Privacy Policy | Disputed.ai

DISPUTED, INC. PRIVACY POLICY

Disputed, Inc. (the "Company") is committed to maintaining robust privacy protections for its users. Our Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service. For purposes of this Agreement, "Site" refers to the Company's website, which can be accessed at www.disputed.ai. "Service" refers to the Company's services accessed via the Site, in which users can fully manage their chargebacks and payment disputes. The terms "we," "us," and "our" refer to the Company. "You" refers to you, as a user of our Site or our Service. By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use (found here: disputed.ai/terms), and, subject to Sections V and VI below, you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

I. INFORMATION WE COLLECT

We collect "Non-Personal Information" and "Personal Information." Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, referring/exit pages and URLs, platform types, preferences you submit and preferences that are generated based on the data you submit and number of clicks. Personal Information includes your name, email and phone number which you submit to us through the inquiry process at the Site.

1. Information collected via Technology

To activate the Service you do not need to submit any Personal Information other than your email address. To use the Service thereafter, you may need to submit further Personal Information. However, in an effort to improve the quality of the Service, we track information provided to us by your browser or by our software application when you view or use the Service, such as the website you came from (known as the "referring URL"), the type of browser you use, the device from which you connected to the Service, the time and date of access, and other information that does not personally identify you. We track this information using cookies, or small text files which include an anonymous unique identifier. Cookies are sent to a user's browser from our servers and are stored on the user's computer hard drive. Sending a cookie to a user's browser enables us to collect Non-Personal information about that user and keep a record of the user's preferences when utilizing our services, both on an individual and aggregate basis. The Company may use both persistent and session cookies; persistent cookies remain on your computer after you close your session and until you delete them, while session cookies expire when you close your browser.

2. Information you provide us by registering for an account

In addition to the information provided automatically by your browser when you visit the Site, to become a subscriber to the Service you will need to create a personal profile. You can create a profile by registering with the Service and entering your email address, and creating a user name and a password. By registering, you are authorizing us to collect, store and use your email address in accordance with this Privacy Policy.

3. Children's Privacy

The Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at [email protected].

II. HOW WE USE AND SHARE INFORMATION

Personal Information: Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the servers for our email communications who are provided access to user's email address for purposes of sending emails from us. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy. In general, the Personal Information you provide to us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, provide technical support, and inform users about promotional offers. We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information: In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion. In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

III. HOW WE PROTECT INFORMATION

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

IV. YOUR RIGHTS REGARDING THE USE OF YOUR PERSONAL INFORMATION

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. You can also indicate that you do not wish to receive marketing communications from us by sending an email indicating STOP to [email protected]. Please note that notwithstanding the promotional preferences you indicate by either unsubscribing or opting out, we may continue to send you administrative emails including, for example, periodic updates to our Privacy Policy. If you are in the European Economic Area or the United Kingdom, additional rights apply to you. These are described in Sections V and VI below.

V. INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA

This section applies if you are in the European Economic Area (EEA) and the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") applies to our processing of your Personal Information. If this section conflicts with any other part of this Privacy Policy, this section prevails for those individuals.

Who is responsible for your data. Disputed, Inc., 131 Continental Drive, Suite 305, Newark, DE 19713, United States, acts as a data controller for Personal Information collected and processed for its own business purposes, including managing user accounts, operating its website, providing customer support, and administering its business operations.

When Disputed processes Personal Information on behalf of its customers in connection with chargeback management and payment dispute services, Disputed may act as a data processor, processing such information in accordance with the applicable customer's documented instructions and contractual agreements.

Where Disputed acts as a data processor, the applicable customer generally acts as the data controller and is responsible for determining the purposes and lawful bases of processing. Individuals seeking to exercise their data protection rights in relation to customer-controlled information should contact the relevant customer. Disputed will assist its customers in responding to such requests as required by applicable data protection laws and contractual obligations.

Our EU Representative. You may contact our EU Representative about our processing of your Personal Information, or to exercise your rights click here. EU supervisory authorities may also contact the EU Representative on our behalf. You may still contact us directly at any time.

Formiti Data International UK Ltd
6 Fern Road, Sandyford, Dublin, D18 FP98, Ireland
Email: [email protected]

Legal bases. We process your Personal Information for the purposes below. For each purpose, the table shows the data involved and the legal basis we rely on.

Purpose	Personal Information	Legal basis
Create and manage your account	Email address, username, password	Contract
Provide the Service (managing chargebacks and payment disputes)	Transaction and chargeback data, including customer identifiers, contact details, purchase records, and supporting dispute evidence.	Processed on behalf of our clients under their documented instructions and our Data Processing Agreement. Clients determine the applicable lawful basis.
Respond to enquiries and provide support	Name, email address, phone number, message content	Legitimate interests (responding to people who contact us)
Send marketing and promotional emails	Name, email address	Consent
Operate the Site and improve the Service	Cookie and usage data, browser, device, referring URL	Consent for non-essential cookies; legitimate interests for strictly necessary ones
Security, fraud prevention and legal compliance	Account and usage data	Legitimate interests; legal obligation

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before it. Where we rely on legitimate interests, you may object as described under "Your rights" below.

International transfers. Disputed, Inc. is based in the United States. In connection with providing our services, Personal Information originating from the European Economic Area (EEA) may be transferred to, stored in, or processed in the United States or other countries where we or our authorized service providers operate.

Where such transfers are subject to Chapter V of the GDPR, we use applicable lawful transfer mechanisms and safeguards to protect Personal Information. Where required and applicable, these safeguards include the European Commission's approved Standard Contractual Clauses (SCCs), together with any supplementary measures necessary to provide an appropriate level of protection.

Individuals may request additional information about the safeguards applicable to transfers of their Personal Information, including how to obtain a copy of relevant safeguards, by contacting us at [email protected].

Retention. We keep Personal Information in accordance with our retention policy, which is available on request. We keep it only for as long as needed for the purposes described in this Privacy Policy, including to meet legal, accounting and reporting requirements and to resolve disputes. When it is no longer needed, we delete or anonymize it.

Your rights. Under the GDPR, individuals in the European Economic Area have certain rights regarding their Personal Information, subject to applicable legal requirements and exceptions. These rights include:

Right of Access: Request access to the Personal Information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete Personal Information.
Right to Erasure: Request deletion of your Personal Information under certain circumstances.
Right to Restrict Processing: Request that we limit how your Personal Information is processed in certain circumstances.
Right to Data Portability: Request to receive certain Personal Information in a structured, commonly used, and machine-readable format and, where applicable, have it transferred to another organization.
Right to Object: Object to processing based on legitimate interests and to the use of your Personal Information for direct marketing.
Rights Related to Automated Decision-Making: Where applicable, you have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects, except where permitted by applicable law and subject to appropriate safeguards.

Exercising Your Rights. To exercise any of these rights, you may contact Disputed, Inc. directly at [email protected], click here, or contact our EU Representative.

Where Disputed acts as a data controller, we will review and respond to requests in accordance with applicable GDPR requirements, generally within one month of receipt, subject to permitted extensions.

Where Disputed processes Personal Information on behalf of a customer acting as the data controller, individuals should generally direct their requests to the applicable customer. Disputed will assist the customer in responding to such requests as required by applicable law and contractual obligations.

We may request additional information to verify your identity before fulfilling a request where necessary.

Complaints. If you have concerns about how Disputed, Inc. processes your Personal Information, you may contact us at [email protected] or contact our EU Representative using the information provided above.

You also have the right to lodge a complaint with a data protection supervisory authority in the European Union, particularly in the EU Member State where you reside, work, or believe an infringement of the GDPR has occurred. You are not required to contact Disputed before submitting a complaint to a supervisory authority.

VI. INDIVIDUALS IN THE UNITED KINGDOM

This section applies if you are in the United Kingdom and the UK GDPR and the Data Protection Act 2018 apply to our processing of your Personal Information. If this section conflicts with any other part of this Privacy Policy, this section prevails for those individuals.

Who is responsible for your data. Disputed, Inc. (at the address given in Section V) is the controller of your Personal Information. We are not established in the United Kingdom. We have therefore appointed Formiti Data International UK Ltd as our representative in the UK under Article 27 of the UK GDPR.

Our UK Representative. You may contact our UK Representative about our processing of your Personal Information, or to exercise your rights. The Information Commissioner's Office (ICO) may also contact the UK Representative on our behalf. You may still contact us directly at any time.

Formiti Data International UK Ltd
Grosvenor House, 11 St Paul's Square, Birmingham, B3 1RB, United Kingdom
Email: [email protected]

Legal bases, retention and your rights. The table of purposes and legal bases, the retention approach and your rights are the same as in Section V, applied under the UK GDPR.

International transfers. Disputed, Inc. is based in the United States. Personal Information originating from the United Kingdom may be transferred to, stored in, or processed in the United States or other countries where we or our authorized service providers operate.

Where such transfers are subject to the UK GDPR's international transfer requirements, we use applicable lawful transfer mechanisms and safeguards. Where required and applicable, these may include the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses, together with any supplementary measures necessary to protect Personal Information.

Complaints. If you have concerns about how Disputed, Inc. processes your Personal Information, you may complain to Disputed, Inc. by clicking here, contacting us at [email protected], or contacting our UK Representative using the contact information provided above.

You also have the right to lodge a complaint with the United Kingdom's Information Commissioner's Office (ICO), the independent supervisory authority responsible for enforcing UK data protection laws.

Complaints may be submitted through the ICO's website at https://ico.org.uk/make-a-complaint/.

You are not required to contact Disputed before exercising your right to complain to the ICO.

VII. LINKS TO OTHER WEBSITES

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

VIII. CHANGES TO OUR PRIVACY POLICY

The Company reserves the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on our site. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

IX. CONTACT US

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to [email protected].