This policy explains what personal data the soldcomparables.com service collects, why, who receives it, how long it is kept and how you can exercise your rights. SoldComparables finds recorded sales of comparable domain names and builds a value estimate from them. To do that it needs very little about you: an email address, the names you search and, if you subscribe, billing details.
Who is responsible for your data
The controller of personal data is the administrator of the soldcomparables.com service. You can reach the administrator at [email protected] with any question about this policy, about your data or about a request under the rights described below. There is no contact form and no phone line. Email is the only channel, and we answer from the same address.
What data we hold
Account data
Your email address and a password stored as a one-way hash. We never store your password in readable form. When you sign up we send a 6 digit code to your email address to confirm that the address is yours. If you give your name, we keep it with the account.
Workspace data
Every account belongs to a workspace. We keep the workspace name, the members of the workspace and their roles (on plans with more than one seat), and, on the Broker plan, the logo you upload for white label reports and the company details you enter for invoices.
Searches and reports
The domain names you search, the filters you apply, the results returned, saved searches, saved reports, bulk appraisal lists and the portfolio view. These belong to your workspace. They are private to the workspace, they are never published on the site, they are never shown to other users and we never use them to buy, register or bid on names.
Billing data
Your plan, billing period, subscription status, invoice history and the last four digits and expiry month of your card. Full card numbers are entered on the payment processor's page and never reach our servers.
API data
On the Broker plan, the API keys you create (stored as hashes, so we cannot show a key again after it is created), and counts of API calls per billing period.
Technical data
IP address, browser type, pages requested and timestamps, kept in server logs to run and secure the service, and an audit log of exports on the Broker plan.
Anonymous searches
Anyone can run one search per day without an account. To count that search we store a hash of your IP address together with the date and a counter. The hash is not your IP address and is used only for this daily limit.
Why we use it and on what legal basis
- To create and run your account and deliver the plan you pay for, including searches, reports, exports and the API (performance of a contract).
- To send sign-in codes, confirmations and messages about your subscription and billing (performance of a contract).
- To enforce usage limits and the one search per day for visitors without an account (legitimate interest in fair use and in keeping the service available).
- To keep the service secure, detect abuse such as automated scraping, and fix errors (legitimate interest).
- To keep billing and tax records (legal obligation).
- To answer your emails, including correction requests about a recorded sale (legitimate interest).
We do not use your data for advertising. We do not sell it, rent it or share it for others' marketing. We do not build advertising profiles and we do not run advertising pixels.
Who receives your data
We share personal data only with service providers that help us run the service, and only the data each one needs. We describe them by category.
| Category of recipient | What they receive | Why |
|---|---|---|
| Hosting provider | All data stored by the service | To run the servers and database the service lives on |
| Payment processor | Email, billing details, card details you enter on their page | To take subscription payments and handle 3D Secure checks |
| Email delivery provider | Email address and the content of transactional emails | To deliver sign-in codes, receipts and account messages |
Each provider processes data on our instructions under a data processing agreement. We may also disclose data where the law requires it, for example to a tax authority or a court.
Some providers may process data outside the European Economic Area. Where that happens, transfers rely on adequacy decisions or standard contractual clauses.
Cookies
The service uses only essential cookies: a session cookie, a security token against cross-site request forgery and a preference cookie. There is no advertising or tracking cookie. Details are on the cookie policy page.
How long we keep data
- Account, workspace, searches and reports: for as long as the account exists. When you delete your account, they are deleted within 30 days, except where the next points apply.
- Billing records and invoices: for the period required by tax law, usually 5 to 10 years depending on the jurisdiction.
- Server logs: up to 90 days.
- The hashed IP counter for anonymous searches: up to 30 days.
- Emails you send us: up to 3 years after the matter is closed.
Deleting a saved report removes it from your workspace. It does not return usage to your plan limits, which count consumption in the billing period, as described in the terms of service.
Your rights
Under the GDPR and UK GDPR
If you are in the European Economic Area or the United Kingdom, you have the right to access your data, to correct it, to have it deleted, to restrict or object to processing based on legitimate interest, to data portability and to withdraw consent where processing relies on consent. You also have the right to lodge a complaint with your local data protection authority.
Under US state privacy laws
If you live in a US state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia or Utah, you have the right to know what personal information we hold, to access it, to correct it, to delete it and to opt out of its sale or use for targeted advertising. We do not sell personal information and do not use it for targeted advertising, so there is nothing to opt out of, but you may still send the request. We do not discriminate against anyone for exercising these rights.
How to make a request
Write to [email protected] from the email address of your account. We may ask you to confirm the request with a code sent to that address. We answer within one month (GDPR) or 45 days (US state laws), and we tell you if we need longer.
Much of your data you can manage yourself in the panel: you can export saved reports, delete searches and reports, remove members, revoke API keys and delete the workspace.
Data about sellers and buyers in recorded sales
Recorded sales contain the domain name, price, date, venue and a link to the public report that published the sale. They do not contain names of buyers or sellers. If you believe a recorded sale is wrong or concerns you, write to [email protected] and we will look into it.
Children
The service is a business tool and is not directed at children. You must be at least 18 to create an account. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
Security
We protect data with encryption in transit, hashed passwords and API keys, separation between workspaces and limited internal access. Details are on the security page.
Changes to this policy
When we change this policy, we update the date at the top. If a change materially affects how we use your data, we tell account holders by email before it takes effect.