Privacy policy

CSM Forensics LLC, which operates WhoisToolkit (“Company”), respects your privacy and is committed to protecting it. Please read this Privacy Policy carefully to understand how Company collects and uses your personal information and data. This Privacy Policy covers all Personal Data that we receive from various sources, as outlined below. By using or accessing Company’s website(s), or by engaging in transactions with Company, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent to our collection, use and disclosure of your information in the manner described herein. If you do not agree with this Privacy Policy, please do not use this website or transact business with Company.

For purposes of this Privacy Policy, “Personal Data” may include any information that can be used to identify or locate you, such as your name, address, IP address, mailing address, contact information, email address or phone number and other information you provide to us. Both federal and state law in the United States define Personal Data or Personal Information, as do the laws of Canada, the European Union, and other countries and jurisdictions. This Privacy Policy is intended to include the most expansive definition. However, please recognize that your rights related to Personal Data, and how Personal Data is defined, differs somewhat from state to state and country to country.

Changes to Privacy Policy. We review this Privacy Policy regularly and may update it from time to time. We will post any changes on this page and may also provide notice of material changes to our Privacy Policy on our home page. If you object to any changes to this Privacy Policy, you may discontinue use of our website. Each time you visit the website or transaction business with Company, you agree that the current version of this Privacy Policy applies.

• Contact information (which may include name, physical address, telephone, company, and email address);
• Other individual identifiers, including phone number, age or date of birth, gender, and other contact information that you voluntarily transmit with your communication to us;
• Payment information, such as credit card type or number or bank account number. Please note that we do not store credit card numbers and all credit card processing is done by third parties;
• Information regarding your electronic device(s) and IP address;
• Internet use information;
• Regulatory information (to satisfy regulatory obligations such as tax and other reporting obligations).

Our collection of most of the Personal Data addressed herein is completely transparent. This means that you will know when and how it is happening. For example, when you fill out an online form, or submit information on your own. In this manner, we can only gather the information you voluntarily provide. If you object to, limit our processing of certain information of this nature, you may not be able to easily and efficiently use all of the features of the website. By providing us with this information you expressly agree to our collection, use, storage, and disclosure of it as explained in this Privacy Policy.

Our collection of other types of information (typically that is technical in nature such as IP Address, web browser information, cookies, etc.) may happen without your express knowledge, but you hereby consent to it. This means that you will not necessarily know when and how it is happening. However, we can only gather the information through your voluntary interactions with us through our website or SaaS. If you object to or limit our processing of certain information of this nature, you may not be able to easily of efficiently use all of the features of the website.

We collect Personal Data in three possible ways: (1) when you visit our website; (2) when you submit information directly; (3) from third parties.

Data collected through our Website.

We collect data, such as name and email address, through our website when you voluntarily provide it to us through “Contact Us,” or other similar type forms. We may also automatically collect other, technical data, such as IP address, web browser, operating system, window size, window resolution, or IP location, when you surf our website.

We may use tracking technologies such as cookies to collect information from your web browser through our servers or filtering systems when you visit our website. Cookies are small text files placed on a user’s computer with the user's browser to collect standard internet log information and to enable our website understand user's activities on the website. We may use cookies to: (1) keep you signed in on our website; (2) enable website features for you; (3) help us understand how you use our website and what products or services may be most relevant to you; (4) provide analytics to improve website performance and effectiveness; and (5) store user preferences. Cookies may also be set within emails in order to track how often our emails are opened.

You can change your web browser settings at any time to stop accepting cookies or to prompt you before accepting a cookie from the sites you visit. If you do not accept cookies, however, our website may not function properly for you, and you may not be able to use some sections or functions of our websites. To learn more about cookies and how to manage and delete them, visit http://www.allaboutcookies.org.

Information collected may include but is not limited to your browser type, your operating system, your language preference, any referring web page you were visiting before you came to our site, the date and time of each visitor request, and information you search for on our sites. We can also track the path of page visits on a website and monitor aggregate usage and web traffic routing on our sites.

Data collected from marketing partners.

We, or our customers, may also obtain marketing data from third parties that we use to inform our service offerings, including new implementations and developments. We may also use the contact information provided to us by our customers to communicate information about our services, which may include marketing our services. These third parties maintain their own privacy policies to which you are required to consent prior to their sharing any information with us.

Data collected from Third Party Platforms.

If you access our website or communicate with us using your account or account credentials from a third-party owned or operated platform/service (e.g., Amazon, Apple, AWS, Facebook, Google, Twitter, etc.), post content from our website to a social network, or use various social media features (e.g.,“Like” button), we may process certain information from the third parties, such as your username, “likes,” location, birthday, comments and reviews, preferences, network reach and influence, and any other information you provided to the third parties in connection with your account. Depending on your account and privacy settings, we may also be able to see information that you post when using these third parties whether or not you are an active customer. We may also collect Personal Data about you from our third-party service providers who provide us with e-commerce and/or technical related associated with functionality and purposes of the website. The information you post or provide to third-parties, as well as the controls surrounding these disclosures are governed by the policies of these third parties.

Special Considerations for Children

Company’s website is not intended or designed to be used by anyone under the age of 13. It is not meant to be attractive to anyone under the age of 13, or to have any value or use by anyone under the age of 13. Company does not collect Personal Data from any person it knows to be under the age of 13. If you are under 13, DO NOT TRANSACT WITH US THROUGH THIS WEBSITE, AND DO NOT SEND ANY PERSONAL DATA. IF YOU ARE BETWEEN THE AGES OF 13 AND 17, DO NOT USE THE WEBSITE UNLESS YOU ARE SUPERVISED BY A PARENT/GUARDIAN OR HAVE RECEIVED PERMISSION FROM YOUR PARENT/GUARDIAN.

We may use and process Personal Data for any purpose that is permitted under applicable data protection laws in accordance with this Privacy Policy. “Processing” of Personal Data includes collecting, recording, organizing, structuring, storing, altering or modifying, retrieving, transmitting, disclosing or otherwise making available to third parties, deleting, and otherwise using or dealing with your Personal Data. We may process your Personal Data with or without automatic means.

These purposes include:

Our business purposes. Including providing our products and/or services to our customers; addressing customer service issues; processing invoices and payments; planning and conducting marketing activities, tradeshows, trials, consultations, seminars, webinars, and demonstrations; responding to inquiries; conducting web analytics, security monitoring, and business operations and administration; and addressing tax and other regulatory requirements.

Purposes related to our software products. These purposes include licensing and operation; remote management; education and information service; training; webinars; communication; customer service; system monitoring and data security. We use Personal Data to enable use of software features and related services, including through use of third-party service providers. We also use Personal Data to communicate with our users to inform them of software updates and enhancements, educational information, available software features and modules, and other information that may helpful or informative for our users.

Marketing. Company may send users and prospective customers marketing communications to inform them of new products, services, promotions, or other special events or offers that might be of interest to them, which may include information about products and services of companies that we partner with (“Special Offers”). When you register for one of our products or services, or submit an online inquiry, you consent to receiving communications about our Special Offers. In connection with Special Offers, we may ask for contact information or other Personal Data. If you would like to stop receiving information about Special Offers from Company, please see the “YOUR RIGHTS RELATING TO YOUR DATA” section of this Privacy Policy below.

For the Protection of Company and Others. If Company, in good faith, determines that you have used the service to menace, threaten, harass, intimidate or otherwise deceptively pose as another person, or in any other way in violation of law, or if you attempt to use the website or purchase or use a product for any unlawful means, you have no expectation of privacy and we may use and disclose any and all information for the protection of Company and others.

Pursuant to Law, Rule or Regulation. If required or permitted to do so by law or if, in good faith, Company believes that such action is necessary to: (1) comply with laws and regulations or with legal processes; (2) protect and defend Company’s rights and property or prevent fraud; (3) protect Company against abuse, misuse or unauthorized use of Company’s products or services; (4) protect the personal safety or property of our personnel, users of our website or the public; and/or (5) comply with tax reporting requirements, then the Company may use and disclose any and all information as needed. The servers that serve our website automatically identify a computer by its IP address.

Aggregated and de-identified data. We may anonymize data to create statistical data or system usage data, by removing all personal identifiers and/or aggregating your data with other’s data so that it is not identifiable as to any particular person. Such de-identified data may be retained and used by Company to improve its products and services and for other proper purposes, provided that such retention and use is permitted by applicable laws.

Legal basis. We base our processing of Personal Data on the need to perform our contractual obligations under our license agreements and our legitimate activities as a provider of software and related services. We also process Personal Data to comply with applicable law and to exercise our legal rights. We may also use your Personal Data for internal purposes, including auditing, data analysis, system troubleshooting, and research. In these cases, we base our processing on legitimate interests in performing the activities of the organization.

No sale of Personal Data. We never sell or rent Personal Data to third-parties.

Disclosures of Personal Data. We may disclose or share your Personal Data with other parties in the following circumstances:

Our business purposes. Including providing our products and/or services to our customers; addressing customer service issues; planning and conducting marketing activities, tradeshows, trials, consultations, seminars, webinars, and demonstrations; responding to inquiries; conducting web analytics, security monitoring, and business operations and administration; and addressing tax and other regulatory requirements.

Third-party service providers. We use third-party service providers (or subprocessors) to process Personal Data to facilitate your use of our products and services and in the operation of our business. This includes providing Personal Data to third parties for their processing in performing functions on our behalf, particularly the functions listed above in the “HOW WE USE YOUR DATA” section. These functions include collecting debts, hosting software, performing security services, analyzing data, performing surveys, administering our website, and/or providing technical support services. These third-party providers will be contractually and/or legally required to protect Personal Data from additional processing (including for marketing purposes) and transfer in accordance with applicable laws.

Payment Transactions. Company uses third-party payment processors such as Stripe or PayPal. You authorize Company to collect and share with third-party processors your personal information including full name, date of birth, physical address, email address and financial information, and you are responsible for the accuracy and completeness of that data.

Compliance with law and protecting our legal rights. We may disclose your Personal Data to regulatory bodies if we have a good-faith belief that doing so is required under applicable laws or regulations. This may include submitting Personal Data required by tax or other governmental authorities, or lawfully requested by governmental agencies, including law enforcement and judicial authorities. We may also disclose your Personal Data in order to exercise or defend our legal rights; to take precautions against liability; to protect the rights, property, or safety of Company or any individual or third party; to maintain and protect the security and integrity of our information system; to protect Company against fraudulent, abusive, or unlawful acts; or to investigate and defend Company against third-party claims or allegations.

Corporate Transactions. If a third party acquires all or substantially all of the assets of, or ownership interests in, Company whether by merger, acquisition, reorganization or otherwise, Company may transfer its database, including all Personal Data contained therein, to the acquiring entity.

Aggregated and de-identified data. We reserve the right to disclose aggregated user statistics as well as non-personally identifiable information (such as anonymous usage data), in order to describe our services to prospective partners, licensees, advertisers, and other third parties.

We may store Personal Data that we have collected (through the means described above) on our premises and in our information system at our facilities, in third party data centers, in the systems of third-party service providers, and in cloud storage solutions. Company stores all information in state of the art physical storage facilities and cloud storage. In doing so, Company uses appropriate physical, organizational and technological measures to protect the Personal Data you provide to us against loss or theft, and unauthorized access, disclosure, copying, use, or modification. This includes limiting access on a “need-to-know” basis.

However, no electronic data transmission can be guaranteed to be secure from access by unintended recipients and Company will not be responsible for any breach of security unless this breach is due to its negligence. Although we are committed to employing reasonable technology in order to protect the security of our Website, even with the best technology, no website is 100% secure. In transacting business with us through our website, you assume the risk inherent in transacting business online.

To offer our website, and SaaS to you, Company may rely on plugins and services from third parties such as internet service providers, email service providers and plugins, calendar plugins, Customer Relationship Management (CRM) systems, credit card processors, and third party data storage. To the extent these providers have access to your Personal Data, we will require that they are legally or contractually committed to comply with applicable privacy laws, In the case of credit card processors, we require that they be PCI DSS-compliant. However, we cannot guarantee with certainty that the computer systems and storage systems whereon these services are offered will not be accessed by unauthorized parties. This is a risk inherent in providing any information, or conducting any business, online. In transacting business with us through the Website, you assume the risk inherent in transacting business online.

Our cloud-based software and mobile apps are stored in and run from the cloud. Where third parties are used to host such products, we use third parties who meet required privacy and security standards.

Company uses technical and organizational measures to protect the Personal Data that we store, transmit, or otherwise process, against accidental or unlawful destruction or disclosure, loss, alteration, or unauthorized access. Our security controls and risk management program and processes are designed to implement appropriate technological and organizational measures to ensure a level of security appropriate to the risks. We regularly consider appropriate new security technology and methods. Security measures implemented include:

• Web and database servers are protected using firewalls;
• Passwords used for account registration require minimum password strength attributes;
• User access is tracked;
• Role-based security is applied to system access;
• Use of data encryption;
• Vendor-supplied patches are reviewed and tested for compatibility before installation;
• Regular system backups are made;
• Regular maintenance is performed on systems;
• Systems are monitored for security;
• All Company employees are contractually obligated to maintain the confidentiality of Personal Data accessible through their employment; and
• All Company employees are required to attend regular security and awareness training.

Company processes Personal Data for a reasonable period of time to fulfill the processing purposes mentioned above. Personal Data is then archived for time periods as required or necessitated by law or legal considerations. Company reserves the right to delete a customer’s data, including Personal Data provided by that customer, from its system after 30 days from the date of termination of its agreement with the applicable customer. Company also deletes Personal Data in response to an individual’s request, as set forth in the “YOUR RIGHTS RELATING TO YOUR DATA” section below.

Company reserves the right to retain usage data relating to our products and services, as well as data that has been anonymized and/or aggregated, to the extent permitted by applicable laws. With respect to any Personal Data collected by us for marketing or for our own internal purposes, we will retain that data for a reasonable time in order to fulfill those purposes.

We regularly review our retention policy to ensure compliance with our obligations under data protection laws and other regulatory requirements. We regularly audit our databases and archived information to ensure that Personal Data is only stored and archived in alignment with our retention policy.

If you wish to opt out from any of the uses of Personal Data that are specified in this Privacy Policy, except in the case of legal proceedings or where your data is required for tax and transactional purposes, please contact us as described in “COMPANY’S CONTACT INFORMATION” section below. Please note that your subsequent disclosure of Personal Data to us nullifies any prior opt-out request.

Company does not discriminate against those who opt-out. However, opting out may prevent us from conveniently and efficiently providing further, product support services and information to you.

Unsubscribing to marketing communications. In particular, if we are sending you email communications of a marketing nature, an ‘unsubscribe’ option is provided in the footer of every email. You may also contact us directly to unsubscribe to marketing emails or other marketing communications, at the contact information set forth in the “COMPANY’S CONTACT INFORMATION” section below. If you have agreed to receive marketing communications, you may always opt out at a later date.

California Consumer Notice. Pursuant to the § 1798.110 of the California Consumer Privacy Act (“CCPA”), Company does not meet the requirements of Business as defined in § 1798.140(c). Therefore, it is not required to comply with the CCPA. Similarly, Company does not meet the requirements necessary for compliance with Cal. Civil Code §1798.83, otherwise known as the “Shine the Light” law.

Our website may contains links to other websites. This Privacy Policy applies only to Company, so if you click on a link to another website, you should read their privacy policy.

If you have any questions about this privacy policy or your Personal Data that we hold, would like to cease receiving marketing materials from us, have any complaints, or would like to exercise any of your other rights related to your Personal Data, please contact us: