Privacy policy

Synergy (“Synergy”, “we”, “us”, “our”) is a product of ARN IS LIVE and is operated as part of the same ecosystem as ARN AUTH. The operator is Aryan Chaudhary, an individual-owned project based in Aligarh, Uttar Pradesh, India. For the personal data described in this policy, Synergy and ARN IS LIVE act as the controller or business where that role applies. You can reach us at support@synergy.arnislive.com, on Telegram at @ARNISLIVE, or on Discord at @ARNISLIVE.

Shared ARN IS LIVE account. Synergy shares a Clerk authentication instance with ARN AUTH. Your Clerk user identity is therefore shared across both products: creating or signing in to an account on one makes the same account identity available on the other. ARN AUTH keeps its own developer, application, and validation records. Synergy keeps its own orders, licenses, and Convex user record. The shared account and authentication data are processed as described in this policy, and ARN AUTH's privacy policy also applies to its own processing. Deleting or suspending the shared account may affect access to both products.

This policy applies to our website, the Synergy Windows application, the download and license service, and support communications (together, the “Service”). It does not apply to third-party websites, games, emulators, payment pages, or services that we do not control, even if you reach them through Synergy.

Where the EU General Data Protection Regulation (GDPR) or UK GDPR requires us to appoint a representative in the European Union or the United Kingdom, we will publish the representative’s name and contact details here before offering paid services in that market. Until then, you can contact us directly using the details above.

We have not appointed a statutory Data Protection Officer because our processing does not currently require one. Privacy requests and complaints are handled by our privacy contact at the email address above.

• We collect the email address you use at checkout, your plan and order details, license and activation records, support messages, and basic technical logs.
• We do not receive or store your full card number, UPI PIN, bank password, or Clerk password.
• The desktop app does not collect analytics, send telemetry, record your screen, log your keystrokes, read your game files, or upload your PC data. Optimization changes stay on your PC.
• We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
• We keep data only as long as we need it for the purposes below or as the law requires.
• You can ask for access, correction, deletion, restriction, portability, or object to certain processing, subject to applicable law.

The exact data depends on how you use the Service. We collect the following categories:

Account and identity data. Your email address, an optional display name, profile image if supplied by a sign-in provider, your Clerk user identifier, sign-in method, session and authentication metadata, and the date you created or last used your account. This Clerk identity is shared with ARN AUTH because both products use the same authentication instance. You can sign in with an email code or, where enabled, with Google, GitHub, or Discord. If you choose a third-party provider, Clerk receives the OAuth identifiers and tokens for that sign-in and may receive your name, email address, profile image, and provider account identifier, depending on the permissions shown by the provider. We receive the profile data needed to create and link your account. We do not receive your provider password. For email sign-in, Clerk processes your email address and one-time sign-in code; we do not receive a password.

OAuth scope limits. We request only the basic profile, email, and account-identifier scopes needed to create and secure your account. We do not request access to Gmail, Google Drive, Calendar, contacts, GitHub repositories, GitHub organisation administration, Discord servers, Discord messages, or your friends list. If a provider shows a broader permission screen, review it before continuing; you can cancel and use email sign-in instead.

Order and payment data. The plan you selected, price, currency, order identifier, Razorpay order and payment identifiers, amount, payment method type (such as UPI, card, netbanking, or wallet), payment status, refund status, timestamps, the email and name you entered at checkout, and contact or billing details you provide to Razorpay. Razorpay processes your card, UPI, bank, or wallet credentials directly and may share limited fraud and risk signals with us. We do not receive or store your full card number, CVV, UPI PIN, or bank password. Razorpay may set cookies or local storage on its own domains to process the payment and prevent fraud.

License and activation data. The license key or credential issued for your purchase (stored server-side, in Clerk private metadata, and shown only in your signed-in account), the email the license is bound to, the plan term and expiry date, the device limit, a device identifier generated or read by the app, activation and validation events, app version, operating-system version, and the IP address and user agent used for activation or validation. We use this data to enforce the one-PC limit, prevent key sharing and fraud, and provide support.

Support and communications. Messages you send by email, Telegram, Discord, or a support form; attachments such as screenshots or logs you choose to send; your support handle; and our replies. Please do not send passwords, payment credentials, or sensitive personal data in support messages.

Website, device, and log data. When you visit the site or call our API, our hosting and security systems may record your IP address, user agent, requested URL, referrer, timestamps, response status, error diagnostics, and rate-limit counters. These logs are used for security, fraud prevention, debugging, and service reliability.

Cookie data. A signed, HttpOnly checkout cookie, Clerk authentication cookies, and cookies or local storage set by Razorpay when you pay. OAuth providers may set cookies on their own domains during sign-in. See our cookie policy.

Aggregated and de-identified data. We may create aggregated or de-identified information that cannot reasonably be used to identify you, for example counts of successful activations or support topics. We handle such data in accordance with applicable law and do not attempt to re-identify it.

Data we do not intentionally collect. We do not intentionally collect payment card details, passwords, government identification numbers, precise geolocation, biometric data, health data, genetic data, political or religious beliefs, sexual orientation, trade-union membership, contacts, browsing history outside our site, screen recordings, keystrokes, or your game content. We do not ask for and do not want special-category data. If you send it to us voluntarily, you consent to our handling it for the purpose of responding to you, and we will delete it when it is no longer needed.

Synergy runs locally on your Windows PC and generally requires administrator rights to apply system changes. It reads system settings, installed applications, hardware information, and game or emulator paths so it can perform the actions you request. Those changes and records stay on your PC.

When you activate or validate a license, the app contacts our licensing service online. That request includes your license credential, a device identifier, the app version, and ordinary network data such as your IP address. We use it to confirm that the license is valid, enforce the one-PC limit, and detect abuse. We do not use it to monitor your gameplay.

The app does not include third-party advertising SDKs, behavioural analytics, or telemetry that sends your activity to us. If you choose to send a crash report, log, or screenshot to support, we receive only what you send. You can use the app without creating an account; an account is needed only to view your license later.

Uninstalling the app does not automatically delete your account, order, or license records. You can request deletion as described below, subject to our legal retention obligations.

We process personal data only when we have a lawful basis. Under the GDPR and UK GDPR, those bases are:

• Contract (Article 6(1)(b)). To create your account, process your order, take payment, issue and validate your license, enforce the one-PC limit, provide the download, and respond to support requests you make under your contract with us.
• Legal obligation (Article 6(1)(c)). To keep tax, accounting, invoice, and payment records; to comply with consumer, e-commerce, and licensing law; to respond to lawful requests from courts and authorities; and to meet breach-notification duties.
• Legitimate interests (Article 6(1)(f)). To secure the Service, prevent fraud and key abuse, enforce our terms, debug errors, improve features using aggregated or de-identified data, protect our legal rights, and defend claims. We balance these interests against your rights and freedoms and offer an objection right where required.
• Consent (Article 6(1)(a)). For any optional processing that requires consent, such as non-essential cookies, marketing messages, or certain international transfers where local law requires consent. You can withdraw consent at any time without affecting processing that already happened.
• Vital interests or public interest (Article 6(1)(d) or (e)). Only in rare situations, such as an emergency or where the law requires it.

Under other laws, we rely on equivalent bases: performance of a contract, compliance with legal obligations, our legitimate interests, your consent, and any other basis those laws recognise. In India, we process data for the purposes described in this policy and, where the Digital Personal Data Protection Act, 2023 requires consent, on the basis of your consent or another lawful ground.

We do not use your personal data for decisions that produce legal or similarly significant effects based solely on automated processing. See section 15.

We use a small number of strictly necessary cookies and similar storage. Strictly necessary cookies do not require consent under the ePrivacy Directive or UK PECR because the Service cannot work without them.

• synergy_order. A signed, HttpOnly, SameSite=Lax cookie set after checkout so the success page can show the order you just completed. It expires after 2 hours and is marked Secure in production.
• Clerk authentication cookies. If accounts are enabled and you sign in with an email code, Google, GitHub, or Discord, Clerk sets session and anti-CSRF cookies needed to keep you signed in, protect your account, and complete the OAuth redirect. Their duration is set by Clerk and may include a short-lived session cookie and a longer-lived client cookie.
• Razorpay cookies and local storage. Razorpay Checkout is loaded from Razorpay’s domain when you pay. Razorpay may set cookies, local storage, device identifiers, or similar technologies on its own domains to process the payment, remember payment choices, prevent fraud, and secure the transaction. These are controlled by Razorpay and subject to its policies.

We do not currently use advertising cookies, cross-site tracking pixels, or third-party analytics. Because we use only strictly necessary cookies, we do not show a non-essential cookie consent banner. If we introduce analytics, advertising, or other non-essential cookies, we will update this policy, add the relevant consent mechanism where required, and honour applicable opt-out signals.

You can block or delete cookies in your browser. Blocking the checkout cookie may prevent the success page from showing your order; blocking Clerk cookies will prevent you from signing in; blocking Razorpay cookies or local storage may prevent payment. Your browser or device may also offer Global Privacy Control (GPC) or similar signals. We treat a GPC signal as an opt-out of sale or sharing where those concepts apply. We do not sell or share personal data for cross-context behavioural advertising. Read the full cookie policy for provider details.

We share personal data only as needed for the purposes in this policy, with providers bound by appropriate confidentiality and data-protection terms. The categories and current providers are:

• Payments: Razorpay. Razorpay processes your payment, performs fraud and risk checks, and provides transaction records. It receives your payment credentials, payment-method details, contact and billing information you provide, and the checkout information needed to process the payment. Razorpay may process data in India and other countries under its own privacy policy.
• Accounts and authentication: Clerk. Clerk provides sign-in and account management and processes your email address, one-time sign-in codes, OAuth identifiers and tokens, profile data, and session data. If you choose Google, GitHub, or Discord, Clerk exchanges authentication data with that provider.
• Sign-in providers: Google, GitHub, Discord. If you choose one of these providers, it authenticates you and shares the profile data you authorise with Clerk and us. The provider does not receive your Synergy license key. Its own terms, privacy policy, and cookie policy apply to the sign-in, and it may process data in other countries.
• License management: ARN AUTH. Our licensing provider receives the email bound to the license, the plan term, the device limit, and activation and validation data so it can issue and validate keys.
• Hosting, storage, and security providers. Our hosting, database, order and license store, backup, email, and infrastructure providers process data on our behalf to run the Service, store records, deliver messages, and protect against abuse. They are not permitted to use it for their own purposes.
• Professional advisers. Lawyers, accountants, auditors, and insurers may receive data where necessary to obtain professional advice or protect our legal rights, subject to confidentiality.
• Authorities and legal process. We may disclose data if required by law, court order, or a lawful request from a competent authority, or if we believe disclosure is necessary to protect rights, safety, or security. We review requests for validity and scope and will challenge unlawful requests where appropriate.
• Corporate transactions. If we merge, acquire, or sell all or part of the business, data may be transferred as part of that transaction, subject to this policy and applicable law.
• With your direction. We may share data when you ask us to, for example when you request support from a third party.

We do not sell personal data for money or other valuable consideration. We do not share personal data for cross-context behavioural advertising. We do not knowingly sell or share the personal data of consumers under 18. We may publish a current list of sub-processors on request and will update this policy if the list changes materially.

We are based in India, and our providers may process data in India, the United States, the European Economic Area, the United Kingdom, or other countries. Privacy laws in those countries may differ from the laws where you live.

Our current providers include Clerk (authentication; United States), Razorpay (payments; India and its group), Google, GitHub, and Discord (only if you choose that sign-in method; global), ARN AUTH (licensing), and our hosting and storage providers. Their processing locations may change. We choose providers that offer appropriate safeguards and require them to protect data.

When we transfer personal data from the EEA, the UK, or Switzerland to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, binding corporate rules where applicable, and additional technical and organisational measures. Where local law requires consent for a transfer, such as under the Japanese APPI, the Korean PIPA, or the Chinese PIPL, we will obtain it or rely on another lawful transfer mechanism. For transfers from India, we comply with the Digital Personal Data Protection Act, 2023 and any transfer restrictions the Indian government notifies.

If you would like more information about the safeguards used for a particular transfer, contact us. We may redact confidential commercial terms and security details from contractual documents.

We keep personal data only for as long as needed for the purposes described above, to comply with legal obligations, to resolve disputes, and to enforce agreements. Our standard periods are:

• Checkout cookie: 2 hours, unless you clear it sooner.
• Account data: while your account is active. After you request deletion, we remove it from active systems within 30 days, and from backups within 90 days, unless a legal exception applies.
• Authentication and OAuth records: while your account is active and for the short period needed to secure it. Clerk controls session and token lifetimes. Google, GitHub, and Discord retain their own account and authorization records under their policies; revoke Synergy’s access in the provider’s security settings if you want to disconnect it.
• Payment method data: held by Razorpay under its retention and card-network rules. We retain the order and payment identifiers, amount, status, and related records, but not your full card, CVV, UPI PIN, or bank password.
• Orders, invoices, payment, and tax records: for at least 8 years after the transaction, or the longer period required by Indian tax, accounting, or consumer law. Other countries may require a different period; we keep records for the longest period that applies to us.
• License and activation records: for the license term plus 24 months, and longer if needed to investigate fraud, chargebacks, or legal claims.
• Support conversations: 24 months after the request is closed, unless needed for an ongoing dispute or legal obligation.
• Security and server logs: 90 days, unless we are investigating an incident, in which case we keep the relevant logs until the investigation and any legal process are complete.
• Rate-limit counters: minutes to hours, depending on the endpoint.
• Marketing preferences: we do not currently send marketing. If we do, we keep your preference until you withdraw consent or unsubscribe, plus a short period to honour it.

When data is no longer needed, we delete it or anonymise it. If deletion is not immediately possible because data is in a backup, we isolate it and delete it when the backup cycle completes. We may keep a minimal record of a deletion request to ensure we do not contact you again.

We use technical and organisational measures designed to protect personal data, including TLS encryption in transit, Secure and HttpOnly cookies where appropriate, signed checkout cookies, server-side secrets, access controls, least-privilege administration, logging with sensitive values redacted, and encryption or restricted access for license credentials at rest. We review our providers and limit access to people who need it to perform their work.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect your data and to respond quickly to incidents. If a breach affects your personal data and applicable law requires notification, we will notify the relevant authority and affected users within the required time, and we will describe the nature of the incident, the likely consequences, and the steps we are taking.

You are responsible for keeping your email account, Clerk sign-in, device, and license credential secure. If you believe your account or key has been compromised, contact us immediately so we can help.

Subject to applicable law and any lawful exceptions, you have the right to:

• Access the personal data we hold about you and information about how we use it.
• Correct inaccurate or incomplete data.
• Delete data we no longer need, subject to legal retention and other exceptions.
• Restrict or object to processing, including processing based on legitimate interests and, where applicable, direct marketing.
• Portability of data you provided to us, in a structured, commonly used, machine-readable format, where the law provides this right.
• Withdraw consent at any time where processing is based on consent, without affecting processing that already occurred.
• Complain to a supervisory authority or privacy regulator in your country.
• Non-discrimination for exercising your privacy rights. We will not deny you the Service, charge you a different price, or provide a different level of service because you exercised a privacy right, except where the law permits a difference that is reasonably related to the value of the data.
• Use an authorised agent to submit a request on your behalf, subject to verification of your identity and the agent’s authority.
• Appeal a refusal, where the law provides an appeal process. We will explain the reason for a refusal and the available next steps.

To exercise a right, email support@synergy.arnislive.com with the subject “Privacy request”. Please tell us what you want and the email address or order identifier involved. We may ask for reasonable verification so we do not disclose data to the wrong person. We respond free of charge, normally within 30 days. Where the law allows an extension, we will tell you within the initial period and explain why. If a request is manifestly unfounded or excessive, we may refuse it or charge a reasonable fee where the law permits.

To delete your Synergy account, use the account page if available or email us with the subject “Delete my account”. We will delete or de-identify your Clerk profile and account metadata, subject to records we must keep for tax, accounting, fraud, chargebacks, or legal claims. Deleting your account may remove your access to the license key shown in the account, so save it first if you need it. You can also revoke Synergy’s access from your Google, GitHub, or Discord account settings; that stops future OAuth sign-in but does not automatically delete your Synergy order or license records.

If you are a California resident, you or your authorised agent may submit a request by email. We will verify your identity and respond within the time required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), normally 45 days, with an extension where permitted.

The following summaries are not exhaustive. They describe additional rights and disclosures that may apply where you live. Mandatory local law prevails over this policy if there is a conflict.

European Economic Area, United Kingdom, and Switzerland. You have the rights in section 11, including access, rectification, erasure, restriction, objection, portability, and withdrawal of consent. You may lodge a complaint with your local supervisory authority, the UK Information Commissioner’s Office, or the Swiss Federal Data Protection and Information Commissioner. We process data under the legal bases in section 5 and do not make solely automated decisions with legal or similarly significant effects. If we rely on legitimate interests, you may object on grounds relating to your particular situation.

United States. If you are a California resident, you have the right to know the categories and specific pieces of personal information we collect, the sources, purposes, and categories of recipients; the right to delete; the right to correct; the right to opt out of sale or sharing; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information beyond the purposes permitted by the CPRA. We do not knowingly collect or sell the personal information of consumers under 18. Residents of other states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, and Tennessee, may have similar rights, including the right to appeal a refusal. Nevada residents may submit a verified request to opt out of the sale of covered information; we do not currently engage in such sales. We do not respond to browser Do Not Track signals as a universal standard, but we honour Global Privacy Control where the law requires it and do not sell or share data as described above.

India. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), you are a Data Principal and may have the right to access a summary of the personal data we process, correct or complete it, request erasure, nominate a person to exercise your rights in the event of death or incapacity, withdraw consent, and complain to the Data Protection Board of India. We process data for the lawful purposes described in this policy, on the basis of your consent or another ground permitted by the DPDP Act. We maintain reasonable security practices and handling safeguards under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent they apply. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children. Our Grievance Officer for India can be reached at support@synergy.arnislive.com with the subject “Grievance”. We will acknowledge a grievance within 48 hours and aim to resolve it within one month, or within any shorter period required by applicable law.

Brazil. Under the Lei Geral de Proteção de Dados (LGPD), you may request confirmation of processing, access, correction, anonymisation, blocking or elimination of unnecessary or excessive data, portability, deletion of data processed with consent, information about sharing, and revocation of consent. You may also petition the National Data Protection Authority (ANPD). We rely on the legal bases in Lei 13.709/2018, including contract performance, legal obligations, legitimate interests, and consent where required.

Canada. Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, you may request access to your personal information, request correction, withdraw consent subject to legal and contractual restrictions, and challenge our compliance. You may complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner. If you are in Quebec, you also have the rights provided by the Act respecting the protection of personal information in the private sector (Law 25).

Australia and New Zealand. We handle personal information in accordance with the Australian Privacy Principles and the New Zealand Privacy Act 2020. You may request access and correction, ask about our handling of your information, and complain to the Office of the Australian Information Commissioner or the New Zealand Privacy Commissioner. If you are in Australia, you may also have rights under the Consumer Data Right where it applies, although it does not currently apply to this Service.

Japan, South Korea, Singapore, and other Asian jurisdictions. Under Japan’s Act on the Protection of Personal Information, you may request disclosure, correction, suspension of use, and information about third-party transfers. Under the Korean Personal Information Protection Act, you may request access, correction, deletion, and suspension of processing, and we will handle the request in accordance with Korean law. Under Singapore’s Personal Data Protection Act, you may request access and correction, withdraw consent, and manage marketing contact through the Do Not Call provisions. If the Chinese Personal Information Protection Law applies, we will handle your data in accordance with PIPL, obtain separate consent where required, and provide the disclosures PIPL requires.

Middle East and Africa. If you are in the United Arab Emirates, Saudi Arabia, Qatar, Bahrain, or another country with a data-protection law, you may have rights to access, correct, delete, restrict, object, and complain to the local authority, including the UAE Data Office, the Saudi Data and AI Authority, or the relevant regulator. In South Africa, the Protection of Personal Information Act (POPIA) gives you rights to access, correction, deletion, and objection, and you may complain to the Information Regulator.

Latin America and the Caribbean. Depending on your country, you may have rights under Mexico’s Federal Law on Protection of Personal Data Held by Private Parties, Argentina’s Personal Data Protection Act, Colombia’s Statutory Law 1581, Chile’s Law 19.628 and Law 21.719, or similar laws. You may exercise access, correction, deletion, objection, and revocation rights with us and complain to the local authority.

Other countries. If a privacy law in your country gives you a right that is not described here, you can still exercise it. Contact us and we will handle your request in accordance with that law.

The Service is intended for adults who can enter into a contract. You must be at least 18 years old, or the age of majority in your country, to purchase a license. We do not knowingly collect personal data from children under 13, or under 16 where the law sets a higher age for online consent. If you are between the applicable minimum age and the age of majority, you may use the Service only with the involvement and consent of a parent or legal guardian.

Under the DPDP Act, we do not process personal data of children in a way that involves tracking, behavioural monitoring, or targeted advertising, and we do not knowingly collect data from children without verifiable parental consent. Under the GDPR and UK GDPR, we rely on the minimum age in the relevant member state, and we do not knowingly process data of children below that age without parental consent.

If you are a parent or guardian and believe a child has given us personal data without your consent, contact us. We will delete the data promptly, subject to legal obligations. If you are a teenager, please ask a parent or guardian before purchasing or sending us personal data.

We do not currently send marketing emails or share your contact details with advertisers. We use your email for transactional messages, such as order confirmation, license delivery, security notices, and responses to your requests. These messages are necessary to provide the Service.

If we introduce newsletters or offers, we will do so only where we have a lawful basis, will identify the sender, and will include an unsubscribe mechanism. Where consent is required, we will ask for it separately and you can withdraw it at any time. We will not sell or rent your email address.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We do not profile you for advertising or behavioural monitoring. Payment processors and fraud-prevention providers may perform automated risk checks as part of processing your payment; those checks are governed by their own notices and may result in a payment being declined. If a decision is made about your order, you can contact us and, where the law provides, request human review or an explanation.

We do not use your personal data to train generative AI models. If we introduce AI-assisted support features, we will update this policy and provide any notices and choices the law requires.

We do not track you across third-party websites and we do not sell personal data. We do not share personal data for cross-context behavioural advertising. Because there is no common standard for Do Not Track, we do not treat every DNT signal as a universal opt-out; however, we honour Global Privacy Control and similar legally recognised opt-out signals where the law requires it, and our practices already meet the substantive opt-out standard for sale and sharing.

We do not knowingly sell or share the personal data of consumers under 18. If you believe a minor’s data has been sold or shared, contact us immediately.

The Service may link to third-party websites, games, emulators, payment pages, or support platforms. We do not control their privacy practices, and their policies apply to your use of them. We encourage you to read them before providing personal data. If you connect a third-party account, that provider may share information with us as described in its authorization screen and this policy.

We may update this policy to reflect changes to the Service, our providers, or the law. We will post the updated version and change the “Last updated” date. If a change materially affects how we use your personal data or your rights, we will take reasonable steps to notify you, such as a notice on the site or an email, before the change takes effect where required. Where the law requires consent, we will ask for it. Continued use after the effective date means you accept the updated policy to the extent permitted by law.

For privacy questions, requests, or complaints, contact support@synergy.arnislive.com with the subject “Privacy request”. You can also message us on Telegram at @ARNISLIVE or on Discord at @ARNISLIVE. Please do not send passwords, card details, or other sensitive information in a support message.

We will try to resolve your concern promptly. If you are not satisfied, you may complain to a supervisory authority or privacy regulator in your country. In the EEA, this is your local data protection authority; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner; in India, the Data Protection Board of India; in Brazil, the ANPD; in Canada, the Office of the Privacy Commissioner; in Australia, the OAIC; in New Zealand, the Privacy Commissioner; in South Africa, the Information Regulator; and in the United States, the relevant state attorney general or privacy agency.

See also our terms of service, cookie policy, refund policy, and DMCA policy.