AutoBuyer+

1. This Privacy Policy ("Policy") explains how AutoBuyer+ ("we," "us," or "the Licensor") handles information when you use the AutoBuyer+ browser extension, its associated cloud services, and our website (collectively, the "Services").
2. This Policy applies to all users of the Services, regardless of Membership Tier.
3. By using the Services, you acknowledge that you have read and understood this Policy.
4. This Policy operates alongside the AutoBuyer+ End-User License Agreement (EULA) v1.1 and the AutoBuyer+ Refund Policy v1.0. In the event of a conflict, the EULA shall prevail.

1. Personal Data means any information that can be used to directly or indirectly identify you, such as your email address or IP address.
2. Game Data means any data originating from or related to your third-party game account, including but not limited to usernames, pet names, inventories, shop contents, bank balances, and in-game activity.
3. Authentication Data means the email address and license key used to verify your Membership Tier when connecting to our servers.
4. API Access Logs means minimal server-side records of which license accessed our API, used solely for abuse prevention.
5. CAPTCHA Session means the temporary record of a CAPTCHA-solving request, retained for up to 24 hours to improve solving speed for returning users.
6. All other capitalized terms carry the meanings defined in Section 2 of the EULA.

We believe in collecting as little data as possible. Here is an honest breakdown of what we do and do not collect:

1. Information We Do Collect.
   • Email Address: Your email is collected and stored by our payment processor (Paddle) for subscription management. We use your email solely to authenticate your license when you connect to our servers. We do not use your email for marketing, newsletters, or any purpose beyond authentication and billing.
   • IP Address (Transient): When you send a CAPTCHA-solving request, our server checks your IP address against a blocklist to prevent abuse. This check is performed in real time and the IP is not stored in persistent logs beyond the duration of the active CAPTCHA Session (maximum 24 hours).
   • API Access Records: Our servers record which license key accessed the API to prevent unauthorized use and resource waste. These records contain only the license identifier and a timestamp. No personal details, browsing data, or game activity is included.
   • CAPTCHA Session Data: When you use the CAPTCHA Solving Service, a temporary session is created and retained for up to 24 hours to speed up subsequent solves for your active license. This session contains only your license identifier and the CAPTCHA solution state. It is automatically discarded after 24 hours of inactivity.
2. Information We Do NOT Collect.
   • No Game Data: We do not collect, store, transmit, or process any Game Data. Your Neopets usernames, pet names, inventories, shop contents, bank balances, and in-game activity never leave your machine and never reach our servers.
   • No Device Information: We do not collect your operating system version, hardware specs, browser fingerprint, screen resolution, or any other device identifiers.
   • No Browsing History: We do not track which websites you visit, which pages you view on Neopets, or any other browsing behavior.
   • No Telemetry or Usage Tracking: We do not track which features you use, how often you use them, or any in-app behavior analytics.
   • No Cookies: Our browser extension does not set, read, or store any cookies. All extension settings and local data are stored directly on your machine using the browser's local storage.
   • No Session Logs: We do not log your authentication sessions beyond the minimal API access records described above.

The limited information we collect is used exclusively for the following purposes:

1. License Authentication: Your email address is used to verify that you hold a valid license and to determine your active Membership Tier when the extension connects to our servers.
2. Abuse Prevention: IP addresses are checked in real time against our blocklist during CAPTCHA requests to identify and block users who have been banned for violating the EULA (e.g., cracking, spamming, or unauthorized redistribution).
3. Service Optimization: CAPTCHA Session data is temporarily retained to improve solving speed for returning users with active licenses. This is a performance measure, not a tracking mechanism.
4. Billing Management: Your email and payment information are processed by Paddle to manage your subscription, process renewals, and handle refunds in accordance with our Refund Policy.

We do not use your information for advertising, profiling, data brokering, or any purpose beyond the four listed above.

1. The CAPTCHA Solving Service is a cloud-hosted feature available to Regular, Premium, and Professional tier users.
2. When you request a CAPTCHA solve, the service performs the following steps:
   • Validates that the request originates from a legitimate Neopets page URL to prevent abuse of the solver for unrelated purposes;
   • Verifies that your license (linked to your email) is active and entitled to CAPTCHA solving under your current Membership Tier;
   • Processes the CAPTCHA challenge and returns the solution directly to your browser extension;
   • Creates a temporary CAPTCHA Session tied to your license identifier, retained for up to 24 hours to improve solving speed on subsequent requests.
3. If your license is inactive, expired, or not entitled to CAPTCHA solving, the request is rejected immediately and no CAPTCHA data is processed.
4. CAPTCHA Session data is automatically purged after 24 hours of inactivity. We do not archive, aggregate, or analyze CAPTCHA solve history.
5. The CAPTCHA Solving Service does not log, store, or transmit the content of the pages you are automating, your Neopets credentials, or any Game Data.

1. The AutoBuyer+ extension includes a local analytics and charting feature available to Premium and Professional tier users. All analytics data — including purchase logs, gain tracking, and performance charts — is generated and stored entirely on your local machine using the browser's local storage.
2. This data is never transmitted to our servers, never synced to the cloud, and never accessible to the Licensor.
3. The extension periodically connects to our public GitHub repository to download updated pricing databases and item lists. This connection retrieves publicly available data and does not transmit any personal or game-related information from your machine.
4. If you uninstall the extension or clear your browser's local storage, all client-side analytics data is permanently deleted. We have no backup or copy of this data.

We use the following third-party services to operate the Services. Each has its own privacy policy governing how they handle data:

1. Paddle (Payment Processing): Paddle acts as our Merchant of Record and handles all payment transactions, subscription management, and billing-related personal data (name, email, payment method, billing address). We do not store your payment details on our servers. Paddle's privacy policy is available at paddle.com/privacy.
2. GitHub (Code Repository & Database Distribution): Our public repository hosts the extension's source code and pricing databases. When the extension fetches database updates, it connects to GitHub's public API. GitHub may log your IP address as part of their standard access logs. GitHub's privacy policy is available at docs.github.com.
3. Vultr (Cloud Hosting): Our API and CAPTCHA Solving Service are hosted on Vultr servers. Vultr may process IP addresses and connection metadata as part of their infrastructure operations. Vultr's privacy policy is available at vultr.com/legal.
4. Discord (Support): If you contact us via Discord for support, your Discord username and any messages you send are subject to Discord's privacy policy. We do not export or store Discord conversations on our own servers. Discord's privacy policy is available at discord.com/privacy.
5. Google Chrome Web Store (Distribution): When the extension is published to the Chrome Web Store, Google may collect usage statistics and install data in accordance with their privacy policy. This data is controlled by Google, not by us. Google's privacy policy is available at policies.google.com.

We do not sell, rent, or share your Personal Data with any third parties beyond the services listed above, and only to the extent necessary to operate the Services.

1. Authentication Data: Your email and license key are retained for as long as your account remains active. If you cancel your subscription and request deletion, your authentication record will be removed within 30 days.
2. CAPTCHA Session Data: Automatically purged after 24 hours of inactivity. No long-term storage.
3. API Access Records: Retained only as long as necessary for abuse prevention and are periodically purged. These records contain only license identifiers and timestamps — no personal or game data.
4. IP Addresses: Checked in real time during CAPTCHA requests and not stored in persistent logs beyond the active CAPTCHA Session duration.
5. Billing Data: Managed entirely by Paddle. Retention is governed by Paddle's own data retention policies and applicable financial regulations.
6. Client-Side Data: Stored on your machine indefinitely until you uninstall the extension or clear your browser's local storage. We have no access to or copy of this data.

Regardless of where you live, we respect the following rights regarding your Personal Data:

1. Right of Access: You may request a copy of any Personal Data we hold about you. Given our minimal data collection, this will typically consist of your email address and license status.
2. Right to Deletion: You may request that we delete all Personal Data we hold about you. We will comply within 30 days, subject to any legal obligations (e.g., financial record-keeping requirements handled by Paddle).
3. Right to Data Portability: You may request a machine-readable copy of your Personal Data. We will provide this in a standard format (e.g., JSON or CSV).
4. Right to Rectification: If any Personal Data we hold about you is inaccurate, you may request that we correct it.
5. Right to Restrict Processing: You may request that we limit how we use your Personal Data while a dispute or investigation is ongoing.
6. Right to Opt Out of Data Sales: We do not sell your Personal Data to anyone, ever. There is nothing to opt out of, but we include this right for compliance with the California Consumer Privacy Act (CCPA) and similar regulations.
7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time by cancelling your subscription and requesting data deletion.

To exercise any of these rights, contact us through the channels listed in Section 12. We will respond within 30 days.

1. The Services are not directed at children under the age of 13. AutoBuyer+ is a browser automation utility designed for general audiences.
2. We do not knowingly collect Personal Data from children under 13. Our data collection is limited to email-based license authentication and transient IP checks, neither of which involves age verification or age-specific data.
3. If we become aware that a child under 13 has provided us with Personal Data, we will take reasonable steps to delete that information from our systems.
4. If you are a parent or guardian and believe your child has provided us with Personal Data, please contact us using the channels listed in Section 12.

1. We implement reasonable technical and organizational measures to protect the limited Personal Data we process, including encrypted connections (HTTPS/TLS) for all server communications and access controls on our API infrastructure.
2. Payment data (credit card numbers, billing addresses) is never processed or stored by the Licensor. All payment transactions are handled by Paddle, which maintains PCI DSS compliance and its own security infrastructure.
3. No data transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
4. In the unlikely event of a data breach affecting your Personal Data, we will notify affected users within 72 hours of discovery, in accordance with applicable data protection regulations.

1. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
2. Material changes will be communicated to Paid Tier subscribers with reasonable notice through our official channels (GitHub, Discord, or email).
3. The "Effective Date" at the top of this Policy will be updated to reflect the date of the most recent revision.
4. Continued use of the Services after changes are published constitutes acceptance of the updated Policy.

For privacy inquiries, data access requests, deletion requests, or any questions about this Policy, please reach out through any of the following channels:

• Discord: ZenAkiSen
• Email: autobuyerplus@gmail.com
• GitHub: github.com/Unovamata/AutoBuyerPlus

AutoBuyer+ is designed with a privacy-first approach. The Licensor does not collect, store, or process any Game Data, device information, browsing history, or usage telemetry. The only Personal Data processed by the Licensor is the User's email address for license authentication and transient IP checks for abuse prevention. All payment data is handled exclusively by Paddle. All client-side analytics are stored locally on the User's machine. For the avoidance of doubt, this Policy reflects the Licensor's actual data practices as of the Effective Date and is not a generic template.

The Licensor may be contacted through the official AutoBuyer+ website and support channels.