NexMingle Technology Co., Limited ("we," "us," or "our") operates Username Sleuth (accessible at usernamesleuth.soulover.ai). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.
By accessing or using Username Sleuth, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect the following types of information:
1.1 Account Information
When you sign in using Google OAuth or Discord OAuth, we receive and store your basic profile information, including:
- Display name
- Email address
- Profile picture URL
- OAuth provider identifier
1.2 Search and Usage Data
We collect information about your use of the service, including:
- Username search queries you submit
- Search results and reports generated
- Timestamps of searches and interactions
- Feature usage patterns
1.3 Payment Information
When you purchase a subscription or report, payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full payment card details. We retain only:
- Stripe customer ID
- Subscription status and plan type
- Transaction history (amounts, dates, invoice IDs)
1.4 Automatically Collected Information
- IP address
- Browser type and version
- Device type and operating system
- Referral URLs
- Pages visited and time spent
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Username Sleuth service
- Authenticate your identity and manage your account
- Process payments and manage subscriptions
- Generate username search reports
- Send important service-related notifications
- Detect and prevent fraud, abuse, or security threats
- Analyze usage patterns to improve user experience
- Comply with legal obligations
3. Data Storage and Security
We take the security of your data seriously and implement appropriate technical and organizational measures to protect it.
- Database: User data and search records are stored in a SQLite database with encrypted connections and access controls.
- Payment Data: All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. Sensitive payment information never touches our servers.
- Authentication: OAuth tokens are securely managed and stored with encryption at rest.
- Transport Security: All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure.
4. Third-Party Services
We integrate with the following third-party services:
- Google OAuth: Used for account authentication. Subject to Google's Privacy Policy.
- Discord OAuth: Used for account authentication. Subject to Discord's Privacy Policy.
- Stripe: Used for payment processing. Subject to Stripe's Privacy Policy.
We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.
5. Cookies and Tracking
Username Sleuth uses cookies and similar technologies for the following purposes:
- Essential Cookies: Required for authentication and session management. These cannot be disabled.
- Functional Cookies: Remember your preferences and settings to enhance your experience.
- Analytics Cookies: Help us understand how visitors interact with our service so we can improve it.
You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the service.
6. Data Retention
We retain your personal data for as long as necessary to provide our services:
- Account Data: Retained for the duration of your account. Deleted within 30 days of account deletion request.
- Search History: Retained for 12 months from the date of the search, unless you request earlier deletion.
- Payment Records: Retained for 7 years as required by applicable tax and financial regulations.
- Server Logs: Automatically purged after 90 days.
7. Your Rights
Depending on your jurisdiction (including under the GDPR for EU/EEA residents), you may have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure:Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability: Request an export of your data in a structured, machine-readable format.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Object: Object to the processing of your personal data for certain purposes.
- Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent as the legal basis for processing.
To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.
8. Children's Privacy
Username Sleuth is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take immediate steps to delete that information.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can take appropriate action.
9. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your country of residence. By using our service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. Your continued use of the service after such changes constitutes your acceptance of the updated policy.
We encourage you to review this Privacy Policy periodically for any changes.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
- Company: NexMingle Technology Co., Limited
- Email: [email protected]
- Website: usernamesleuth.soulover.ai