AssetMC Privacy Policy

1. Information you provide

• Account details, including email address, display name, password (stored only as a secure hash), avatar, and account preferences.
• Creator and store details, including store identity, descriptions, support contacts, payout references, team access, listings, uploaded files, and product media.
• Marketplace content, including ratings, reviews, reports, favorites, support tickets, messages, and moderation responses.
• Transaction-related information, including order references, purchased items, price, currency, payment status, refunds, disputes, license records, and download history. AssetMC does not store full payment-card numbers.

2. Information from connected services

If you connect Google or Discord, AssetMC receives the profile details you authorize, such as your email address, display name, username, and avatar. AssetMC may securely retain the connection tokens needed to keep the integration working. Payment, licensing, storage, and delivery providers return the identifiers and status updates needed to process orders, licenses, downloads, and connected features.

3. Information collected automatically

AssetMC receives ordinary technical data such as request time, browser or user-agent information, pages and actions requested, security and audit events, and network identifiers. Where implemented, network addresses are transformed into one-way hashes before storage for download deduplication, rate limiting, fraud prevention, and security analysis.

4. How information is used

• Create and secure accounts, authenticate users, and manage connected identities.
• Publish and moderate stores and resources, deliver files, manage licenses, and provide libraries, favorites, ratings, notifications, and support.
• Create checkout sessions, reconcile payments, calculate marketplace and creator amounts, handle refunds or disputes, and maintain transaction records.
• Detect abuse, fraud, malware, policy violations, and unauthorized access; enforce agreements; and protect users and the service.
• Diagnose failures, maintain availability, understand aggregate marketplace performance, comply with law, and establish or defend legal claims.

5. Legal bases where required

Depending on the activity and applicable law, AssetMC processes information to perform a contract with you, take requested pre-contract steps, comply with legal obligations, pursue legitimate interests such as security and marketplace operation, or act with your consent. You may withdraw consent for future processing where consent is the basis, but that does not affect earlier lawful processing.

6. When information is shared

Information is shared only as reasonably necessary with creators involved in a purchase or support request; store team members; payment, identity, Discord, email, storage, hosting, and licensing providers; professional advisers; and authorities or counterparties where required for law, safety, fraud prevention, or legal claims.

Public profile, store, product, rating, and review information is visible to other users by design. AssetMC does not currently sell personal information or use it for cross-context behavioral advertising.

7. Cookies and local storage

AssetMC uses strictly necessary cookies for signed-in sessions, security, and short-lived OAuth transactions. A local-storage preference remembers light or dark theme selection. Connected providers may set their own cookies when you visit or authorize their services. AssetMC does not currently use third-party advertising cookies.

8. International processing

AssetMC and its providers may process information in countries other than your own. Where required, AssetMC will rely on an adequacy decision, contractual safeguards, consent, or another lawful transfer mechanism. Provider locations and safeguards may change as infrastructure is configured.

9. Retention

Account and store information is generally kept while the account is active. Short-lived authentication tokens and rate-limit records expire automatically. Support, moderation, download, license, security, transaction, refund, dispute, tax, and audit records are retained only as long as reasonably necessary for their purpose, contractual obligations, fraud prevention, backups, and legal requirements. Retention may continue after account deletion when those purposes require it.

10. Account deletion

Eligible users may request deletion from Account settings. AssetMC removes the avatar where possible, deletes certain preferences and authentication records, disables the account, suspends owned stores, and replaces direct account identifiers with a deleted-user alias. Order, license, support, moderation, audit, and security records may remain where needed to preserve customer access, prevent fraud, resolve disputes, or meet legal obligations.

11. Security

AssetMC uses safeguards appropriate to the information handled, including password hashing, encrypted provider and license tokens, signed and HTTP-only session cookies, access controls, upload restrictions, audit records, and encrypted network transport in deployed environments. No service can guarantee absolute security. Report suspected compromise promptly through Support.

12. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of eligible personal information; withdraw consent; and complain to a privacy regulator. AssetMC may need to verify identity and may retain or withhold information where an exemption applies. Submit requests through Support. Authorized agents may be required to provide proof of authority.

13. Children

AssetMC is not intended for children under 13 and does not knowingly collect their personal information. If you believe a child under 13 has supplied information, contact Support so it can be investigated and removed where appropriate. Users below the age of legal majority must involve a parent or legal guardian.

14. Automated decisions

AssetMC may use automated checks for rate limits, download deduplication, file validation, and suspicious activity. AssetMC does not currently make solely automated decisions that produce legal or similarly significant effects. Material enforcement decisions may be reviewed through Support.

15. Changes and contact

AssetMC operates the marketplace and is responsible for the marketplace account data it controls. This Policy may be updated when data practices, providers, or legal requirements change. The updated date will be shown above, and material changes will be communicated where required. AssetMC is reachable for privacy questions and requests through the Support page at assetmc.org/support.