Privacy Policy

1. Introduction

Flute CMS ("Company", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, marketplace, and services (collectively, the "Service").

This Privacy Policy applies to all users of the Service, including visitors, registered users, and customers. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Data Controller

For the purposes of applicable data protection laws, Flute CMS is the data controller responsible for your personal data collected through the Service. We determine the purposes and means of processing your personal data in accordance with applicable privacy regulations.

3. Information We Collect

We collect information in several ways when you use our Service. The types of information we collect include:

Information You Provide Directly

When you register for an account, make purchases, or interact with our Service, you may provide us with:

• Account registration information through Discord OAuth (username, discriminator, email, avatar)
• Profile information you choose to add or update
• Payment and billing information for purchases (processed by third-party payment providers)
• Communications you send to us, including support requests and feedback
• Product reviews, ratings, and comments
• Information about your websites and game servers connected to the Service

Information Collected Automatically

When you access or use our Service, we automatically collect certain information:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage information (features used, actions taken, time spent on pages)
• Approximate geographic location based on IP address
• Information collected through cookies and similar tracking technologies

Information from Third Parties

We may receive information about you from third parties:

• Authentication data from Discord when you sign in
• Transaction information from payment processors
• Analytics data from service providers

4. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving the Service
• Creating and managing your account
• Processing transactions and fulfilling orders
• Providing customer support and responding to inquiries
• Sending administrative communications, updates, and security alerts
• Sending promotional communications (with your consent where required)
• Personalizing your experience and providing relevant content
• Detecting, preventing, and addressing fraud, abuse, and security issues
• Complying with legal obligations and enforcing our terms
• Analyzing usage patterns to improve our Service
• Conducting research and development for new features

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: Processing necessary for the performance of our contract with you
• Consent: Where you have given us explicit consent to process your data
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Legal Obligation: Where we are required to process data by law

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, analytics)
• Legal Requirements: When required by law, subpoena, court order, or government request
• Protection of Rights: To protect the rights, property, and safety of Flute CMS, our users, and the public
• With Your Consent: When you have given us permission to share your information
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Aggregated Data: Non-identifiable, aggregated data may be shared for analytics purposes

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly (authentication, security)
• Functional Cookies: Remember your preferences and settings (language, theme)
• Analytics Cookies: Help us understand how the Service is used
• Marketing Cookies: Used to deliver relevant advertisements (if applicable)

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection practices
• Incident response procedures for data breaches

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active accounts: Data retained while your account remains active
• Legal obligations: Data retained as required by applicable laws
• Dispute resolution: Data retained until claims are resolved
• Backup systems: Data may persist in backups for a limited period

Upon account deletion or request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

10. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time for consent-based processing
• Complaint: Lodge a complaint with a supervisory authority

To exercise these rights, please contact us through the channels provided below. We will respond to your request within 30 days.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer your data internationally, we implement appropriate safeguards to ensure your data remains protected, including standard contractual clauses and other legally approved mechanisms.

12. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child without parental consent, we will take steps to delete that information.

If you believe a child has provided us with personal data, please contact us immediately.

13. Third-Party Links and Services

Our Service may contain links to third-party websites and services that are not operated by us. We have no control over and assume no responsibility for the privacy practices of these third parties.

We strongly advise you to review the privacy policy of every site you visit. Our inclusion of links to third-party sites does not imply endorsement of their privacy practices.

14. Do Not Track Signals

Some browsers have a "Do Not Track" feature that lets you tell websites that you do not want to have your online activities tracked. Currently, we do not respond to "Do Not Track" signals as there is no industry standard for handling such requests.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will notify you by:

• Posting the updated policy on our website
• Sending an email notification (for significant changes)
• Displaying a notice on our Service

The "Last updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of the Service after changes become effective constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through:

• Email: [email protected]
• Discord: Our official community server: discord.gg/BcBMeVJJsd
• GitHub: Issues and Discussions on our repository: github.com/Flute-CMS/cms

We will make every effort to respond to your inquiry within 30 days.