Privacy Policy

TrafficDefenseIQ is operated by JoB Orange Marketing in Québec, Canada (“we”, “us”). This policy explains what personal information we handle when you use our website and application, why, and what control you have over it.

We handle two kinds of information, in two different roles:

• Your account information (your login, billing and usage). Here we decide why and how it's used, and this policy applies directly.
• The lead data you upload for scoring. This belongs to you, and you decide what we do with it. We process it only on your behalf, to provide the service. If you are one of the people whose details appear in someone's upload, the company that uploaded it is the one to ask; see section 8. Our Data Processing Addendum governs this processing.

• Account information: your email address, name if you give it, and your password (stored only as a secure hash by our authentication provider).
• Uploaded lead data: whatever is in the files you upload, which can include email addresses, phone numbers, IP addresses, names, affiliate and offer identifiers, payout amounts, transaction IDs and conversion timestamps. We also keep the original uploaded file, and the scores and flags we produce.
• Lists you build: the blacklist and allowlist entries you add.
• Integration settings: destination URLs you configure for webhooks and postbacks, and the signing secrets we generate for them.
• Billing information: handled by Stripe. We store your plan and subscription status, not your card details.
• Usage and technical data: IP address, browser information and error reports collected by our hosting and error-monitoring providers, and an activity log of account actions (such as inviting a teammate or deleting an upload).
• Messages you send us: through the contact form, feature requests or email.

We use it to provide and secure the service; to process payments and manage your subscription; to send service email (confirmation, invitations, billing notices and the alerts and reports you turn on); to respond to support requests; and to diagnose and fix technical problems. We don't sell personal information, we don't use uploaded lead data to train third-party AI models, and we don't use it for advertising.

We use a small number of service providers (“subprocessors”) to operate TrafficDefenseIQ. Each receives only what it needs for its function. Details, including what each one can see and where it operates, are on our Subprocessors page.

Beyond those providers we share information only:

• At your direction. If you set up a webhook or postback integration, we send scored lead data to the addresses you configure. What happens to it after that is between you and that destination.
• When the law requires it, such as a valid legal demand.
• In a business transfer, such as a sale of the business, where the new owner must honor this policy.

Your uploaded data is scoped to your account. Other customers can't see it.

Our database and uploaded files are stored in Canada (Central), in the Montréal region. The application itself runs on servers in the United States, so your data passes through them when you upload a file and while it is being scored, and our other providers operate in the United States and other regions, as listed on the Subprocessors page. That means personal information may be processed outside Québec and outside Canada. We choose providers that offer contractual and technical safeguards, and we limit what each one receives.

• While your account is open, we keep your account and uploaded data so you can review past uploads and results.
• Automatic deletion. An account owner can set Data retention in Settings to delete uploads older than 30, 90, 180 or 365 days. Deleting an upload also deletes its leads, scores, list-match history and the original uploaded file.
• Deleting uploads yourself removes the same things immediately.
• Deleting your account permanently removes your uploads, leads, scores, lists, settings and original files. If your account has other members, leaving removes only your own login.
• Backups and records. Deleted data can remain in our provider's routine backups until they expire. We keep billing records for as long as tax and accounting law requires.

Data is encrypted in transit (HTTPS). Access to each account's data is restricted at the database level so other customers can't read it. Sign-in pages are protected against automated abuse, our routes are rate-limited, and account actions are recorded in an activity log. No system is perfectly secure and we can't guarantee absolute security, but we take measures appropriate to the sensitivity of the data.

If a confidentiality incident affects personal information we hold, we will assess the risk, keep a record of it, and notify affected customers, and the authorities where the law requires, without undue delay.

Depending on where you live, you have rights over your personal information under Québec's private-sector privacy law, Canada's PIPEDA, and, where they apply, the EU/UK GDPR or California's CCPA. In general you can ask to access your information, correct it, receive a copy in a portable format, withdraw consent, and have it deleted.

• Your own account information: from Settings you can update your details, download all your account data, and delete your account. For anything else, email privacy@trafficdefenseiq.com. We respond within 30 days.
• If your details are in a customer's upload: we hold them as that customer's service provider, so please contact that company. If you send a request to us, we'll pass it to the customer and help them respond.
• Complaints: if you are not satisfied with our response you can complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Fraud scores are automated risk indicators produced for our customers. We don't make decisions about the people in an upload; the customer reviews the scores and decides what to do.

We use strictly necessary cookies to keep you signed in and maintain your session. The sign-in, sign-up and password-reset pages load a bot-protection check from Cloudflare (Turnstile), which may use browser signals to tell people from bots.

Our marketing pages (not the signed-in application) load Google Ads, Google Analytics and the LinkedIn Insight Tag, which set advertising and analytics cookies to measure ad performance, understand how visitors use these pages, and build remarketing audiences. We don't use any other advertising, analytics or cross-site tracking cookies.

TrafficDefenseIQ is a business tool intended for professional use and is not directed at anyone under 18.

Jon, person responsible for the protection of personal information at JoB Orange Marketing.

Email: privacy@trafficdefenseiq.com

We may update this policy. Material changes will be posted on this page with a new effective date, and we'll notify account owners by email when a change affects how we handle your data.

Questions about this policy or requests about your data: privacy@trafficdefenseiq.com, or through our contact page.