🔒 Privacy Policy

Last Updated: October 1st, 2026

This Privacy Policy ("Policy") explains how CR7 BOT collects, uses, processes, protects, and shares your personal information when you use our services, including our website, Discord integration, and licensing platform.

We are committed to protecting your privacy and ensuring transparency about our data practices. Please read this Policy carefully. If you do not agree with our practices, please do not use our services.

1. 📂 Information We Collect

We collect information in the following ways:

Account Registration & Purchase:

• Email address (for account creation, license delivery, and communication)
• Payment information processed by third-party providers (Stripe, Mercado Pago)
• Full name or username (optional, provided during purchase)
• Purchase history and transaction details

License & Security:

• Hardware Identifiers (HWID) for license binding and device verification
• License key and activation status
• License expiration dates and renewal history

Discord Integration:

• Discord User ID (numeric identifier for account linking)
• Discord username (for identification and support purposes)
• Guild membership information (which servers you're part of)

Usage & Security Monitoring:

• IP addresses for security, fraud prevention, and rate limiting
• Login timestamps and access patterns
• Security events (invalid authentication attempts, suspicious activities)
• Device/browser information for platform compatibility

Automatic Data Collection:

• Server logs and connection metadata
• Timestamps of interactions and transactions

2. 🛡️ How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: Generate and deliver licenses, manage accounts, and provide customer support
• License Management: Verify license validity, track expiration dates, and manage renewals
• Payment Processing: Process transactions and verify payment status through trusted providers
• Account Security: Verify device ownership via HWID, detect and prevent unauthorized access
• Fraud Prevention: Detect suspicious activities, implement rate limiting, and prevent abuse
• Discord Integration: Link licenses to Discord accounts, manage role assignments, and provide notifications
• Communication: Send transactional emails, payment confirmations, license expiration warnings, and support responses
• Analytics & Improvement: Analyze usage patterns to improve our services (anonymized where possible)
• Legal Compliance: Comply with applicable laws, regulations, and legal requests

3. 👁️ Data Sharing & Disclosure

We do not sell, rent, or trade your personal data to marketers or third parties for commercial purposes.

We may share information only in the following circumstances:

• Payment Processors: Stripe and Mercado Pago receive payment information to process transactions securely
• Discord: We share your Discord User ID with Discord's API for account linking and role management
• Legal Requirements: When required by law, court order, or government request
• Security & Safety: To prevent fraud, enforce our Terms of Service, or protect user safety
• Service Providers: Third parties that help us operate our platform (hosting, analytics) bound by confidentiality agreements

No third-party marketing sharing: We will never share your email with marketing companies or use your data for unsolicited communications.

4. 🔐 Data Security

We implement industry-standard security measures to protect your information:

• HTTPS encryption for all data transmission (SSL/TLS protocols)
• Secure authentication mechanisms and session management
• Regular security audits and vulnerability assessments
• Limited access to personal data (least privilege principle)
• RSA encryption for sensitive cryptographic operations
• Rate limiting and anti-fraud detection systems
• Secure password hashing and storage practices

Important: While we implement strong security measures, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your license key and account credentials.

5. ⏱️ Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• License Data: Retained while your license is active, plus 12 months after expiration for renewal purposes
• Payment Records: Retained for 7 years for tax and accounting compliance
• Security Events: Retained for 90 days for fraud detection and audit trails
• Account Data: Retained until account deletion plus 30 days for recovery purposes
• Discord Link Data: Retained while linked; can be unlinked anytime

You may request deletion of your personal data at any time by contacting us through Discord.

6. 🔄 Your Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data (with exceptions for legal/tax compliance)
• Right to Withdraw Consent: Withdraw consent for specific data processing at any time
• Right to Data Portability: Request your data in a portable format
• Right to Object: Object to certain processing of your data
• Right to Lodge a Complaint: File a complaint with data protection authorities if applicable in your jurisdiction

To exercise any of these rights, contact us through our official Discord server.

7. 🌍 International Data Transfer

Your data may be processed and stored in multiple countries. By using our services, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection laws.

We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where applicable.

8. 🍪 Cookies & Tracking Technologies

Our website may use cookies and similar tracking technologies to:

• Remember your login session
• Improve user experience and website functionality
• Analyze usage patterns (anonymous analytics)
• Prevent fraud and security threats

You can control cookie settings in your browser. However, some features may not work properly if cookies are disabled.

9. 👶 Children's Privacy

Our services are not intended for children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

If we become aware that a child has provided us with personal information, we will take steps to delete such information and terminate the child's account immediately.

10. 📋 Third-Party Links & Services

Our website may contain links to third-party services (Discord, payment providers, etc.). We are not responsible for the privacy practices of external websites or services.

Please review the privacy policies of any third-party services before providing them with your information.

11. 📝 Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or applicable laws.

When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page. Your continued use of our services after updates constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically to stay informed of any changes.

12. 📞 Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Primary Contact: Join our official Discord server and contact support
• Email Support: Support available through Discord ticketing system
• Response Time: We aim to respond to privacy inquiries within 14 business days

For data protection-related concerns, we maintain a commitment to addressing your requests in accordance with applicable data protection laws (including LGPD - Lei Geral de Proteção de Dados in Brazil).

13. ⚖️ Governing Law

This Privacy Policy is governed by the laws of Brazil. Any disputes related to data protection or privacy will be subject to the jurisdiction of Brazilian courts and applicable Brazilian law, including the General Data Protection Law (LGPD).