Privacy Policy

1. Our Values regarding Privacy

1.1 Your Information Belongs to You: We do not sell your personal information to third parties. We use your data only to provide and improve the Services.

1.2 Data Minimization: We only collect the information we need to provide the Services and comply with our legal obligations.

1.3 Transparency: We aim to be clear about what data we collect, why we collect it, and how we protect it.

2. Information We Collect from Merchants

To provide the Services, we collect information about you and your business: Name, business address, email, phone, and account credentials. Payment method details are processed securely via third-party providers like Stripe.

2.1 Integration Data: If you connect third-party services (such as Discord, social media platforms, or email marketing providers like Mailchimp and Klaviyo), we may collect and store credentials, authentication tokens, server/guild IDs, channel IDs, and user IDs necessary to facilitate the integration.

2.2 Analytics & Advertising Identifiers: If you enable tools like Google Tag Manager (GTM) or tracking pixels, we may process identifiers and technical data used by these services to track conversions and platform usage.

We also collect business-specific data such as inventory, staff names, sales history, and technical data like IP addresses and activity logs to ensure platform security and performance.

3. Information We Process for Merchants (Customer Data)

HutlRound acts as a Data Processor for the personal information of your customers. As a Merchant, you are the Data Controller.

We process customer names, addresses, purchase history, and checkout interaction data under your direction to help you run your business.

3.1 External Interactions: If you enable federation features (such as ActivityPub), we may process and store public profile data and interaction content (likes, boosts, replies) from external users on other platforms as part of your business records.

3.2 Third-Party Analytics: If you enable Google Tag Manager or other analytics tools, your customers' technical data and interaction events may be shared with those providers according to your configuration.

You are responsible for maintaining your own Privacy Policy on your storefront.

4. Why We Use Your Information

We use information to provide POS functionality, verify your identity, prevent fraud, provide technical support, and communicate updates. We also analyze platform performance to improve your experience.

We also use this data to enable community engagement and automation through requested integrations.

5. Sharing Your Information

We share data with trusted service providers (payment processors like Stripe, hosting), third-party partners you choose to integrate with (e.g. Mailchimp, GTM), or as required by legal authorities.

5.1 Our Service Providers: The subprocessors we use to provide the Services include payment processing (Stripe), cloud hosting and infrastructure (Laravel Cloud and its underlying providers), and transactional email delivery. If you enable an integration (e.g., Discord, Mailchimp, Klaviyo, Google Tag Manager), that provider also processes data on your behalf as described in Section 2.1 above.

5.2 Federated Networks: Content posted to your blog may be shared with external servers on the Fediverse if federation is enabled. This data is public by nature of the protocol.

5.3 Third-Party Platforms: When you enable integrations (e.g., Discord), we share the content you designate (such as blog posts or event updates) with that platform's API to perform the requested actions on your behalf.

6. Where Your Information Goes

HutlRound is based in the United States. Your information is processed and stored on servers located in the United States. By using our Services, you consent to this transfer.

7. Security

We use industry-standard physical, technical, and administrative measures to protect your data. While we strive for 100% security, no internet transmission is perfectly safe.

8. Your Rights and Choices

You can access, update, or request deletion of your personal information at any time. You may also object to or restrict certain data processing. Contact us at [email protected] to exercise these rights.

8.1 Self-Service Export: Merchants and Customers with a HutlRound account can download a copy of their personal data at any time from their Account settings, in addition to contacting us directly.

9. Children's Privacy

9.1 General Restriction: Our Services are not intended for use by children under the age of 13. We do not knowingly collect personal information directly from children under 13.

9.2 Merchant Responsibility: If you use the Services to collect personal information from your customers who are under the age of 13 (e.g., for youth tournaments), you represent and warrant that you are solely responsible for obtaining any required verifiable parental consent under the Children’s Online Privacy Protection Act (COPPA) or similar laws.

9.3 Notification: If you become aware that a child has provided us with personal information without parental consent, please contact us immediately.

10. Washington State Privacy Rights

As a Washington LLC, we adhere to the standards of the Washington My Health My Data Act (where applicable) and general consumer protection statutes for our Washington residents.