Privacy

Privacy policy

Last updated: August 24, 2026

LookalikeAlert is operated by Optimaize (Dutch Chamber of Commerce number 94040338). This policy explains how we process personal data when you visit the website, create an account, protect a domain, receive alerts, contact us, or pay for the service.

1. Who is responsible for your data?

Optimaize is the data controller for account administration, billing, support, security, and operating LookalikeAlert. Contact us at info@optimaize.io. Security reports can be sent to info@optimaize.io.

2. Data we process

  • Account data: email address, name, preferred language, password hash, verification status, organization, and account role.
  • Monitoring data: protected domain names, discovered domain variants, public DNS and registration signals, public web responses, risk indicators, scan timestamps, findings, and follow-up status.
  • Billing data: subscription status and Stripe customer, subscription, price, and transaction references. Full card details are handled by Stripe and are not stored by LookalikeAlert.
  • Communications: messages and metadata you provide when requesting support, exercising privacy rights, or reporting abuse or security issues.
  • Technical and security data: IP address, request metadata, timestamps, browser or user-agent information, authentication events, and server logs needed to deliver and secure the service.
  • Consented analytics data: fixed page aliases, fixed signup and setup funnel events, consent state, and technical visit information processed by Google Analytics 4. We exclude query strings, verification tokens, personal data, protected domains, and internal record identifiers from analytics events.

3. Why we use this data

We process data to provide your account and monitoring service, generate and prioritize alerts, administer subscriptions, communicate with you, prevent abuse, protect the platform, meet legal obligations, and improve reliability. We do not sell personal data or use monitoring data for third-party advertising.

4. Legal bases

  • Contract: providing accounts, monitoring, alerts, support, and billing.
  • Legitimate interests: securing the service, preventing fraud, maintaining logs, and improving operations, balanced against your rights.
  • Legal obligation: tax, accounting, law-enforcement, and compliance requirements.
  • Consent: for optional GA4 measurement and where marketing communications are introduced and consent is required. You can withdraw analytics consent at any time through Cookie settings.

5. Service providers and disclosures

We share only the data needed with providers that support the service, including hosting and database infrastructure, Stripe for payments, Resend for transactional email, Google for consented GA4 measurement, and technical suppliers used for domain and public-internet queries. Providers process data under their own terms or contractual safeguards. We may also disclose data where required by law, to protect users and the service, or during a business transfer subject to appropriate safeguards.

6. International transfers

We aim to use European processing locations where practical. Some providers may process data outside the European Economic Area. Where required, transfers are protected through an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.

7. Retention

Account and subscription records are kept while your account is active and as needed afterwards for legal claims, fraud prevention, and accounting. Technical logs are kept only as long as reasonably necessary for security and operations. Consented analytics data is retained according to the GA4 property retention setting; your consent choice remains in your browser until you change it or clear site data. Where applicable, temporary result links are configured to expire after 14 days, evidence links after 30 days, and screenshots after 90 days. Public-domain findings may be retained for the duration of monitoring and a limited period afterwards so alerts and follow-up remain auditable.

8. Security

We use access controls, password hashing, encrypted transport, restricted administrative access, secure cookies, monitoring, backups, and data minimization. No internet service can guarantee absolute security. Please report suspected issues through our security page.

9. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing, and may withdraw consent without affecting earlier processing. Contact info@optimaize.io. We may verify your identity before acting. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

10. Domains and third-party information

The service examines publicly accessible domain and web information. Findings can contain details associated with third-party domain holders or infrastructure contacts. Customers must use that information only for legitimate brand-protection, security, reporting, and legal purposes.

11. Children

LookalikeAlert is a business service and is not intended for children under 16. We do not knowingly collect children’s personal data.

12. Changes

We may update this policy when the service, providers, or law changes. The date above shows the latest revision. Material changes will be communicated through the service or by email where appropriate.