At RoProduct, we take the privacy and security of our users very seriously. This privacy statement explains in detail what data we collect, why we collect it, and more importantly: what data we do not store.
1. What Data We DO Collect
For the proper functioning of our platform and the anti-piracy (DRM) system, we process the following data:
- Identification: Your Discord ID, Discord Username, and linked Roblox ID and Username.
- Transactions: Purchase history, including order IDs, the purchased product, the purchase amount, and the date.
- Network & Security: Limited network data such as your IP address during checkout or login, strictly for fraud prevention purposes (e.g., VPN detection during suspicious payments).
- Platform Activity: Linked webhooks, servers, and platform reviews you submit.
2. What Data We DO NOT Store
We believe it is important to be transparent about what we deliberately keep off our servers:
- No Payment Data: We never store credit card numbers, bank account numbers, or PayPal passwords. All payments are processed through external, highly secure payment providers such as Stripe.
- No Passwords: You log in via Discord OAuth2 and Roblox in-game integrations. We have no access to your passwords for these platforms. Vendors do use a local password if email login is enabled, which is stored heavily hashed (bcrypt).
- No Private Messages: We do not collect private messages (DMs) that you conduct outside of our bot system.
3. Why Do We Collect This Data?
The data is used for:
- The automated delivery of purchased digital goods (whitelisting in the vendor's Roblox game).
- Supporting customer service via our ticket system (staff needs to see which product is linked to you).
- Preventing fraud and abuse (issuing network bans to "leakers" or "chargebackers").
4. Sharing with Third Parties (Vendors and Partners)
As a buyer on our platform, you purchase indirectly from an independent Seller (Vendor). We share your Roblox ID and Discord ID with the respective Vendor so they can deliver their product to you and offer you support in their own community. We never sell data to commercial advertisers.
5. Your Rights Under the GDPR
Under European privacy legislation, you have the right to access your data at any time and the right to be "forgotten" (data erasure). Please note: if we delete your data at your request, all active licenses for purchased Roblox products will expire, as the link with your Roblox ID will be destroyed.
6. Data Breaches & Security
We use modern encryption standards and server-level security to prevent unauthorized access. In the unlikely event of a data breach involving identifiable information, we will notify you and the competent authorities within 72 hours.
7. Contact
For questions about your privacy or to submit a GDPR request, please contact us by opening a ticket in the official RoProduct Discord server.