Privacy Policy

We collect information you provide directly to us and information we collect automatically when you use our platform.

1.1 Information You Provide

• Account Registration: Email address, username, and password when you create an account.
• Identity Verification: For sellers, government-issued photo identification processed through Stripe Identity. We do not store raw identity documents; they are processed and verified by Stripe.
• Payment Information: Credit and debit card details, billing address, and bank account information collected and processed by Stripe. We do not store full payment card numbers on our servers.
• Listings and Orders: Account details, game screenshots, pricing, and order communications you submit through the platform.
• Communications: Messages between buyers and sellers on the platform, support tickets, and dispute filings.
• Profile Information: Optional profile photo, bio, and social links you choose to provide.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on pages, search queries, and interaction events.
• Device Information: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics cookies as described in Section 5.
• Transaction Records: Order history, payment amounts, timestamps, and escrow status logs.

We use the information we collect for the following purposes:

• To create, maintain, and secure your account.
• To facilitate transactions, process payments, and manage escrow through Stripe.
• To verify seller identity and prevent fraud, money laundering, and prohibited activity on the platform.
• To mediate disputes between buyers and sellers and enforce our Terms of Service.
• To send transactional communications such as order confirmations, receipts, dispute updates, and account notifications.
• To send marketing communications where you have consented, which you may opt out of at any time.
• To analyze platform usage, improve features, and detect technical issues.
• To comply with applicable legal obligations and respond to lawful requests from government authorities.
• To protect the rights, property, and safety of our platform, users, and the public.

We use Stripe, Inc. as our payment processor and identity verification provider. When you make a payment or complete seller verification, you are subject to Stripe's Privacy Policy in addition to this one.

Stripe processes all payment card data and identity documents in compliance with PCI-DSS standards and applicable financial regulations. We receive confirmation tokens and verification status from Stripe but do not store raw card numbers or government ID images on our servers.

Escrow funds are held by Stripe on behalf of buyers and are only released to sellers upon buyer confirmation or automatic release after the dispute window expires.

You can review Stripe's privacy practices at: stripe.com/privacy

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Between Buyers and Sellers: Transactional details necessary to complete an order are shared between the relevant parties (e.g., username and order details). Full contact information is never shared automatically.
• Service Providers: We share data with vendors who help us operate the platform, including Stripe (payments), Vercel (hosting), Neon (database), and analytics providers. These vendors are contractually bound to protect your data.
• Legal Obligations: We may disclose information when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect rights, safety, or property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. You will be notified before your data is transferred and subject to a different privacy policy.
• With Your Consent: We may share information for any other purpose with your explicit consent.

We use the following types of cookies and similar technologies:

• Strictly Necessary Cookies: Required for authentication, security, and platform functionality. These cannot be disabled.
• Preference Cookies: Remember your settings and customizations. You may disable these without impacting core functionality.
• Analytics Cookies: Help us understand how users interact with the platform. We use aggregate, anonymized data for product improvement.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the platform.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, plus any additional period required by law.

• Account Data: Retained for the lifetime of your account plus 2 years after deletion, for legal and fraud prevention purposes.
• Transaction Records: Retained for 7 years in compliance with financial recordkeeping requirements.
• Identity Verification Data: Processed and stored by Stripe per their data retention policies.
• Communications: Support tickets and dispute records retained for 3 years.
• Analytics Data: Aggregate anonymized data may be retained indefinitely. Individual event data is retained for 24 months.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to our legal retention obligations.
• Portability: Request a machine-readable export of your data.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the link in any email or by updating your account preferences.
• Account Deletion: Delete your account at any time through your account settings. Note that transaction records are retained per our data retention policy above.

To exercise any of these rights, contact us at privacy@holysservices.org or through our Discord server.

Our platform integrates with the following third-party services, each governed by their own privacy policies:

• Stripe: Payments and identity verification. stripe.com/privacy
• Vercel: Platform hosting and infrastructure. vercel.com/legal/privacy-policy
• Discord: Community support and notifications. discord.com/privacy

We are not responsible for the privacy practices of these third-party services. We encourage you to review their policies before using their services.

We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS), hashed password storage, and access controls limiting who can view sensitive data internally.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or freedoms, we will notify affected users promptly in accordance with applicable law.

Holy Service Market is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete that information promptly. If you believe a minor has submitted information to us, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. For significant changes, we will also notify you by email or a prominent notice on the platform.

Your continued use of the platform after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Website: holysservices.org
• Email: privacy@holysservices.org
• Discord: discord.gg/holysservices