Privacy Notice

Updated November 22, 2024

This privacy policy explains the type, scope, and purpose of processing personal data (hereinafter referred to as "data") in connection with the provision of our services, as well as within our online offering and its related websites, functions, and content, including external online presences such as our social media profiles (collectively referred to as the "Online Offering"). The terminology used, such as "processing" or "controller," is based on the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Controller

Robinson Guerra (for DREAVERR Digital Solutions LLP)
Email: support@earningscalls.dev

Types of Data Processed

Inventory Data: e.g., names, addresses.
Contact Data: e.g., email addresses, phone numbers.
Content Data: e.g., text entries, API queries.
Usage Data: e.g., API endpoints accessed, access times, request volumes.
Meta/Communication Data: e.g., device information, IP addresses.
Payment Data: e.g., credit card details, billing address, transaction details.

Categories of Data Subjects

Visitors and users of the Online Offering, including API subscribers (hereinafter collectively referred to as "users").

Purpose of Processing

To provide the Online Offering, API endpoints, and content.
To process payments and deliver services related to subscriptions.
To respond to contact inquiries and communicate with users.
To implement security measures and enforce rate limits.
To monitor API usage and prevent abuse.
For reach measurement and service improvement purposes.

Legal Bases

The processing of personal data is based on the GDPR:

Consent under Article 6(1)(a) GDPR.
Fulfillment of contractual obligations under Article 6(1)(b) GDPR (e.g., API access, payment processing).
Compliance with legal obligations under Article 6(1)(c) GDPR.
Protection of legitimate interests under Article 6(1)(f) GDPR (e.g., fraud prevention, rate limit enforcement).

Security Measures

We implement technical and organizational measures to ensure an appropriate level of security, taking into account the risks to the rights and freedoms of natural persons. These include:

Encrypted data transmission (TLS/HTTPS)
Hashed password storage (bcrypt)
Secure API key generation and authentication
Access controls, logging, and monitoring
Regular security reviews

Data Sharing

Personal data is shared with third parties only to the extent necessary:

Infrastructure providers: Hosting and database services necessary to operate the Service.
Payment processors: To process subscription payments securely.
Legal authorities: When required by law, court order, or governmental regulation.

Further sharing occurs only when legally required or necessary for fulfilling contractual obligations.

Data Transfers to Third Countries

Data may be transferred to third countries (outside the EU, EEA, or Switzerland) as part of service delivery and payment processing. We ensure that all data transfers comply with GDPR, for example, through Standard Contractual Clauses.

Data Subject Rights

Under applicable data protection laws, you have the following rights:

Access your processed data and obtain copies.
Rectify inaccurate data.
Request deletion of your data.
Restrict the processing of your data.
Transfer your data to another controller (data portability).
Withdraw your consent at any time with future effect.
Object to data processing for direct marketing or based on legitimate interests.
File a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@earningscalls.dev. We will respond within 30 days.

Cookies

Cookies are used to enable functionality such as session management and authentication. These are essential cookies strictly necessary for the Service to function and do not require consent under applicable cookie laws. Users can disable cookies in their browser settings, which may limit the functionality of the Online Offering.

Data Retention

Data is deleted in accordance with legal requirements when it is no longer necessary for the purposes for which it was collected. Account data is retained for as long as the account is active. API request logs are retained for up to 90 days for operational and security purposes. Upon account deletion, personal data will be removed within 30 days, except where retention is required by law.

Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our data practices. Users will be notified of significant changes.

Contact Information

For questions or concerns regarding this Privacy Notice, please contact us:

DREAVERR Digital Solutions LLP
Email: support@earningscalls.dev
Address: 1103 - 11871 Horseshoe Way, Richmond, British Columbia, Canada V7A 5H5