a purchase on Findmoby.io, you will provide personal information, such as your email. This data is processed and stored securely. Payment information is also required for processing payments, and we work with trusted third-party payment providers. However, we do not store or collect sensitive financial information (such as credit card numbers); this is handled by the payment provider.

Upon registration, we may send a welcome email to verify your login credentials. Your account activity is password-protected, and it’s important that you take all necessary steps to protect the secrecy of your password.

Marketing Communications

Based on your consent, we may send you marketing emails, including:

• Product Updates (new version releases, feature updates, etc.)

• Tips and Tricks (e.g., getting started, educational content)

• Exclusive Deals (e.g., discounts, promo offers)

• Newsletters (industry updates)

• Findmoby.io Digest (monthly updates and popular content)

• Activation Reminders (for users who registered but did not purchase)

You may opt-out of marketing communications at any time through your account settings, but please note that operational emails (e.g., payment confirmations, updates) cannot be unsubscribed from.

Encryption and Data Security

All personal data is encrypted on Findmoby.io’s servers using advanced encryption technologies. We maintain a variety of security measures to safeguard your personal information.

Target Device Users

Target device users are not considered data subjects because they cannot be identified or linked to an individual based on the data collected from the target devices. This information is encrypted and used only to provide Findmoby.io services.

Payment Security

We prioritize payment security by cooperating with reliable payment service providers who meet our strict security standards. The following information is processed by the payment provider:

• Credit/debit card number

• Expiration date

• Full name

• Email address

We do not store any sensitive payment data; it is handled by the payment provider according to their privacy policies.

Automatically Collected Data

We collect certain information automatically as you navigate our website, including:

• Device connection data (e.g., IP address, device type)

• Log files (e.g., time spent on the site, pages accessed)

This information is used to analyze trends, improve the website, and enhance user experience.

Cookies and Tracking Technologies

Our website uses cookies to enhance your experience. Cookies help us track user trends and ensure you do not need to re-enter preferences on subsequent visits. Cookies contain a unique cookie ID that allows us to distinguish between different browsers.

You can choose to disable cookies through your browser settings, but please note that some website features may not function properly without them.

We may also use pixel tags (small image files) to track website usage and open rates of email communications.

Cookie Policy

For more detailed information, please refer to our Cookie Policy. If you choose not to accept cookies, certain website features may be restricted, and you may need to delete existing cookies from your browser.

Encrypted Data

We have implemented robust security measures—both hardware and software—to protect the information (including personal data) we control. Our procedures include software updates and network scanning, and we adhere to industry-standard practices for safeguarding data. We collaborate with third-party service providers and vendors who utilize encryption and authentication methods to maintain the confidentiality of your personal information. If your data is stored, it is housed on systems protected by firewalls, with access granted only to authorized personnel who are bound by a Data Processing Agreement (DPA).

We store all user personal data in an encrypted format. For this purpose, we employ the RSA asymmetric public-private key cryptosystem with a key size of 4096 bits (RSA) and the AES symmetric-key algorithm with a key size of 256 bits (AES).

The RSA system uses a public encryption key and a private decryption key. The public encryption key is stored in the database (DB) in an unencrypted format, while the private decryption key is encrypted using AES 256 in the DB. This encryption key is derived from the user’s password and a secret key, and it cannot be decrypted without the user’s password and secret key.

For user credentials, we store the hashed version of the user’s password, not the password itself. During sign-up, a unique RSA public-private key pair is generated for each user. These key pairs are encrypted using AES 256 and stored in the database.

Login Process: During login, the user’s password is used to decrypt their private key.

Encryption of Data: Data received from devices is transmitted securely over HTTPS. As soon as the data is received, we begin the encryption process on the server’s RAM (without storing it on the server’s disks). The data is encrypted using RSA with the user’s public key.

The encrypted data is then stored on our servers.

Decryption: Once the user’s private key is decrypted, we can decrypt the user’s data and present it to them.

Legal Matters

We value your privacy when using Findmoby.io. However, we may disclose your personal information stored in your account and on our servers if required for the following reasons:

1. To comply with legal obligations or processes;

2. To enforce and investigate potential violations of this Privacy Notice or Terms of Use, including the use of the Service for illegal activities;

3. To investigate suspected fraudulent activities;

4. To protect the rights, property, or safety of our Company, employees, customers, or the public.

In the event of a change in control of Findmoby.io (such as through a merger, sale, or liquidation), your personal data may be transferred to the new owner or successor. You will be notified of any such changes and can exercise your rights under GDPR. If the new owner posts a new Privacy Notice, you may update or delete your personal data as per their instructions.

As a data controller, we may share personal data with processors (e.g., payment providers under DPA) for specific purposes, such as processing payments or enabling telecommunications, which are necessary for using Findmoby.io.

We may transfer your personal data internationally to third-party service providers, who will process the data in compliance with GDPR and under a DPA.

In the event of a personal data breach, we will notify affected individuals without delay, unless the breach is mitigated by appropriate technical measures, such as encryption. If encryption protects the compromised data, we are not required to notify the individual. However, if the breach occurs due to weak credentials or poor password protection by the user, we are not responsible for the breach.

In the event of a personal data breach, we will notify the competent supervisory authority within 72 hours of becoming aware of it.

Where Your Personal Data is Stored

Generally, personal data provided by users and information collected from a target device are stored on servers located in Germany and the Netherlands. However, in some cases, this data may be stored outside the European Union (EU), including in Canada. We have implemented all necessary security measures to protect your personal data in line with best security practices, confidentiality, and protection standards. When we transfer your personal data to third-party service providers, we ensure that they adopt appropriate security measures to safeguard your data, as per our data protection agreements.

Your Rights as a Data Subject

1. Access
   You have the right to request an explanation of the personal data we process about you. Additionally, you may request a copy of your personal data that is being processed.

2. Data Portability
   You have the right to receive the personal data we hold about you, which you provided to us. You may also request that we transmit this data directly to another data controller in a structured, commonly used, and machine-readable format. We will transfer your data directly to another controller if technically feasible.

3. Restrict Processing
   You have the right to request that we temporarily or permanently stop processing all or some of your personal data.

4. Rectification
   You have the right to request the correction of any inaccurate or incomplete data we hold about you.

5. Erasure (Right to be Forgotten)
   You have the right to request the deletion of all personal data we hold about you. However, certain data may be retained as required by law or for legitimate business purposes.

6. Object to Processing
   You can object at any time to the processing of your personal data based on your specific situation. You also have the right to object to your personal data being processed for direct marketing purposes.

7. Right to Lodge Complaints
   You have the right to file a complaint regarding our data processing activities with the relevant data protection authorities.

8. Not Subject to Automated Decision-Making
   You have the right not to be subjected to decisions based solely on automated processing, including profiling, that could have a legal effect on you or significantly impact you.

9. Right to Confirmation
   You have the right to obtain confirmation from the controller regarding whether or not your personal data is being processed.

10. Right to Withdraw Consent
    You have the right to withdraw your consent to the processing of your personal data at any time.

If any of the above rights apply, you may contact us at the details provided at the end of this Privacy Notice. We will promptly act on your request and ensure compliance immediately.

Children’s Privacy

Findmoby.io is not intended for children under the legal age of adulthood in your country. We comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal data from children or minors. We encourage parents and legal guardians to monitor their children’s internet usage and instruct them not to provide personal information on our Website without permission. If we discover that we have collected personal data from a child under the age of 13, we will promptly delete this data unless required by law to retain it.

Target Device Data Processing

• Target Device Data
  Findmoby.io collects data from a target device when a location link is sent and the user allows their location to be tracked via their browser. The data collected includes the user’s address, which is transmitted only after they give explicit consent.

• Findmoby.io Obligations
  Findmoby.io implements appropriate technical and organizational measures to protect Target Device Data from unauthorized access, loss, destruction, or misuse. We limit access to this data to authorized personnel who need it to provide services. We process the data only in accordance with the instructions and will not use it for purposes other than specified. Upon account de-registration or at your request, we will cease the use of the data and destroy or return it, except where required to retain backup data or as permitted by law.

• Warranties
  You are responsible for the use of your account and any data submitted. We follow your configurations and instructions in processing the data.

• Indemnity
  You agree to indemnify Findmoby.io for any claims or losses arising from the processing of Target Device Data and other third-party personal data submitted through the platform.

Data Storage and Data Removal

The period for storing personal data is determined by statutory retention periods. Once the retention period expires, or if the data is no longer necessary, it is securely deleted or destroyed. Personal data will be stored only as long as required to fulfill the purpose of providing Findmoby.io services, unless extended retention is required by law.

In case of legal disputes, personal data may be stored for up to 180 days or longer if needed for legal claims or compliance with obligations. After the dispute is settled, the personal data will be deleted.

To opt out of email communications, you can click the opt-out button or contact us. We aim to comply with opt-out requests within 30 calendar days. To update your personal data, please reach out to us as instructed in the Privacy Notice.

Miscellaneous

Findmoby.io may update this Privacy Notice at any time. Any changes will be posted on the Website, and the date of the current version will be indicated. Changes will not affect personal data previously collected, unless specified.

If you disagree with any changes, please contact us as provided below.

This Privacy Notice is governed by the laws of Austria, and any disputes will be settled by Austria courts.