Privacy Policy

2. Data Controller

Ilyssa Software Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us through our contact page.

3. Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Authentication information (email address and, when provided through third-party authentication providers like Google, your name) when you register through Auth0
• Server configuration information including server name, selected game, region, and template
• Communications you send to us via email when contacting support

3.2 Information Collected Through Third-Party Services

• Authentication data processed through Auth0, which may include your name if you sign in using a third-party provider like Google
• Payment information processed through Stripe (we do not store your complete payment details)

3.3 Technical Information

• IP address and access logs (for security purposes)
• Technical information necessary for providing the service

4. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our game server hosting services
• To manage your account and subscription
• To process payments
• To communicate with you regarding service updates or respond to your inquiries
• To ensure the security of our services
• To comply with legal obligations

Important Note: We do not use analytics libraries or serve advertisements. We do not track your browsing behavior for marketing purposes or share your data with third parties for advertising.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract fulfillment: Processing necessary to fulfill our contract with you to provide game server hosting services
• Legitimate interests: Processing necessary for our legitimate interests, such as ensuring the security of our services
• Legal obligation: Processing necessary to comply with our legal obligations
• Consent: Where we have your explicit consent to process your data for specific purposes

6. Data Sharing and Transfers

We share your personal data with the following categories of recipients:

• Service providers: We use trusted third-party service providers to help us operate our business and deliver services to you. These providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
• Auth0: For authentication services
• Stripe: For payment processing
• Vultr: For cloud infrastructure services

When we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in compliance with GDPR requirements, such as Standard Contractual Clauses.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account information is retained while your account is active
• After account termination, we retain certain information as required for legal, financial, or security purposes
• Server and all associated game data are deleted immediately upon subscription termination when the paid period ends and no renewal payment is made

8. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right to access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request restriction of processing in certain circumstances
• Right to data portability: You can request the transfer of your data to you or a third party
• Right to object: You can object to processing based on legitimate interests
• Rights related to automated decision-making: You can request human intervention in automated decisions

To exercise these rights, please contact us through our contact page. We will respond to your request within one month, unless the request is complex or numerous, in which case the response period may be extended by up to two additional months.

9. Cookies and Similar Technologies

Our service uses necessary session cookies to maintain your authenticated state. These cookies are essential for the functioning of our service and expire when you close your browser or end your session.

Important: We do not use cookies for analytics, advertising, or tracking purposes. We do not serve advertisements or use third-party analytics libraries.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include encryption, access controls, and regular security assessments.

However, no data transmission over the Internet or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes through a notice on our website or by email prior to the change becoming effective.

12. Complaints

If you are concerned about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us through our contact page.

Ilyssa Software Ltd
The data controller for your information