Privacy Policy

2Information We Collect

We collect only the data needed to deliver the service, improve reliability, and meet legal obligations.

Account Data

• Email address and authentication identifiers.
• Profile settings such as locale and preferences.
• Support messages and account-help context.

Clan and Game Data

• Clan, member, chest, and activity metrics submitted or synced through the platform.
• Tracker settings and optional automation configuration values.
• Public-link settings, including slug and PIN verification status.
• Operational diagnostics used to maintain data quality and sync reliability.

Usage and Diagnostics

• Session-level request metadata and error diagnostics.
• Aggregated feature usage patterns to improve product quality.
• Security signals to prevent abuse and unauthorized access.

Payment and Contribution Data

• Provider transaction IDs, subscription status, and billing metadata.
• Guest contribution fields (email and display name) plus consent and payment-attempt metadata.

AI Assistant Data

• Prompts and relevant context sent to enabled AI model providers.
• Generated responses and safety logs used for quality and abuse prevention.

Device and Network Data

• IP address, user-agent, and approximate geolocation from IP.
• Browser and OS details used for compatibility and security.
• Cookie/localization identifiers required for user preferences and sessions.

3How We Use Your Information

We use data to run the service securely, support users, and keep billing operations compliant.

• Provide authentication, dashboard access, and clan analytics functionality.
• Process subscriptions, contributions, refunds, and billing support workflows.
• Maintain audit trails required for payment operations and legal compliance.
• Send service updates, security notices, and account-related communications.
• Improve performance, reliability, and user experience through aggregate analytics.
• Detect and prevent fraud, abuse, and unauthorized platform activity.
• Meet legal obligations and respond to lawful requests.
• Generate assistant outputs when users actively use AI features.

4Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on one or more lawful bases below.

Contract Performance

• To provide the service you requested.
• To process account operations and billing flows.
• To provide support and core service continuity.

Legitimate Interests

• To secure the platform and reduce abuse risk.
• To improve product quality and reliability.
• To maintain internal records and operational reporting.

Consent

• For optional analytics technologies where consent is required.
• For specific processing activities that require opt-in.

5Cookies and Similar Technologies

We use essential, functional, and analytics technologies to run TB Clan Tools smoothly. See our Cookie Policy for details.

6Third-Party Processors

We work with trusted providers to deliver hosting, analytics, AI, and payments.

8International Data Transfers

Because our providers operate globally, data may be processed outside your country of residence.

• We apply contractual and technical safeguards for cross-border transfers where required.
• Access is limited by role and operational need.
• Data is encrypted in transit and at rest where supported.
• You can request additional transfer information at support@tbclantools.com.

9Data Retention

We keep data only as long as needed for service operations, compliance, and legitimate business purposes.

• Account and clan operational data: retained while active, then up to 30 days after closure unless longer retention is legally required.
• Guest contributor PII (email and display name): retained for 3 years after last contribution activity or until a valid deletion request, subject to legal exceptions.
• Payment webhook and transaction payload records: retained for 7 years for tax/accounting compliance and dispute support.
• Wallet ledger records: retained as an immutable financial history.
• Security and abuse-prevention logs: retained up to 24 months unless needed for active investigations.
• When deletion is requested and legally permitted, identifiers are deleted or pseudonymized while required financial records are preserved.

11California Privacy Rights (CCPA/CPRA)

California residents may have rights under CCPA/CPRA, subject to statutory exceptions.

• Right to know what categories and specific personal information we collect.
• Right to request deletion of personal information we collected from you.
• Right to request correction of inaccurate personal information.
• Right to non-discrimination for exercising privacy rights.

12Children's Privacy

TB Clan Tools is not directed to children under 13 (or the minimum age required by your jurisdiction). If you believe a child submitted personal data without authorization, contact us and we will review and remove data where required.

13Payment Information

Sensitive payment credentials are handled by payment providers (such as Stripe, Paddle/PayPal, or NOWPayments) and are not stored in full by TB Clan Tools. We store operational payment metadata needed for subscriptions, support, and compliance.

14Public Links and Shared Data

If public links are enabled by a clan admin, selected clan data may be viewed by anyone with the link, with optional PIN protection. Admins control what data is shared and can revoke links at any time.

15Push Notifications

If enabled, we process device/browser subscription tokens to deliver requested notifications. You can disable notifications at any time in browser or device settings.

16Security Measures

We use practical technical and organizational safeguards to protect user data.

• Encryption in transit using TLS.
• Role-based access controls for operational systems.
• Audit logs for sensitive and administrative actions.
• Ongoing security maintenance and dependency updates.
• Incident-response procedures for security events.

17Changes to This Privacy Policy

We may update this policy when legal, product, or operational requirements evolve. The revision date at the top indicates the latest version.