Privacy policy.

1. Who is responsible

The data controller is [OPERATOR LEGAL NAME & ENTITY], reachable at hello@appealmyban.com. This policy covers appealmyban.com and every case we handle.

2. What we collect, and why

Intake data — your name, email, country of residence, which app banned you, the ban notice and dates, the identifiers tied to the account, billing facts, and your account of events. Purpose: preparing and submitting your Filings. Legal basis: performance of our contract with you.

Case correspondence — emails between us, drafts, approvals, and responses from platforms and bodies. Purpose: running your case and evidencing that deadlines were met. Legal basis: contract, and our legitimate interest in defending the work we did.

Payment data — processed entirely by Stripe; we receive confirmation and the last four digits only, never your card number. Legal basis: contract.

Site analytics — cookieless, aggregate page counts only. No advertising pixels, no cross-site tracking, no profiles, no cookie banner because there is nothing to consent to. Legal basis: legitimate interest in knowing which pages are read.

We collect nothing else. No data brokers, no enrichment, no purchase of information about you.

3. What we never do with it

We do not sell personal data. We do not share it for advertising. We do not use your case to market to you beyond the case itself. We do not train models on your story. For California residents: we do not “sell” or “share” personal information as the CCPA defines those terms, and we do not use sensitive personal information beyond what the service requires.

4. Who receives it

Three categories only. The bodies you authorize: the platform, the BBB, an Attorney General’s office, an EU-certified dispute body, or a privacy regulator — each receives what its filing requires, nothing more. Processors under contract: Stripe (payment), Cloudflare (hosting and email routing), and our intake form provider [FORM TOOL] — each bound to process only on our instructions. Nobody else, unless the law compels us, in which case we tell you unless legally forbidden.

5. International transfers

Our processors may store data outside your country, including in the United States. Where EU/UK data is transferred, it travels under recognised safeguards (adequacy decisions or Standard Contractual Clauses maintained by the processor).

6. How long we keep it

Case files: deleted 12 months after your case closes, or earlier on request. Correspondence with no open case: 12 months. Payment records: as long as tax law requires (typically 6–7 years), held minimal. Analytics: aggregate only, never tied to you. On a deletion request, everything deletable goes within 30 days.

7. Security

Data lives in access-controlled accounts with two-factor authentication, is transmitted over TLS, and is handled by the same person who answers your email — there is no staff-wide access because there is no staff-wide anything. If a breach ever affects you, you hear it from us first, promptly and plainly.

8. Your rights

Wherever you live, we honour the full set on the same terms: access (a copy of everything we hold), correction, deletion, restriction and objection, and portability (machine-readable export). One email to hello@appealmyban.com; identity verified; answered within 30 days, free. In the EU/UK these are your GDPR Articles 15–22 rights; in California, your CCPA rights — exercised without any discrimination in price or service. We would be poor advocates for these laws if we made them hard to use against ourselves.

9. Complaints

If you think we’ve handled your data badly, tell us first — we fix fast. You can also complain to your supervisory authority: your national data protection authority in the EU, the ICO in the UK, or your state Attorney General in the US.

10. Children

The service is for adults (18+). We do not knowingly collect children’s data; if it reaches us, it gets deleted on discovery.

11. Changes

Material changes get a dated note here and never apply retroactively to data already collected. The date at the top is always current.