Privacy Policy

EchoMk1 operates the Oberius subdomain monitoring platform. We are committed to protecting your privacy and handling your personal data responsibly and in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. By using our Service, you consent to the data practices described in this policy.

EchoMk1 is the data controller for personal data collected through the Oberius platform. You can contact us regarding data protection matters at:

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party services that assist in platform operation (payment processing, email delivery, hosting infrastructure)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)
• Consent: With your explicit consent for specific purposes

All third-party service providers are contractually bound to protect your data and use it only for the specified purposes.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained for the duration of your active subscription plus 3 years for billing records
• Scan Results: Retained according to your subscription plan's reporting history limits
• Security Logs: Retained for 12 months for security and fraud prevention
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

Under GDPR and other data protection laws, you have the following rights:

• Access: Request a copy of your personal data we hold
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use our platform (anonymized)

You can control cookie preferences through your browser settings. Note that disabling essential cookies may affect platform functionality.

We implement industry-standard security measures to protect your data:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure hosting infrastructure with monitoring
• Data backup and disaster recovery procedures

While we strive to protect your data, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and enable two-factor authentication.

If you have any questions about this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.