Privacy Policy
Effective Date: October 20, 2024
We take data privacy seriously. Built into the application is the anonymous storage of data. In addition, the company never shares or sells user information. Unlike some companies, our customers are not the product. Bot Buster was created to protect the customer.
Our software as a service platforms and captchas are used to block bots, prevent fraud and analyze website usage (the "Services"). When you use our Services or access our websites, www.botbuster.io/csapp (the "Captcha Solver Site") or www.botbuster.io/woapp (the "Website Owner Site"), collectively, the "Sites", we, Bot Buster, LLC (collectively, "we," "our" or "us"), collect some information from you.
The safety of your Personal Information is important to us. As used herein, "Personal Information" means any information that may be used to identify you, including your name, email address, phone number, and billing information. This Privacy Policy explains how we collect, process, and store your personal information.
Specifically, this Privacy Policy will address:
1. WHAT INFORMATION WE COLLECT ABOUT YOU
Captcha Solvers will have their email address collected if it exists on a form or login for security and communication purposes. A Captcha Solver can input their phone number on the Captcha Solver Site but this is optional to enhance security and communication. We do not store names or any other personal identifying information of captcha users so that people remain anonymous. During the course of solving a captcha additional details from the web browser are collected to identify and block fraud. These items are listed in section 1.3 below.
1.1 Information We Collect Directly — Business Users on Website Owner Site
If you wish to use the Services, we require that each user provide us with their first and last name, email address, phone number and, optionally, team.
If you are the creator of the master account for the Services, we also require that you provide us with necessary transaction information, such as a credit card or other type of payment information, address and telephone number. Payment software is managed by our 3rd party software provider.
Should you choose to directly contact us, we will collect your name and any contact information you may provide us with, such as your email address, telephone number or mailing address.
When you use the Sites or Services, our servers automatically record information, including information that your browser sends whenever you visit a website or your mobile app sends when you are using it. This log data may include your Internet Protocol address, the address of the web page you visited before using the Site, your browser type and settings, the date and time of your use of the Site or Services, information about your browser configuration and plug-ins, and language preferences. We may collect this information.
We may collect information about the device you are using the Site or Services on, including what type of device it is, what operating system you are using, device settings, application IDs, unique device identifiers, and crash data.
WiFi and IP addresses received from your browser or device may be used to determine approximate location.
1.2 Company Information We Collect
After initial payment, every account will be required to fill out a company profile.
The data collected in this step includes Company Name, Headquarter Location, Industry, Company Type, Company Size, Inception Date, MFA Capabilities, Average Monthly Traffic, Customer Type and if the company is E-commerce, Government Contractor, a seller of software, a local government, the federal government or offers remote work are other options identified. This is used to help Bot Buster understand its customer base. This information is used only to increase market share.
1.3 Information We Collect Automatically — Captcha Users
When individuals complete captchas, certain information is collected.
Depending on the type of captcha, the email address may be collected so that each captcha solver can access their captcha history and configure the captcha how they like. Captcha solvers can create an anonymous account on the Captcha Solver portal anytime to get access to these settings and more to fight fraud and make captcha solving a more enjoyable experience. Within the portal a user can choose to block their email address from being collected and remove their email address from all of their previous submissions. This will have the effect of retrospectively and while in effect removing the history of captcha submissions permanently. As the data will no longer exist the Captcha Solver site will no longer be able to show this history.
Additional information collected from a Captcha Solver's browser at the time of captcha submission and reason for collection are below:
The browser fingerprinting functionality uses an open source software called ThumbMarkJS whose details can be found here: https://www.thumbmarkjs.com/. This software is used to gather information from the browser using local JavaScript for the purpose of creating unique digital fingerprints. The information gathered by this software is stored in Bot Buster's systems only and available at any time by going to the Sites.
This information is stored so that both the Captcha Solver and Website Owner can identify fraud and protect user accounts. Greater visibility into information exposes fraud and allows for a more detailed history. None of this data is shared with any other party. Only each individual captcha solver, the company whose website the captcha submission was made from have access to captcha submission data.
Should you choose to directly contact us, we will collect your name and any contact information you may provide us with, such as your email address, telephone number or mailing address.
We may collect information about the device you are using the Captcha Solver Site or Services on, including what type of device it is, what operating system you are using, device settings, and IP. This is used only for monitoring and troubleshooting purposes to ensure services run successfully.
WiFi and IP addresses received from your browser or device may be used to determine approximate location.
If you submit any information, data and/or Content through the Site or Services, we also collect and store this information, data and/or Content (as this is a main piece of the Services).
The Services may include third-party advertising, links to other sites, and other content from third-party businesses. These third-party sites, businesses, advertisers, or advertising companies working on their behalf, may use device identifiers and personal identifiers to measure the effectiveness of their ads, personalize or optimize advertising content and to track users who link from their respective websites to the Services. We do not have access to or control over such identifiers that these third parties may use. We are not responsible for the privacy practices or the content of these third-party sites. You are encouraged to review the privacy policies of the different sites you visit.
1.4 Information We Optionally Collect — Captcha Users
If you wish to upgrade your account, we also require that you provide our service provider with necessary transaction information, such as a credit card or other type of payment information, name, and address.
We optionally collect a phone number of the user for notification purposes. To give users a discount in price we allow users to submit their industry, birthday, sex, city, education, native language, marital status, income range, number of children and citizenship.
Bug submissions and feature requests can also be submitted from the Captcha Solver site. Images and text may be sent to us for those purposes. This data will be stored in our 3rd party service provider Gitlab.
1.5 Payment Information We Collect
We use Stripe to process credit card payments on both Captcha Solver and Website Owner sites. As such, Bot Buster does not store or hold any credit card information of our customers but instead this data is managed by Stripe. Stripe information can be found in Section 5 below.
2. HOW WE USE THE INFORMATION WE COLLECT
We use the Information we gather for any or all of the following reasons:
- To provide the Sites and Services; to communicate with you about the Site and Services or changes to the Terms of Service and this Privacy Policy; to respond to inquiries; and for other customer support purposes.
- To combat fraud using solutions developed by us.
- To provide to regulatory agencies as legally required.
- To personalize and customize the Sites and Services to better suit your preferences, to offer personalized help and instructions, and to otherwise improve your experiences with the Sites and Services.
- For marketing and promotional purposes to our business owner customers. We may send you special offers and promotions, or to otherwise contact you about products or information we think may be of interest. You may opt out of these offers and promotions by contacting us at the address or phone number listed below. We will never market or promote to captcha solvers using their email addresses or phone numbers.
- To improve the Sites and Services, and to inform you of these improvements.
3. HOW WE SHARE YOUR INFORMATION
We may disclose the Personal Information that we collect in the ways described above for the reasons shown below:
Business Mergers. If we are bought out by or merged with another company, or we are involved in a bankruptcy proceeding, we may transfer the Personal Information we have collected from you to the other company.
In Response to Legal Process. We may disclose the Personal Information we collect from you in order to comply with the law, a judicial proceeding, court order, or other legal process.
To Protect Us and Others. We reserve the right to disclose Personal Information gathered from you if we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of the Terms of Service or this Privacy Policy, or in the course of litigation which we are a party.
Required by Service Providers. We may also share your personal information with our service providers who perform services on our behalf, for the purposes described in this Privacy Policy. These are our hosting providers, backend infrastructure providers, payment providers, infrastructure monitoring providers, software repository providers, message sending service providers, support and contact request management service providers, and user database management service providers. We contractually require these service providers to both keep your personal data confidential and not use it for any purpose(s) other than those necessary for the performance of our agreement with them. Our major service providers are listed in Section 5.
We may also use your Personal Information to send you newsletters, offers or other marketing emails to keep you up to date with events and products that may be of interest. Depending on the nature of your interaction with us and the laws of the country where you live, you may have actively given your consent for this by opting in or we may be entitled to rely on legitimate interests to contact you with relevant marketing information. The opportunity to opt out of future marketing emails will always be provided, and information on how to do this is given when your Personal Information is collected and on every marketing email sent.
4. HOW WE PROTECT YOUR INFORMATION
We want to make sure that your Personal Information is properly protected. We implement a variety of technical and security measures to protect your Personal Information from unlawful destruction, loss, alteration, and unauthorized disclosure or access. We regularly review the information collection, storage and processing practices, including physical security measures, provided by our hosting providers.
Our staff will never proactively reach out to you and ask for any personal account information, including your password. If you think that any of your passwords might have been compromised, then please let us know immediately at support@botbuster.io.
However, please be aware that despite our best efforts, no data security measures can guarantee 100% security. You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, keeping your log-in and password private. We do offer 2-factor authentication and recommend you enable this for added account security.
You agree that we are not responsible for lost, stolen, or compromised passwords or for any activity via unauthorized password activity. You also agree that we are not responsible for actions or inactions taken by the owner of the master account or website owner account which uses our services.
5. THIRD-PARTIES
We may use several third-party service providers and applications to help run the Site and Services, evaluate usage of the Site and Services, improve the Site and Services, customize user experiences, and for credit card payment services. These entities may use Personal Information which is shared in the manner described in their own Privacy Policy to perform their services. These third-parties are the following:
Stripe
Used for credit card payments. They store and manage customer credit card data.
GitLab
Used to triage and manage future software updates. Customer submitted software bugs and feature requests are stored here.
HyperDX
Used to monitor and troubleshoot various software services. Logs of software activity are sent here for this purpose.
6. THIRD-PARTY LINKS
The Sites and Services may contain links to third-party websites, plug-ins and/or applications (the "Third-Party Links"). Any access to and use of such Third-Party Links is not governed by this Privacy Policy, but instead is governed by the privacy policies of those Third-Party Links. We are not responsible for the information practices of such Third-Party Links.
7. FAIR INFORMATION PRACTICES
If a breach of data occurs with our Sites or Services, we will notify you via an email notification at the email address you have registered for the Services within 30 business days of understanding the breach. By using the Site or Services, you acknowledge and agree that we may send you notifications via email.
8. ACCESS TO YOUR PERSONAL INFORMATION
You may modify certain Personal Information that you have entered into the Services by logging into your account and changing this information.
9. COOKIES
The Sites do not use cookies during usage to manage user sessions, for tracking or for any other reason. Cookies may be used on the marketing website.
10. GDPR (EEA AND UK USERS)
This Section applies only to natural persons residing in the European Economic Area and the United Kingdom (for the purpose of this section only, "you" or "your" shall be limited accordingly). It is Bot Buster’s policy to comply with the EEA's General Data Protection Regulation (GDPR). In accordance with the GDPR, we may transfer your personal information from your home country to the U.S. (or other countries) based upon the following legal bases:
Legitimate business interests: We could not provide our services or comply with our legal obligations without transferring your personal information to the U.S. (or other countries).
If you have a request, complaint or inquiry, please contact our address listed in the Contact Us section 12 below.
We will not discriminate against you for exercising any of your applicable data privacy rights. Unless permitted by your local laws, we will not:
- Deny you services.
- Charge you different prices or rates for services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of services.
- Suggest that you may receive a different price or rate for services or a different level or quality of goods or services.
11. CALIFORNIA USERS
This Section applies to you if you reside in the State of California. We adopt these provisions to comply with the California Consumer Privacy Act of 2018 ("CCPA") and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice. The CCPA provides California residents with specific rights regarding their Personal Data.
We collect Personal Information as described in Section 1 of this Privacy Policy. For clarity regarding compliance with the CCPA, we have outlined below CCPA categories of personal information which we do not collect:
Protected classification characteristics under California or federal law:
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Commercial information:
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Biometric information:
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Geolocation data:
Physical location or movements.
Sensory data:
Audio, electronic, visual, thermal, olfactory, or similar information.
Professional and Coach employment-related information:
Current or past job history or performance evaluations.
Non-public education information (per FERPA, 20 U.S.C. Section 1232g, 34 C.F.R. Part 99):
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Inferences drawn from other Personal Information:
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
Under the CCPA, Personal Information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, such as health or medical information covered by HIPAA / CMIA or clinical trial data, and personal data covered by sector-specific privacy laws (FCRA, GLBA, FIPA, DPPA).
Deletion Request Rights. You have the right to request that we delete any of your Personal Information that we collected from you and retained in accordance with this Privacy Policy. Please be advised that under California privacy laws, only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your Personal Information.
Exercising Access, Data Portability, and Deletion Rights. You may exercise your rights to access and delete Personal Information as set forth in the CCPA. This can be done at any time within the Captcha Solver portal.
Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights.
California Online Privacy Protection Act
Deidentification. We may process Personal Information for the purpose of creating a deidentified data set. We may then process that deidentified data set for business purposes, including improving our products and services, without further notice to you. The processing of your Personal Information for this purpose is based on our legitimate interests.
Under California's "Shine the Light" law, California residents have the right to opt out of disclosing information to third parties for the purpose of allowing such third parties to directly market their products and services. We do not engage in this type of disclosure.
12. CONTACT US
If you have a question, complaint, or issue regarding either our Privacy Policy or your Personal Information, please let us know at the email address below. We will respond to you within 30 days of receipt of your notification.
13. MARKETING COMMUNICATION
At any time users can opt out of our email marketing communications. A link to opt out of communications will be included along with each of our marketing email messages.
14. CHANGES TO THIS POLICY
We reserve the right to change this Privacy Policy from time to time, so please be sure to check back periodically. If we make any changes to this Privacy Policy that materially affect our practices with regard to the Personal Information we have previously collected from you, we will provide you with notice in advance of such change by emailing you at the email address that corresponds to your account at least 14 days before changes go into effect. You agree that your ongoing use of the Services is an agreement to the privacy policy in effect as of the latest time that you have used the Site or Services.