Privacy Policy

1. Information We Collect

Account Information

• Email address - Required for account creation and communication
• Password - Encrypted and stored securely (we cannot see your actual password)
• Profile data - Optional information like VRChat display name, avatar images
• Discord ID - If you link your Discord account for role synchronization and OAuth login
• VRChat identity - VRChat display name linked through Discord (/link-vrchat)
• User roles and permissions - Roles assigned to your account for access control

Usage Data

• Website analytics - Basic usage statistics (pages visited, time spent) via Cloudflare Analytics
• Purchase / license records - License claims processed through our Discord bot
• Role grants - Records of roles assigned, removed, and expiration dates
• Account activity - Actions taken on your account (role changes, profile updates) for audit purposes

2. How We Use Your Information

• Account management - Authenticate users and manage account access, including role-based permissions
• Service delivery - Provide access to purchased content, membership perks, and role entitlements
• License verification - Discord /verify-license grants access to purchased products and associated roles
• Discord integration - Community roles and VRChat linking (/link-vrchat)
• Customer support - Respond to inquiries and provide technical assistance
• Security and moderation - Monitor for abuse, fraud, unauthorized access, and enforce community guidelines
• Audit logging - Maintain records of account changes and administrative actions for security and compliance
• Improvements - Analyze usage patterns to improve our services

3. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:

• Service providers - With trusted partners who help us operate our services (Supabase, Cloudflare)
• Legal requirements - When required by law or to protect our rights and safety
• Business transfers - In the event of a merger or acquisition (with notice)
• Consent - When you explicitly give us permission to share

4. Third-Party Services

We use the following services to operate our platform:

• Supabase - Authentication, database, and file storage
• Cloudflare - Website hosting and security
• Patreon - Membership and payment processing
• Payhip/Jinxxy/Gumroad - Marketplace and payment processing
• Discord - Community features and role synchronization

These services have their own privacy policies. We recommend reviewing them.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption - All data is encrypted in transit and at rest
• Access controls - Limited access to personal information on a need-to-know basis
• Regular updates - Security patches and system updates
• Monitoring - Continuous monitoring for security threats

6. Cookies and Local Storage

We use cookies and local storage for:

• Authentication - Remember your login status
• Preferences - Save your UI settings and preferences
• Analytics - Understand how you use our website
• Security - Protect against fraud and abuse

You can disable cookies in your browser, but this may affect website functionality.

7. Data Retention

We retain your information for as long as necessary to provide our services:

• Active accounts - Data is kept while your account is active
• Purchase records - Retained for legal and accounting purposes, including license keys
• License verification - Discord license claims are retained to maintain access to purchased products
• Role grants - Role assignment history is retained for audit purposes and to restore roles if needed
• Audit logs - Administrative actions and account changes are retained for security and compliance
• Deleted accounts - Upon account deletion, most personal data is deleted within 30 days. However, some records (purchase history, audit logs, role grants) may be retained for legal compliance, fraud prevention, and service integrity

8. Your Rights

You have the following rights regarding your personal information:

• Access - Request a copy of your personal data, including role assignments
• Correction - Update or correct inaccurate information through your account settings or by contacting us
• Deletion - Request deletion of your account and personal data. You can delete your account directly from your account page, or contact us for assistance. Note: Some data may be retained for legal compliance
• Portability - Receive your data in a structured format
• Objection - Object to certain types of data processing
• Discord data - You can unlink your Discord account at any time

To exercise these rights, you can use the account management features on your account page, or contact us at thesnoozebusiness@gmail.com

9. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it immediately.

10. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: thesnoozebusiness@gmail.com
Discord: Join our Discord