Privacy Policy

Effective Date: May 31, 2025

1. Introduction

Entity Client (“we”, “us”, or “our”) is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, store, and protect your data when you use our services and dashboard at app.entityclient.com.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, surname, username, email, gender, password, internal ID.
• Device & IP: IP address (public and private) and device information (user agent, browser, OS).
• OAuth Data: Google, Microsoft, Discord, GitHub, and Spotify IDs if linked.
• Licenses & Subscriptions: License key details, usage logs, expiry data.
• Activity Data: Login attempts, last login time, account activity.
• 2FA & Notifications: Email address for 2FA and notifications.
• Chat Data: Messages in customer support and friend chats.
• Profile Information: Profile picture, linked accounts, and other personal data.
• Friends System: Friend requests, friend lists, block/mute actions.

3. How We Use Your Information

We use your data to:

• Provide, manage, and improve our services.
• Authenticate and authorize your account (including OAuth sign-ins with Google, Microsoft, Discord, GitHub, and Spotify).
• Send email notifications (account activity, 2FA codes, resets, updates).
• Manage your licenses, keys, and subscriptions.
• Facilitate customer support chats and friend messaging.
• Allow admin management of user accounts and licenses.
• Display tailored content like schedules, reminders, and plans.
• Enhance security and protect against fraud.

4. Legal Basis for Processing

We rely on:

• Your consent when you provide data.
• Contractual obligations (e.g., account registration and usage).
• Our legitimate interests in providing secure and efficient services.

5. Data Sharing and Disclosure

We do not sell your data. We only share it with:

• Third-party email providers (like Apple iCloud SMTP).
• Auth.gg API (for license validation).
• External OAuth providers (Google, Microsoft, Discord, GitHub, Spotify).
• System admins for management and support tasks.

6. Data Storage & Security

Your data is stored in a secure MySQL database, with database credentials in a secure .env file. We use encrypted password storage, SSL/TLS, and admin access control to protect your data.

7. Your Rights

You have the right to:

• Access and update your data.
• Request account deletion.
• Manage linked accounts.
• Adjust notification settings.
• Control 2FA and password resets.

8. Cookies and Tracking

We use minimal cookies for session handling and features – no advertising tracking.

9. Third-Party Links

Our platform includes links to external services (Google, Microsoft, Discord, GitHub, Spotify, schools). We are not responsible for their practices.

10. Updates to This Policy

We may update this policy for new features or legal compliance. Updates will be posted here, and major changes will be emailed to you.

11. Contact Us

For questions or requests, email us at [email protected].