1Who we are
In short: Nyhilism, Inc. runs GrabYourDot and is responsible for your data.
1.1GrabYourDot.com is operated by Nyhilism, Inc., a Delaware corporation. For data protection laws such as the GDPR, we are the controller of the personal information described here.
1.2Questions or requests about your data: privacy@grabyourdot.com. Postal address: Nyhilism, Inc., 131 Continental Dr, Ste 305, Newark, DE 19713.
2What we collect
In short: what you give us to buy and sell, what payments need, and basic site usage.
2.1Account. Your email address, and the display name and notification choices you set.
2.2Listings. The domains you list, prices, descriptions, page content, and the results of our DNS checks that prove you control them.
2.3Sales and offers. Offers, orders, the registrar and username you want a domain sent to, your Escrow.com email, and any transfer code you give us.
2.4Payments. Stripe and Escrow.com collect card, bank and identity details directly. We receive only references to them, such as a payment ID, the last four digits of a card, and whether a payout account is ready.
2.5Transfer assistant chats. The messages you send in the transfer chat on an order, and replies from our team.
2.6Usage. Pages viewed and how many people typed a listed domain into their browser, counted per listing and per day, not per person. Site-wide visit counts use a scrambled form of your IP address that changes every day and can't be turned back into the address. Our server also logs IP addresses and browser details for security.
2.7Visits to sellers' domains. When a seller points their domain at us, we count visits to its sales page so buyers can see verified traffic. For each visit we keep the country, how the visitor arrived (typed it, a link, search or social) and a scrambled key that changes every month, so we can count unique visitors. We don't store the IP address. Countries come from IP Geolocation by DB-IP, looked up on our own server.
2.8Messages to us. Anything you send to our support addresses.
3How we use it
In short: to run your sales, pay people, keep the marketplace safe, and meet the law.
3.1To sign you in, show your listings, take payments, hold and release money, pay sellers and move domains between accounts.
3.2To send emails about your account and orders, such as sign-in links, offers and sale updates. We send marketing emails only if you ask for them, and every one has an unsubscribe link.
3.3To prevent fraud and abuse, check that sellers control the domains they list, and keep the site secure.
3.4To answer support requests and settle disputes, and to keep records that tax and financial laws require.
3.5To understand how the site is used, in totals, so we can improve it.
4Legal bases
In short: for most things it's to perform our agreement with you.
4.1If the GDPR or UK GDPR applies to you, we rely on: contract to run your account, sales and payouts; legal obligation for tax and anti-money-laundering records; legitimate interests for security, fraud prevention and total usage figures; and consent for analytics cookies and marketing email, which you can withdraw at any time.
6Where your data is stored
In short: in the United States.
6.1Our servers and most of our service providers are in the United States. Where we move personal data out of the EU or UK, we use the standard contractual clauses or another safeguard the law accepts.
7How long we keep it
In short: only as long as we need it, and longer only where the law says so.
| Data | Kept for |
|---|---|
| Account and listings | Until you close your account |
| Orders, payouts and their chat | 7 years after the sale, for tax law |
| Transfer codes | Deleted 30 days after the sale closes |
| Sign-in links | 20 minutes, and they work once |
| Signed-in sessions | 30 days |
| Visits to sellers' domains | 13 months |
| Server security logs | 30 days |
8Your rights
In short: you can see, fix, download or delete your data, wherever you live.
8.1You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. If the GDPR applies, you can also ask us to restrict processing, move your data to another service, and complain to your local data protection authority.
8.2California and other US state residents have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We don't sell or share it, so there is nothing to opt out of. We won't treat you differently for using these rights.
8.3Email privacy@grabyourdot.com from your account address. We may need to confirm it's you. We answer within 30 days. If we must keep something, for example for tax law, we'll tell you what and why.
9Security
In short: we keep what we hold to a minimum and protect it.
9.1The site is served over HTTPS only. Card and bank details are entered into Stripe's own secure fields. Your session is kept in a cookie that page scripts can't read, and only a few people at GrabYourDot can reach our database.
9.2No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.
10Children
In short: the marketplace is for adults.
10.1You must be 18 or older to use the marketplace. We don't knowingly collect data from children. If you think we have, email us and we'll delete it.
11Changes and contact
In short: we'll tell you before anything important changes.
11.1We'll post changes here with a new "Last updated" date, and email account holders before a material change takes effect.
11.2Privacy questions: privacy@grabyourdot.com. Everything else: support@grabyourdot.com.