Privacy Policy

This Privacy Policy explains how Multiverso LTD. (“we”, “us”, “our”), located in Edinburgh, United Kingdom, processes personal data when you use DomainsBoard athttps://domainsboard.app and the application athttps://app.domainsboard.app (together, the “Service”).

1. Who we are

The data controller is Multiverso LTD., Edinburgh, United Kingdom. For privacy questions, contactsupport@domainsboard.app.

2. Data we collect

• Account data: name, email address, password (hashed), and profile settings.
• Billing data: processed by our Merchant of Record, Paddle. We receive subscription status and limited customer identifiers needed to deliver paid features. We do not store full card numbers.
• Portfolio data: domain names, registrar metadata, costs, labels, reminders, and sync logs you choose to store in the Service.
• Registrar credentials: API keys/tokens you connect, stored encrypted and used only to sync your domains.
• Usage & technical data: IP address, device/browser information, approximate location derived from IP, and diagnostic logs.
• Communications: support emails and optional marketing/update form submissions.

3. How we use data

• To provide, secure, and improve the Service.
• To authenticate users and enforce plan limits.
• To process subscriptions and fulfill purchases via Paddle.
• To send transactional messages (e.g. renewal reminders, security notices).
• To send optional product updates if you opt in via our forms.
• To comply with law and protect against abuse.

4. Legal bases (UK GDPR)

We process data where necessary to perform our contract with you, where we have a legitimate interest (e.g. securing the Service, understanding product usage in aggregate), where required by law, or where you have consented (e.g. optional marketing emails).

5. Sharing

We share personal data only with processors that help us run the Service, including:

• Hosting and infrastructure providers.
• Email delivery providers.
• Paddle (payments / Merchant of Record).
• Analytics or error-monitoring tools we may enable, configured with appropriate safeguards.

We do not sell personal data.

6. International transfers

Where data is processed outside the United Kingdom, we use appropriate safeguards such as UK International Data Transfer Agreements or adequacy decisions where available.

7. Retention

We retain account and portfolio data while your account is active. After deletion or inactivity, we delete or anonymize data within a reasonable period unless law requires longer retention (e.g. billing records).

8. Security

We use encryption in transit, encrypted storage for sensitive credentials, access controls, and industry-standard application security practices. No method of transmission or storage is 100% secure.

9. Your rights

Depending on applicable law (including UK GDPR), you may have rights to access, rectify, erase, restrict, object to processing, and data portability. You may also lodge a complaint with the UK Information Commissioner’s Office (ICO). To exercise rights, emailsupport@domainsboard.app.

10. Cookies

The marketing site may use essential cookies for security and preferences. The application uses session cookies required for authentication. Non-essential cookies, if introduced, will be disclosed and controlled appropriately.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the revised policy where permitted by law.

13. Contact

Multiverso LTD.
Edinburgh, United Kingdom
support@domainsboard.app