Privacy Policy

1. Introduction

SkillSpoof ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our gaming automation platform, including our website, software, Discord community, and related services (collectively, the "Services").

By using our Services, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

• Discord User ID, username, and avatar (via Discord OAuth)
• Email address (obtained through Discord authentication)
• Payment information (processed securely through third-party providers - we do not store card details)
• Support tickets and communication with our team
• Profile information you voluntarily provide

2.2 Technical Information

• Hardware ID (HWID) - anonymized identifier for device management
• Device name you provide
• Device specifications (hardware and operating system)
• IP address (for security and fraud prevention)
• Software usage statistics and performance metrics
• Authentication logs and session data
• Error reports and diagnostic information
• Cookies and similar tracking technologies

2.3 Usage Data

• Modules downloaded and activated
• Scripts uploaded and shared through the platform
• Token balance and transaction history
• Subscription status and type
• Last login timestamps
• Game automation settings and configurations

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain our Services
• Authenticate users through Discord OAuth
• Manage Discord server roles and permissions
• Process payments and manage subscriptions
• Enforce device limits and manage device registrations
• Provide customer support and respond to inquiries
• Improve our Services and develop new features
• Detect and prevent fraud, abuse, and security threats
• Send important service notifications and updates
• Comply with legal obligations

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:

• Discord: We share necessary information with Discord for authentication and server integration (Discord ID, username, avatar)
• Payment Processors: Payment information is shared with our payment providers to process transactions
• Cloud Infrastructure: Data is stored on secure cloud servers with appropriate safeguards
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement industry-standard security measures to protect your personal information:

• Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
• Secure Authentication: Discord OAuth 2.0 with state parameter verification
• Access Controls: Limited employee access on a need-to-know basis
• Regular Security Audits: Continuous monitoring and security assessments
• Secure Servers: Infrastructure hosted with reputable providers with regular updates
• Password Protection: Passwords are hashed using industry-standard algorithms
• HWID Security: Hardware IDs are stored securely and used only for device management

6. Data Retention

We retain your information only as long as necessary to provide our Services, comply with legal obligations, and resolve disputes:

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Accounts inactive for 12+ months may be deleted with all associated data
• Technical Logs: Generally retained for up to 12 months
• Payment Records: Retained as required by law for tax and accounting purposes
• Deleted Accounts: Most data permanently deleted within 30 days; some anonymized data may be retained for analytics

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request your data in a machine-readable format
• Object to Processing: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent
• Opt-out: Opt-out of marketing communications (service notifications still sent)

To exercise these rights, please contact us through our Discord support server. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

Types of Cookies:

• Essential Cookies: Required for authentication and session management
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand usage patterns and improve Services
• Security Cookies: Detect and prevent fraud and abuse

You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect functionality of our Services.

9. Third-Party Services

Our Services integrate with the following third-party services:

Discord

• Used for authentication (OAuth 2.0)
• Community server integration
• Automatic role assignment based on subscription
• See Discord's Privacy Policy

Payment Processors

• Process subscription payments securely
• We do not store payment card information
• Each processor has their own privacy policy

Cloud Infrastructure

• Hosting and data storage
• Content delivery and performance optimization
• Subject to appropriate security agreements

10. Discord Server Integration

When you log in through Discord OAuth, we automatically:

• Add you to our Discord server (if not already a member)
• Assign roles based on your subscription type and status
• Sync roles when your subscription changes
• Store your Discord ID, username, and avatar for identification

This integration requires the guilds.join scope. You can leave the Discord server at any time, but this may affect your access to community support and updates.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to delete such information.

If you believe we have collected information from a minor, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers in accordance with applicable data protection laws, including:

• GDPR (General Data Protection Regulation) for EEA users
• Standard Contractual Clauses where applicable
• Adequate security measures for data in transit and at rest

13. GDPR Compliance (EEA Users)

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR):

• Legal Basis: Processing based on contract performance, legitimate interests, and consent
• Data Controller: SkillSpoof is the data controller
• Your Rights: All rights listed in Section 7 apply
• Data Protection: By design and by default
• Breach Notification: We will notify you of any data breaches as required by law
• DPO Contact: For GDPR inquiries, specify "GDPR Request" in your message

14. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising CCPA rights

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes through:

• Discord announcements in our server
• Dashboard notifications
• Email (if provided)
• Updated "Last Updated" date at the top of this policy

Continued use of our Services after changes constitutes acceptance of the updated Privacy Policy.

16. Contact Us

For questions about this Privacy Policy or our data practices, please contact us:

• For GDPR requests: Specify "GDPR Request" in your message
• For CCPA requests: Specify "CCPA Request" in your message
• For data deletion: Contact us through Discord support with "Delete Account" request