123Filtering Privacy Policy

Last updated: January 2025

Thank you for choosing 123Filtering (“123Filtering”, “we”, “us”, or “our”). We are committed to protecting your privacy while delivering enterprise-grade DNS security solutions to managed service providers (MSPs), internet service providers (ISPs), and IT service providers.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use:

123Filtering partner portal and management dashboard
123Filtering mobile agents (Android and iOS)
123Filtering desktop agents (Windows and macOS)
123Filtering DNS resolver services
Any websites, APIs, or related services that link to this Privacy Policy (collectively, the “Services”).

Please read this Privacy Policy carefully. By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

1. Who We Are

Controller / Provider: Hey Value Tech SRL Registered address: Augustin Presecan 6, Cluj-Napoca, Cluj, RO, 400505 Email: privacy@123filtering.com

If you are in the European Economic Area (EEA), the United Kingdom (UK) or other regions with similar laws, Hey Value Tech SRL is the data controller of your personal information, unless expressly stated otherwise.

If applicable, our Data Protection Officer (DPO) can be contacted at: dpo@123filtering.com

2. Scope of This Privacy Policy

This Privacy Policy applies to:

Channel partners (MSPs, ISPs, IT service providers) using the 123Filtering platform
Partner administrators and technical staff accessing the management portal
End users whose devices are protected by 123Filtering through partner deployments
Organizations using 123Filtering for education, government, or enterprise deployments

This policy does not apply to:

Third-party websites, apps, or services that you access through links or integrations in our Services
Any products or services with separate privacy policies that do not incorporate this one

3. Information We Collect

We collect information in three main ways:

Information you provide directly
Information collected automatically when you use the Services
Information from third parties

We strive to minimize collection and retention of data while providing effective DNS security services.

3.1 Information You Provide Directly

Partner account and organization information

Company name and business details
Administrator names and contact information
Email addresses
Password or other authentication credentials (stored in encrypted form)
Billing and invoicing information
API keys and integration credentials

Client and tenant information

Client organization names
Network identifiers and deployment configurations
Policy configurations and filtering rules
White-label branding settings

Support and communication information

When you contact us (e.g., by email, support portal, or phone):

Contact details
Content of your messages
Any additional information you choose to provide (e.g., logs, screenshots, network configurations)

3.2 Information Collected Automatically

DNS query data (for filtering and threat protection)

To provide content filtering and security services, we process:

DNS queries sent from protected networks and devices (domain names requested)
Whether a request was allowed, blocked, or redirected
Block categories (e.g., malware, phishing, adult content, gambling, etc.)
Timestamp and the tenant/network/device that made the request
Source IP addresses (for policy enforcement and analytics)

We do not inspect or store the full content of web pages, emails, or application data. Our filtering operates at the DNS layer only.

Device and agent information

When 123Filtering agents are deployed:

Device identifiers (e.g., device name, OS type and version, agent version)
Device IP address and network information
Approximate location inferred from IP (city/region level)
Agent status and health metrics

Usage analytics

We collect analytics data to improve the Services:

Portal usage patterns and feature adoption
API usage and integration metrics
Aggregated statistics on filtering effectiveness
System performance and reliability metrics

3.3 Information from Third Parties

We may receive information from:

Threat intelligence providers: Domain reputation, malware signatures, phishing indicators, and categorization data
Payment processors: Confirmation of payment, transaction IDs, and subscription status
Integration partners: Data necessary to support RMM, PSA, and billing integrations you configure

4. How We Use Your Information

We use your information for the following purposes:

To provide and operate the Services
- Process DNS queries and enforce filtering policies
- Block malware, phishing, and other threats
- Provide multi-tenant management and reporting
- Maintain partner accounts and billing
To improve and develop the Services
- Enhance threat detection and categorization accuracy
- Develop new features and capabilities
- Optimize system performance and reliability
- Analyze usage patterns to improve user experience
To communicate with you
- Send service notices (e.g., security alerts, policy updates, maintenance windows)
- Provide technical support and onboarding assistance
- Share product updates and partner program information
For safety and security
- Detect and prevent misuse, fraud, abuse, or security threats
- Investigate security incidents and protect our infrastructure
- Enforce our Terms of Service and Acceptable Use Policy
To comply with legal obligations
- Respond to lawful requests by public authorities
- Maintain records as required by applicable law
- Support compliance requirements (CIPA, E-Rate, HIPAA, etc.)

Where required by law (e.g., in the EEA/UK), we rely on specific legal bases such as contract performance, legitimate interests, consent, and compliance with legal obligations.

5. DNS Filtering and Data Processing

5.1 DNS-Level Filtering

When networks or devices use 123Filtering as their DNS resolver:

DNS queries pass through our infrastructure for resolution and filtering
We apply partner-configured policies to determine whether to allow, block, or redirect requests
We log query data for reporting, analytics, and threat intelligence

We use these logs to:

Provide real-time and historical reporting dashboards
Generate compliance reports (e.g., CIPA, E-Rate audits)
Improve threat detection and categorization
Monitor system performance and security

5.2 Agent-Based Filtering

When 123Filtering agents are deployed on endpoints:

Agents enforce DNS filtering policies on the device
Agents communicate with our infrastructure to sync policies and report events
Roaming protection ensures consistent filtering regardless of network location

5.3 Data Retention for DNS Logs

Real-time query data: Retained for operational purposes (hours to days)
Aggregated analytics: Retained for reporting and trend analysis (configurable retention periods)
Threat intelligence data: Retained as needed to maintain security effectiveness

Partners can configure retention periods and data granularity based on their compliance requirements.

6. Multi-Tenant Architecture and Data Isolation

123Filtering is designed for channel partners managing multiple clients:

Each client tenant is logically isolated within our platform
Partner administrators have role-based access to their client tenants
Client data is not shared between tenants or partners
White-label deployments maintain complete branding separation

7. Cookies and Similar Technologies

On our websites and partner portal, we use:

Essential cookies: Required for authentication, session management, and security
Preference cookies: To remember your settings and preferences
Analytics cookies: To understand how partners use the portal and improve the experience

Where required by law, we provide cookie consent mechanisms. You can manage cookies through your browser settings.

We do not sell your personal information.

We may share your information in the following limited circumstances:

Service providers / processors

With carefully selected third-party vendors that help us operate the Services:
- Cloud infrastructure providers (hosting, compute, storage)
- Threat intelligence providers
- Payment processors
- Customer support tools
- Email and communication platforms
These providers are contractually obligated to protect your information.
Within our corporate group

We may share data within our corporate group for operational purposes, subject to appropriate safeguards.
Legal and safety reasons

We may disclose information if reasonably necessary to:
- Comply with applicable law or valid legal process
- Protect the rights, property, or safety of 123Filtering, our partners, or the public
- Enforce our Terms of Service
Business transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred, subject to this Privacy Policy.
With your consent

We may share information for other purposes when you direct or consent to such sharing.

9. International Data Transfers

We operate globally and may process your information in countries with different data protection laws.

When transferring personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we use appropriate safeguards such as:

Standard Contractual Clauses approved by the European Commission
Other lawful transfer mechanisms as allowed by applicable law

10. Data Retention

We retain personal information only for as long as needed to:

Provide and maintain the Services
Fulfill the purposes described in this Privacy Policy
Comply with legal, accounting, or reporting obligations
Resolve disputes and enforce agreements

When data is no longer needed, we delete it or anonymize it.

11. Security

We employ technical and organizational measures to protect your information:

Encryption in transit (TLS/HTTPS) and at rest
Multi-factor authentication and role-based access controls
Regular security assessments and penetration testing
SOC 2 compliant infrastructure and processes
24/7 security monitoring and incident response
Redundant infrastructure and disaster recovery

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

12. Compliance Support

123Filtering helps partners meet regulatory requirements:

CIPA compliance: Content filtering and reporting for E-Rate eligibility
Education requirements: Age-appropriate filtering and audit logging
Government standards: Support for FedRAMP, StateRAMP, and FISMA requirements
Healthcare: HIPAA-compliant configurations available
Data protection: GDPR and CCPA compliant data handling

13. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

You may have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Restrict or object to processing
Data portability
Withdraw consent
Lodge a complaint with a supervisory authority

13.2 Rights under CCPA/CPRA (California)

California residents may have the right to:

Know what personal information we collect and disclose
Request deletion of personal information
Opt out of the sale of personal information (we do not sell personal information)
Not be discriminated against for exercising rights

13.3 Exercising Your Rights

To exercise your rights, contact us at:

Email: privacy@123filtering.com
Address: Augustin Presecan 6, Cluj-Napoca, Cluj, RO, 400505

We may verify your identity before responding.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

Changes in our Services
Changes in applicable laws
Operational or technical changes

When we make material changes, we will:

Update the “Last Updated” date
Provide notice through the partner portal or email where required

Your continued use of the Services after changes become effective signifies acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy or your personal information, contact:

Hey Value Tech SRL Attn: Privacy / Data Protection Address: Augustin Presecan 6, Cluj-Napoca, Cluj, RO, 400505 Email: privacy@123filtering.com

If you are in the EEA/UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.