Privacy Policy
Last updated: July 19, 2026
What we collect
When you sign in with Discord we receive your Discord ID, username, display name, avatar, and email address. You may then add checkout profiles (names, contact details, addresses), tokenized payment references, and IMAP account settings.
How it's protected
IMAP credentials are encrypted with AES-256-GCM before they touch the database and are never returned to the browser after creation. Full card numbers and CVV codes are never stored anywhere. Emails, phone numbers, and secrets are masked throughout the interface, and profile lists never transmit full contact details to the browser.
How it's used
Your data is used solely to operate the portal and the checkout services you configure. We do not sell your data or share it with third parties beyond the infrastructure needed to run the service.
Audit history
Changes to your profiles, imports, and account are recorded in a private activity log visible only to you. Log entries store event descriptions and counts — not full profile contents.
Your controls
You can export your non-sensitive data as JSON and permanently delete your account — including every profile, credential, and log entry — from Settings at any time.
Contact
Privacy questions? Reach us through the Support page or our Discord server.