1. Introduction
This Privacy Policy applies to the RedCaptcha website at www.redcaptcha.com, RedCaptcha user accounts and the RedCaptcha verification service.
It explains how RedCaptcha collects, uses, stores, protects and may disclose personal information.
We aim to process personal information in accordance with applicable privacy laws, including the Protection of Personal Information Act 4 of 2013 ("POPIA") where it applies.
By using RedCaptcha, you acknowledge the practices described in this Privacy Policy.
2. Information We Collect
The information we collect depends on how you use RedCaptcha.
Account information may include:
- your name and surname;
- email address;
- mobile number where provided;
- company name where provided;
- account identifiers;
- subscription and plan information;
- billing and payment-related information; and
- communications you send to us.
Technical information may include:
- IP address;
- browser type and version;
- device information;
- operating system;
- timestamps;
- website or domain information;
- HTTP request information;
- security-related information;
- verification results;
- usage statistics; and
- information generated when interacting with the RedCaptcha service.
3. Captcha Verification Data
When a website uses RedCaptcha, certain technical information may be sent to our servers so that we can determine whether a request appears to come from a legitimate browser or user.
This may include:
- the IP address making the request;
- browser and device information;
- request timing information;
- the website or domain requesting verification;
- the RedCaptcha site key being used;
- verification tokens;
- security indicators;
- request patterns; and
- the result of the verification request.
This information is primarily processed for security, abuse prevention, verification and service operation.
RedCaptcha does not need the contents of the website form itself simply to perform a captcha verification unless those details are separately submitted to RedCaptcha for another service or support purpose.
4. How We Use Information
We may use collected information to:
- create and manage RedCaptcha accounts;
- provide captcha and human verification services;
- issue and manage site keys and private secret keys;
- verify authorised websites and domains;
- detect bots, spam and automated abuse;
- detect suspicious or malicious activity;
- apply usage and rate limits;
- measure account usage;
- manage subscription plans and billing;
- provide customer support;
- maintain and improve RedCaptcha;
- investigate faults and technical problems;
- protect RedCaptcha infrastructure and customers;
- prevent fraud or misuse;
- comply with legal obligations; and
- communicate important service or account information.
5. Lawful Processing
Where applicable law requires a lawful basis for processing personal information, RedCaptcha will process information only where there is an appropriate reason for doing so.
This may include processing that is necessary:
- to provide the service you have requested;
- to perform our agreement with you;
- to comply with legal obligations;
- to protect our legitimate business and security interests;
- to prevent fraud, spam and abuse; or
- where you have provided valid consent.
We aim to collect only information that is adequate, relevant and reasonably necessary for the purpose for which it is processed.
8. Data Storage and Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, or for as long as required by applicable law.
Retention periods may differ depending on the type of information.
For example, account information may be kept while your account remains active and for a reasonable period after closure where required for accounting, security, fraud prevention, dispute handling or legal compliance.
Security logs and captcha verification information may be retained for a limited period where needed for abuse detection, troubleshooting, security analysis and service protection.
Information that is no longer reasonably required may be deleted, anonymised or securely destroyed.
9. Security
We take reasonable technical and organisational measures to protect personal information against loss, unauthorised access, misuse, alteration or disclosure.
These measures may include:
- encrypted HTTPS connections;
- access controls;
- password protection;
- secure server infrastructure;
- monitoring for suspicious activity;
- restricted administrative access; and
- security logging and abuse prevention systems.
However, no website, server or internet transmission can be guaranteed to be completely secure.
You are also responsible for protecting your RedCaptcha password and private secret keys.
10. International Processing and Data Transfers
Some infrastructure or service providers used by RedCaptcha may operate servers or systems outside United States.
This means personal information may, in some circumstances, be processed or stored in another country.
Where cross-border processing occurs, we will take reasonable steps to ensure that appropriate privacy and security protections apply as required by applicable law.
11. Your Privacy Rights
Subject to applicable law, you may have the right to:
- ask whether we hold personal information about you;
- request access to your personal information;
- ask us to correct inaccurate or incomplete information;
- request deletion of information where legally permitted;
- object to certain types of processing;
- withdraw consent where processing is based on consent; and
- raise a complaint regarding the way your personal information is processed.
We may need to verify your identity before responding to a privacy request.
Certain information may need to be retained where required by law or where there is another lawful reason for retaining it.
12. Websites Using RedCaptcha
RedCaptcha may be installed on websites operated by independent customers.
Those website owners are responsible for their own websites, privacy notices and the personal information they collect through their forms.
If you submit information through a website protected by RedCaptcha, the information entered into that website's form is generally provided to the website owner, not to RedCaptcha.
Questions about information submitted to a customer's website should normally be directed to the owner of that website.
13. Children's Privacy
RedCaptcha is primarily intended for website owners, businesses, developers and organisations and is not specifically directed at children.
We do not knowingly request children to create RedCaptcha business accounts.
Because RedCaptcha may be used on third-party websites, a visitor interacting with a captcha may be of any age. In those cases, we aim to process only the technical information reasonably required to perform verification and security functions.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to RedCaptcha, our data practices or applicable laws.
The latest version will be published on www.redcaptcha.com and will include the date it was last updated.
Where a material change significantly affects how we process personal information, we may provide additional notice where appropriate.
15. Contact Us
If you have a question about this Privacy Policy, want to exercise a privacy right or have a concern about the way RedCaptcha processes personal information, please contact us using the contact details provided on our website.
Website: www.redcaptcha.com