Privacy Policy
ISO100 keeps public portfolio analytics lightweight and uses security data for service protection, abuse prevention, and support.
Last updated May 23, 2026
Operator
ISO100 is operated by Alias Labs Pty Ltd. Alias Labs Pty Ltd is responsible for the ISO100 account, portfolio, support, security, abuse, and public analytics data described in this policy. Alias Labs' company website is https://alias.io.
Information we collect
- Account information, such as email address, profile details, and authentication records.
- Portfolio content, including photographs, display names, galleries, captions, alt text, links, rights notices, and publish metadata.
- Moderation and publishing records, including upload status, automated moderation results, sensitive-content flags, manual markings, report history, enforcement decisions, and restricted operational notes.
- Technical records, such as IP address, user agent, request path, timestamps, rate-limit decisions, and security events.
- Support messages and operational correspondence you send to ISO100.
Public portfolio analytics
Public portfolio pages may send no-cookie analytics events such as portfolio views and gallery views. These events are used for aggregate reporting and service health. ISO100 does not use public portfolio analytics to build a cross-site visitor identity graph.
IP addresses and abuse controls
ISO100 may process IP addresses and user agents for security, abuse prevention, bot filtering, rate limiting, troubleshooting, and legal compliance. Raw IP access is restricted and should be retained only for the short operational period needed for those purposes, normally 30 to 90 days unless a longer retention period is required for an active abuse, security, support, or legal matter.
How we use information
- Operate, publish, render, secure, and support ISO100 portfolios.
- Process photos into public display variants while keeping originals private by default.
- Review, classify, restrict, blur, remove, or preserve content when needed to enforce the Terms, Content Policy, copyright process, abuse controls, or legal obligations.
- Respond to privacy, copyright, abuse, support, and security requests.
- Maintain service logs, audit records, reliability metrics, and aggregate analytics.
Service providers
ISO100 uses infrastructure and operational service providers to host the site, store data, authenticate users, process photos, monitor reliability, and deliver support. These providers may process data only as needed to provide their services to ISO100.
Reports, safety, and legal preservation
When ISO100 receives a report or detects a serious safety, exploitation, copyright, security, or legal concern, we may restrict public access while reviewing the issue, keep records needed to investigate or document the matter, and escalate to appropriate parties where required or appropriate.
Suspected child sexual exploitation, non-consensual intimate imagery, threats, or other illegal content may require longer retention and restricted handling even after an account is deleted.
Your choices
You can update portfolio content, unpublish public pages, request access or deletion, and contact ISO100 about privacy concerns. Some records may be retained where needed for security, abuse prevention, legal compliance, or transaction integrity.