The Global Online Scam Recovery Agency (“GOSRA”, “we”, “our”, or “us”) is committed to protecting the privacy of scam victims and all visitors to gosra.org. This policy explains how we handle your personal data.
The data controller is the Global Online Scam Recovery Agency, operating from 100 Financial District, New York, NY 10005, United States. Contact our Data Protection Officer at privacy@gosra.org.
We use your personal data to:
We never sell your data. We only share information with trusted third parties where strictly necessary for your case (e.g., legal partners in relevant jurisdictions, law enforcement when appropriate, and financial institutions during recovery). All sharing is governed by strict confidentiality agreements.
Because online scam recovery is inherently global, your data may be transferred to and processed in countries outside your home jurisdiction. We ensure all transfers comply with applicable data protection laws and use Standard Contractual Clauses where required.
We retain case files for a minimum of 7 years after case closure to comply with professional regulatory requirements. Contact information is retained for 3 years after last contact unless you request earlier deletion.
Depending on your jurisdiction, you may have the right to:
To exercise your rights, contact privacy@gosra.org.
We implement bank-grade security including AES-256 encryption at rest, TLS 1.3 in transit, multi-factor access controls, 24/7 monitoring, and ISO 27001-aligned processes. Staff undergo annual security training and background checks.
Our use of cookies is detailed in our Cookie Policy.
We may update this policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of our services after changes constitutes acceptance.
Questions about this policy? Email privacy@gosra.org or write to us at 100 Financial District, New York, NY 10005, USA.