Legal
Privacy Policy
1. Who we are
Asulon Arendus OÜ, registry code 14033581, Talli 4 - 15, Tallinn, Estonia, is the controller of the personal data described here. Contact us at info@namewatch.xyz.
This policy covers https://namewatch.xyz and the Namewatch service.
2. What we collect
- Account data — name, work email, company name, registry and VAT number.
- Billing data — billing address and payment records. Card details go directly to [Stripe]; we never see the full card number.
- Usage data — IP address, browser and device details, pages and API endpoints used, timestamps, error logs.
- What you submit — the domains, watchlists, alert recipients and settings you configure.
- Correspondence — support and sales emails.
The Service also processes domain registration and DNS records from public and licensed sources. Those records can contain personal data about registrants and technical contacts. We process it as controller on the basis of our legitimate interest in providing a domain monitoring service, and customers must have their own lawful basis for what they do with it.
3. Why we use it
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Providing the Service and running your account | Performance of a contract, 6(1)(b) |
| Invoicing and keeping accounting records | Legal obligation, 6(1)(c) |
| Security, abuse prevention, rate limiting, logs | Legitimate interest, 6(1)(f) |
| Monitoring public domain registration data | Legitimate interest, 6(1)(f) |
| Improving the Service using aggregate usage data | Legitimate interest, 6(1)(f) |
| Product emails to customers; newsletter to subscribers | Legitimate interest, 6(1)(f); consent, 6(1)(a) — opt out any time |
| Answering legal and regulatory requests | Legal obligation, 6(1)(c) |
4. Cookies
Signing you in and keeping the site secure takes a few cookies. These do not require consent and cannot be switched off.
We also measure how the site is used. Google Analytics sets _ga cookies to
count visits and pages viewed. Microsoft Clarity sets _clck and _clsk
and records how pages are used — clicks, scrolling, mouse movement — with
anything you type masked out. Clarity traffic is relayed through our own
servers: your browser talks only to namewatch.xyz, and Microsoft does not
receive your IP address. You can block or clear these cookies in your browser
at any time.
5. Who we share it with
We share personal data only with providers that process it on our instructions: hosting [Hetzner, Germany and Finland], payments [Stripe], email delivery [PROVIDER], error monitoring [PROVIDER], website analytics [Google Analytics, Google Ireland] and session replay [Microsoft Clarity, Microsoft Ireland]. The current list is at namewatch.xyz/subprocessors.
We also disclose data where the law requires it, and to a buyer if the business is sold. We do not sell personal data.
Our providers are in the EEA where possible. Where one processes data outside it, the transfer relies on an adequacy decision or the European Commission’s standard contractual clauses.
6. How long we keep it
| Data | Kept for |
|---|---|
| Account data and what you submit | The subscription, plus [30] days |
| Invoices and accounting records | 7 years, as the Accounting Act requires |
| Security and access logs | [12] months |
| Support correspondence | [24] months |
| Newsletter subscription | Until you unsubscribe |
7. Your rights
You may ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, or withdraw consent you have given. Write to info@namewatch.xyz and we answer within one month.
If you are unhappy with how we handle it, you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, Tallinn, info@aki.ee) or to the supervisory authority where you live.
8. Changes and contact
We update this policy as the Service changes and post the new version here with a new date. We email you about material changes.