1. Controller and contact
Atlantic Image Defense LLC determines the purposes and means of the core platform processing described here. For a contributor workspace, certain processing may also be performed on documented instructions or jointly with the relevant rights holder. Privacy requests may be sent to privacy@atlantic-image-defense.com or the published contact address.
2. Categories of data
We may process account identity, contact and organization details; authentication and security logs; uploaded images and metadata; case facts, URLs, screenshots and correspondence; payment and payout administration data; consent records; technical device data; and communications with support or recipient portals.
3. Sources
Data comes from users, rights holders, authorized representatives, recipients, public websites and registries, technical providers, payment confirmations, communications and platform activity. Public availability does not remove privacy, accuracy or proportionality duties.
4. Purposes
Purposes include account administration, image protection, detection review, evidence preservation, licensing assessment, secure communications, fraud and abuse prevention, payment administration, legal compliance, dispute management, service improvement and security monitoring.
5. Legal bases
Depending on context, processing relies on performance of a contract or pre-contract steps, legitimate interests in protecting rights and operating a secure service, compliance with legal obligations, establishment or defense of legal claims, and consent where consent is required. A balancing and necessity review applies to legitimate-interest processing.
6. Sensitive and identity data
Government identity documents are not requested routinely. They may be requested only when identity, authority, fraud or payment verification reasonably requires it, through a designated secure channel, with limited access and a defined retention period. Do not send passwords, full card credentials or privileged documents through ordinary email.
7. Recipients and processors
Data may be disclosed on a need-to-know basis to hosting, email, search, security, storage, payment, accounting, translation, technical, legal and enforcement-support providers; to authorized workspace members; to recipients involved in a case; and to authorities where legally required. Contracts and access controls are used where applicable.
8. International transfers
Because Atlantic operates from the United States and may use international providers or address cross-border cases, data may be transferred internationally. Where required, Atlantic uses recognized transfer mechanisms, contractual safeguards, necessity limitations and supplementary security measures.
9. Retention
Retention depends on purpose, contract, limitation periods, evidentiary needs, tax/accounting duties, security and legal holds. Unverified leads are reviewed and may be deleted or anonymized sooner; executed mandates, payment records and case evidence may be retained for the applicable legal period. Backups expire on controlled cycles.
10. Rights and choices
Subject to applicable law and exceptions, individuals may request access, correction, deletion, restriction, portability, objection, withdrawal of consent and information about disclosures. Identity and authority may be verified. Requests are answered within applicable time limits and may be refused or limited where legally justified, with reasons.
11. Automated tools and human review
Automated similarity, risk, prioritization or discovery tools support operations but do not by themselves issue a final legal determination. Material enforcement, payment and case decisions require authorized human review and may be challenged through the secure response channel.
12. Complaints, changes and children
The service is intended for adults and professional rights administration, not children. Individuals may contact Atlantic and, where applicable, complain to a competent supervisory authority. Material policy changes are versioned and may require renewed acceptance before continued portal use.
13. Contributor authority evidence
For contributor verification, Atlantic may process the declared legal name, account and workspace identifiers, selected capacity, electronic signature text, acceptance timestamp, selected evidence categories, signed declaration and supporting rights or authority records. The purpose is to assess ownership or authority, prevent false claims, manage legal risk and preserve an audit trail. Access is limited to authorized personnel and retained only as reasonably necessary for the account, active matters, dispute handling and legal obligations. Contributors should not send government identity documents or payment credentials by ordinary email unless specifically directed to a confirmed secure channel.
