[LEGAL NAME] ("Apollonia", "we") is the controller of your personal data. This policy explains what we collect, why, and your rights under UK data protection law. Contact: [CONTACT EMAIL].
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Email address and password (stored only in hashed form by [SIGN-IN PROVIDER]) | To create and secure your account | Contract |
| Discord user ID, username and email, if you sign in with Discord | To sign you in and, if offered, give you a member role | Contract |
| Subscription status, billing country and payment history. Card details go to [PAYMENT PROCESSOR] and never reach us | To take payment, manage your subscription and keep tax records | Contract; legal obligation |
| Workspace settings such as layout and theme | To keep the workspace as you left it | Contract |
| IP address, device and browser type, pages viewed, login times | To keep the Service secure, detect account sharing and fix problems | Legitimate interests |
| Messages you send us | To answer you | Legitimate interests |
| Email address for product updates | To tell you about changes and new features. You can opt out at any time | Legitimate interests, or consent where required |
We do not collect details of your trades, brokerage accounts or finances. We do not sell your data.
Cookies
We use cookies that are strictly necessary to keep you signed in and remember your settings. If we add analytics or marketing cookies, we will ask for your consent first.
Who we share it with
We share data only with providers who help us run the Service, under contracts that require them to protect it:
- [PAYMENT PROCESSOR], for payments;
- [SIGN-IN PROVIDER], for accounts and sign-in;
- Discord, if you choose Discord sign-in;
- [HOSTING PROVIDER], for hosting and the database;
- our email delivery provider.
We may also disclose data where the law requires it, or to a buyer if the business is sold, in which case this policy continues to apply.
International transfers
Some providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the approved contractual safeguards.
How long we keep it
- Account data: while your account is open, then deleted within 30 days of closure.
- Payment and tax records: six years, as the law requires.
- Security logs: up to 12 months.
- Support messages: up to two years.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to our use of it, or move it to another service. Where we rely on consent, you can withdraw it at any time. Email [CONTACT EMAIL] and we will respond within one month.
You can also complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.
Security
Data is encrypted in transit, access is restricted, and passwords are never stored in readable form. No system is perfectly secure; if a breach is likely to put you at risk, we will tell you and the ICO as the law requires.
Children
The Service is for adults. We do not knowingly collect data from anyone under 18.
Changes
We will post any update here with a new effective date and email you about material changes.