Privacy Policy — Ninfox Technologies Pvt Ltd

Effective date: 1 Jan 2025

Who we are

Ninfox Technologies Pvt Ltd, 2 Kayaji Plot, Sanala Road, Morbi, Gujarat 363641, India.
Email: [email protected]

What we collect & why

We process data to operate our website, provide account access, fulfill purchases, prevent fraud, and comply with law.

1) Provision of the website (server logs)

• Data: browser & version, OS, ISP, IP address, timestamps, referrer, pages visited.

• Purpose: deliver pages, ensure security, optimize performance.

• Retention: session; logs ≤ 7 days (may be longer if needed for security; IPs then truncated).

• Necessity: required to operate the site.

2) Registration & account

• Data: username/name, email; (age check) date of birth (validated but not stored).

• Purpose: create/manage your account.

• Retention: until account deletion or legal necessity. You may delete the account anytime.

3) Content purchasing (VIP memberships / software)

• Data: order details, payment metadata (via payment providers), security signals incl. shielded hardware IDs/PC hashes and IP for license protection.

• Purpose: contract fulfillment, license enforcement, fraud prevention.

• Retention: per tax/commercial law; security signals kept only as needed.

4) Payments (processors)

We work with payment gateways and banks to process payments. Depending on your method, the provider may collect data directly (their privacy notice applies). We may share minimal data with antifraud/ops vendors to protect our services.

5) Contact forms & email

• Data: what you send us (email, message).

• Retention: delete after request is resolved, typically ≤ 3 months unless law requires longer.

6) Cookies

We use strictly necessary cookies to keep you logged in and run the site; optional cookies only with your consent. You can block cookies in your browser (some features may break).

7) Embedded media (YouTube)

When you play an embedded video, Google/YouTube may set cookies and process data per their policy: https://policies.google.com/privacy

Social / third-party services we reference

• Discord (Discord, Inc.) — authentication/linked account login. Privacy: https://discord.com/privacy

• YouTube/Google — embedded video, analytics as applicable.

• SendGrid — transactional email delivery.

• reCAPTCHA v3 — bot protection; may collect device/browser info.

9) Discord OAuth login (important)

If you choose “Sign in with Discord,” we receive your Discord user ID (id), username (and, if you permit, email). We do not gain access to your DMs or servers. We use this data to authenticate you and link your forum account. Tokens are stored securely and used only for account linking; we do not post or act on your behalf. You can unlink Discord in Account Settings → Linked Accounts.

10) Forum posts & comments

Your posts display your username and timestamp publicly. You control what you publish. Posts remain until you or a moderator delete them per community rules.

11) Legal bases (summary)

• Contract (e.g., account, purchases),

• Legitimate interests (security, fraud prevention, service improvement),

• Consent (optional cookies, certain communications),

• Legal obligation (tax/records).

12) Your rights

Where applicable: access, correction, deletion, portability, restriction/objection, and withdrawal of consent. Contact [email protected]. We’ll respond within a reasonable time.

13) International transfers

Vendors may process data in countries without the same level of protection. We rely on appropriate safeguards (e.g., contractual clauses).

14) Security

We use technical and organizational safeguards and HTTPS/SSL. No method is 100% secure.

15) Children

Our services are for 18+ users or those with guardian consent. We do not knowingly collect data from minors.

16) Changes

We may update this policy; the “Effective date” shows the latest version.