Privacy Policy

1. Information we collect

• Account details such as name, email address, role, and authentication credentials in hashed form.
• Connected account identifiers from Cfx.re and Discord when you authorize those connections.
• Creator profiles, listings, media, and configured store integration settings.
• Wishlist, following, verified purchase, checkout, review, and support-related records.
• Technical and security logs needed to operate, protect, and improve the service (for example, approximate IP, device/browser signals, and request metadata).

2. How information is used

We use information to authenticate users, operate creator profiles and listings, start official Tebex checkouts, verify purchases, process webhooks, show analytics, prevent abuse and fraud, communicate service notices, and maintain Escalative. We may also use privacy-preserving analytics tools to understand traffic and improve the product experience.

3. Creator store credentials

Store credentials and webhook secrets that you configure are encrypted before storage and are not returned in plaintext by profile APIs. They are unlocked on the server only when needed for an authorized marketplace, checkout, verification, analytics, or webhook operation you requested.

4. Sharing

Information is shared with payment and identity providers (such as Tebex, Cfx.re, and Discord), email delivery, hosting/security processors, and analytics providers (such as Google Analytics) only as needed to provide requested functionality, understand product usage, protect the service, or comply with law. We do not sell personal data or creator API credentials, and we do not use your store credentials to make unrelated purchases.

5. Retention

Records are kept while needed for active accounts, purchase verification, legal obligations, dispute handling, fraud prevention, backups, and security investigations. Retention periods may differ by record type and applicable law.

6. Your choices

You may update profile information and rotate or replace integration credentials from your dashboard. You may request access, correction, or deletion where applicable. Some purchase, security, and legal records may need to be retained even after an account closure request.

7. Security and limitations

We apply technical and organizational safeguards described on the Security page. No internet service can promise absolute security, so creators should use dedicated credentials, limit permissions where supported, and rotate keys after suspected exposure.

8. Contact and updates

Privacy questions or rights requests may be submitted through the support contact published on the Escalative website (including info@escalative.com). Policy updates will be reflected by the effective date shown on this page.