Privacy Policy
Last updated: 19 October 2026
In short: we hold your email, your full legal name, your country of residence and the records needed to file removal requests. We don’t sell data, we don’t run advertising trackers, and we keep the legal records only as long as we need them. If you ask us to delete your account, we will — except for the records we must keep as evidence that a removal request was filed.
1. Who we are
BrandProtector.club (the “Service”) is operated by JBS Productions (“we”, “us”, “our”). For the purposes of data protection law, we are the controller of the personal data described in this policy.
Contact for anything privacy-related: admin@brandprotector.club or our support Discord.
2. What we collect
| Data | Why we have it |
|---|---|
| Account data Email address, password (hashed), verification status |
To create and secure your account, send verification and password-reset emails. |
| Legal identity data Full legal name and country of residence |
Copyright removal requests are legal notices that must identify the copyright owner or their authorised representative. Without these we cannot file on your behalf. |
| Authorisation records That you agreed to file through us, to our Terms, and the date and time of each |
To evidence that we had your authority to submit a notice in your name. |
| Brand and scan data Stage names, aliases, the profiles and domains you allowlist, scan results and URLs we find |
To run scans, score results and prepare removal requests. |
| Submission and outcome records URLs submitted, dates, message identifiers, reference numbers, rejection reasons, recheck results |
To track requests, verify outcomes and answer any dispute about what was filed. |
| Payment records Token purchases and balances (card details are handled by our payment processor, not by us) |
To charge for scans, keep accounting records and handle refunds. |
| Technical data IP address, browser user agent, session cookies, server logs |
To keep the Service secure, prevent abuse and diagnose faults. |
We do not knowingly collect data about anyone under 18. The Service is for adults only.
3. Our lawful bases
- Contract — to provide the Service you signed up for, including running scans and filing the requests you approve.
- Legal obligation — keeping records of notices submitted, and accounting records.
- Legitimate interests — keeping the Service secure, preventing fraudulent or abusive submissions, and defending legal claims. We balance this against your rights.
- Consent — where we ask for something optional. You can withdraw consent at any time.
4. Who we share it with
We share the minimum necessary, and only with:
- Search data providers — we send your stage names and aliases as search queries so we can find results. We do not send your legal name, email or country to them.
- Google — when you approve a delist request, the notice we send contains the legal name and country of the copyright owner, our contact details, and the URLs. Google may forward the notice to the Lumen database, which publishes notices after hiding contact details such as phone number, email and address.
- Hosting providers and websites — where you approve a host takedown, the notice contains the same identity information.
- Payment processor (PayPal) — to take payment and handle refunds.
- Email, hosting and infrastructure providers — to operate the website, the scanning engine and our mailbox.
- Discord — if you contact us through our support server, Discord processes that conversation under its own terms.
- Authorities — where we are legally required to disclose, or to establish or defend a legal claim.
We do not sell your personal data, and we do not share it for advertising.
5. International transfers
Some of the providers above are based outside the UK/EEA, in particular in the United States. Where data is transferred, we rely on the safeguards those providers put in place (such as standard contractual clauses) or on a legal derogation where one applies.
6. How long we keep it
- Account and profile data — while your account is open, then up to 12 months after closure.
- Identity and authorisation records, submission and outcome records — up to 6 years after the request was filed. These are the evidence that a notice was validly submitted and by whom; without them we could not defend a claim or show that a request was made with authority.
- Scan findings — while your account is open. You can delete individual brands or ask us to delete findings at any time.
- Server logs — up to 90 days.
- Payment records — as long as tax and accounting rules require.
7. Your rights
You have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate data corrected — for example an old legal name;
- ask us to delete data we no longer need (with the record-keeping exception in section 6);
- ask us to restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where we relied on it;
- complain to a supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).
To exercise any of these, email admin@brandprotector.club. We respond within one month, and may ask you to verify your identity first. Asking us to delete identity records will usually mean we can no longer file removal requests for you.
8. Cookies
We use cookies that are necessary for the Service to work:
- Session and login cookies — to keep you signed in. A “remember me” session lasts up to two weeks; otherwise it ends when you log out or close the session.
- Preferences — such as screen options, kept for up to a year.
- Security cookies — short-lived, used during signup and login to prevent cross-site request forgery and automated abuse.
We do not use advertising or cross-site tracking cookies. If a page embeds third-party content (for example an embedded video), that third party may set its own cookies once you interact with it.
If you leave a comment on the site (where comments are enabled), you may opt in to saving your name, email and website in a cookie so you don’t have to re-enter them. That cookie lasts one year.
9. Security
Passwords are stored hashed, the site runs over HTTPS, and access to the production systems is limited. No system is perfectly secure, so we cannot guarantee absolute security — but we don’t keep more than we need, which is the strongest protection there is.
10. Automated processing
Scan results are scored automatically by confidence so you can review them in a sensible order. No decision that affects your legal position is made automatically: nothing is submitted to Google or to a host until you approve it.
11. Uploaded media
If you upload images to the site, avoid files containing embedded location data (EXIF GPS), because visitors may be able to extract it. We don’t require image uploads to use the Service.
12. Changes to this policy
If we change how we handle data, we’ll update this page and its date. Material changes will be communicated by email or in the dashboard.
13. Contact
BrandProtector.club — JBS Productions
Email: submissions@brandprotector.club
Support: discord.gg/Jh6pPAmd8m