Controller and brand

LobbyKD is a brand of СБММОФФ ЕООД. СБММОФФ ЕООД is the controller of personal data processed for the LobbyKD service unless a third party is independently responsible for its own processing. Contact us through the support address displayed on this legal page.

Information we process

We process information needed to operate and secure LobbyKD, including account email, password hash, timezone, account preferences, subscription/product identifiers, lobby checks, ratings, service usage, support messages, security logs and administrator actions relevant to your account. Uploaded screenshots are processed to extract lobby IDs and are not intended for permanent storage unless a specific support/security workflow requires otherwise.

Payments and billing

Billing is under СБММОФФ ЕООД and the intended card-statement descriptor is LobbyKD. Payment-card details are collected and processed by Stripe rather than stored as full card numbers by LobbyKD. We store payment-related identifiers and evidence such as Stripe customer, subscription, invoice, Checkout Session, payment status, billing-period and product information required to provide the service, reconcile payments, prevent fraud, account for transactions and handle refunds/disputes.

Purposes and legal bases

We process personal data as necessary to perform the LobbyKD contract, comply with legal/accounting obligations, protect our legitimate interests in service security, fraud prevention, abuse prevention, support and the establishment/exercise/defence of legal claims, and where applicable on the basis of consent. We do not treat acceptance of the Terms or withdrawal acknowledgement as consent for unrelated marketing.

Security, fraud prevention and dispute evidence

Signup, login and purchase IP addresses may be stored encrypted together with device/browser information, keyed IP and user-agent hashes, checkout-consent snapshots, policy hashes, service-usage timelines, billing authorization results and account communications. These records may be used to investigate fraud, secure accounts, answer support requests and establish, exercise or defend payment/legal claims. Evidence snapshots and exports are access-restricted to authorized administrators.

Recipients and processors

Personal data may be disclosed to service providers that are necessary to operate LobbyKD, such as hosting/infrastructure, email delivery and Stripe/payment services, and to professional advisers, banks/card networks, regulators, courts or law-enforcement authorities where legally required or reasonably necessary for legal claims. Each third party may also have its own legal obligations and privacy terms.

Retention

We keep personal data only for as long as reasonably necessary for the purposes described above and applicable legal/accounting/claims requirements. LobbyKD chargeback/consent evidence is configured for a default retention period of up to 730 days unless a longer period is required for an active dispute, legal claim or mandatory recordkeeping obligation. Transaction/accounting records may need to be retained for longer periods required by law. Data no longer required is deleted or anonymised where reasonably practicable.

Your rights

Subject to applicable law, you may have rights of access, correction, erasure, restriction, objection and data portability, and the right to lodge a complaint with a competent supervisory authority. Where processing relies on consent, consent can be withdrawn for future processing without affecting prior lawful processing. Rights can be exercised through the support address shown on this page; some data may need to be retained where a legal obligation or legal-claims basis applies.