Privacy Policy

Who We Are

markedasfraud operates markedasfraud from Moldova. Our registered or operating address is Registered address on request. For privacy or support questions, contact support@markedasfraud.local.

Data We Process

We process business account data, service configuration data, usage data, and browser or network-derived anti-abuse signals submitted to our API or collected by our SDK on our customers' properties.

• Account and billing data such as business contact email, company name, plan, invoices, and payment status.
• Configuration data such as API keys, allowed origins or domains, thresholds, and site identifiers.
• Usage data such as request timestamps, event names, request identifiers, decision results, reason codes, and service diagnostics.
• Browser or device signals such as user agent data, browser capabilities, automation indicators, storage support, locale, screen data, and related anti-abuse fingerprints.
• Network-derived signals such as bounded first-party TCP SYN buckets and normalized HTTP request evidence, IP-derived metadata, proxy or VPN intelligence, and rate-limit metadata. Raw connection identifiers used for short-lived correlation are not part of the exported research vector.

Why We Process Data

• To provide fraud prevention, bot detection, anti-abuse scoring, and security analytics.
• To authenticate customers, enforce API limits, maintain service availability, and prevent misuse.
• To operate billing, issue invoices, process crypto payment confirmations, and respond to support requests.
• To debug incidents, improve detection quality, and keep audit-relevant operational records.

Legal Roles

When our customer uses markedasfraud on its own site or product, that customer is generally the controller or business for end-user event data, and markedasfraud acts as a processor or service provider for those signals. For our own account, billing, operations, and security data, markedasfraud acts as the controller or business.

How Long We Keep Data

We keep account, billing, security, and support records for as long as reasonably necessary to operate the service, enforce agreements, investigate abuse, satisfy tax or accounting obligations, and resolve disputes. Short-lived scoring or request data may be retained for shorter operational windows, while billing or support records may be retained for longer periods where required.

Subprocessors and Service Providers

We use infrastructure, database, caching, email, payment, and IP-intelligence providers to operate the service. Depending on deployment and configuration, this may include hosting providers, Postgres and Redis infrastructure, transactional email services, crypto payment providers such as NOWPayments, and IP-intelligence vendors such as proxycheck.io.

International Transfers

Your data may be processed in countries other than your own depending on infrastructure, payment, support, or communications providers. We use reasonable contractual and operational measures to protect data transferred across borders.

Security

We use reasonable technical and organizational safeguards, including access controls, secret management, signed callbacks where applicable, transport security, rate limiting, and operational monitoring. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

Your Rights and Requests

If you are our direct customer, you may contact us to request access, correction, or deletion of account and billing information that we control. If you are an end user of one of our customers, please contact that customer first, because it usually controls the end-user event data sent to our service.

Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by additional notice on our site or inside the dashboard.