Privacy Policy

1. Introduction

Runetify ("we", "us", or "our") is dedicated to safeguarding the personal privacy of our users, streamers, and website visitors. This Privacy Policy explains how we collect, process, store, and share personal information when you visit https://runetify.app or use the Runetify desktop application and overlay services.

We adhere to strict data protection regulations worldwide, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We minimize data collection to only what is strictly required to provide and license our software:

• Account & License Information: When you purchase or activate Runetify, we receive your email address, display name, and assigned license key or subscription tier.
• Streamer Configuration: Your public TikTok username or streaming handle that you input to establish a local live event connection. We never access your private TikTok passwords, messages, or financial information.
• Technical Diagnostics: Anonymized application version, operating system version (e.g. Windows 11 x64), and crash reports to fix bugs and improve stability.
• Financial & Payment Data: We do not collect or store your payment card numbers, bank details, or CVVs. All transactions are securely processed directly by our Merchant of Record partners (Lemon Squeezy / Tazapay) on PCI-DSS Level 1 compliant servers.

3. Legal Bases for Processing (GDPR)

Under the GDPR, we process your personal data under the following legal bases:

• Contractual Necessity: To deliver software downloads, activate your license tier, verify updates, and provide customer support.
• Legitimate Interests: To detect piracy, prevent fraudulent activities, and maintain software security and performance.
• Consent: For non-essential cookies and analytics, where you have granted prior consent via our cookie banner.

4. Third-Party Service Providers and Sub-Processors

We work with trusted third-party cloud infrastructure and payment partners who adhere to rigorous privacy standards:

• Lemon Squeezy & Tazapay: Payment processing, invoicing, tax compliance, and Merchant of Record services.
• Vercel & Google Cloud / Firebase: Secure web hosting, SSL certificate management, and database synchronization.
• GitHub: Secure distribution of official open releases and signed desktop installer binaries.

5. Data Retention and Security

We retain account and license records only for as long as your account is active or as necessary to fulfill legal and warranty obligations. We enforce industry-standard security safeguards, including TLS 1.3 encryption in transit, strict access controls, and regular vulnerability audits.

6. Your Privacy Rights

Regardless of your geographic location, you enjoy comprehensive privacy rights regarding your data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You may correct or update inaccurate account information.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account and personal records.
• Right to Object and Restrict: You may object to or restrict certain processing activities.
• California Rights (CCPA): We do not sell or share your personal information with third parties for monetary consideration.

To exercise any of these rights, email our data privacy team at privacy@runetify.app. We reply to all verified requests within 30 days without charge.

7. Cookies and Tracking Technologies

Our website uses essential session cookies for authentication and functional preferences. For full details on our cookie usage and instructions on how to manage your cookie preferences, please visit our Cookie Policy.

8. Children's Privacy

Runetify is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from minors.

9. Contact the Data Protection Officer