1. General

1.1. This Privacy Policy sets out how personal data of users of the OculusAI online service (the “Service”) is collected, processed, stored and protected.

1.2. Personal data is processed in accordance with this Policy and with applicable law.

1.3. By using the Service the user confirms that they have read this Policy.

2. Data processed

2.1. Depending on the functionality used, the operator may process:

• a name and contact details;
• account identifiers;
• an email address and a phone number, where provided;
• details of orders and subscriptions;
• details of payments and their status;
• technical data about the device and the connection;
• information the user provides when contacting support;
• gameplay telemetry sent by the plugin from a linked server: aim and rotation samples, derived features, the resulting cheat probabilities, and the player names and UUIDs they belong to.

2.2. The operator does not ask for passwords, payment codes or other confidential data unless the relevant official service requires them.

3. Purposes of processing

3.1. Personal data is processed in order to:

• provide goods and services;
• register and identify the user;
• process payments;
• manage orders and subscriptions;
• provide technical support;
• keep the Service secure;
• prevent fraud and abuse;
• analyse gameplay telemetry and improve the detection model;
• comply with legal requirements.

4. Grounds for processing

4.1. Personal data is processed on the basis of the user’s consent, the need to perform a contract, legal requirements, and other lawful grounds provided for by applicable law.

5. Disclosure to third parties

5.1. The operator does not sell users’ personal data to third parties.

5.2. Data may be passed to payment, technical, hosting and information service providers to the extent needed for the Service to function.

5.3. Data is disclosed to public authorities only in the cases and in the manner provided for by applicable law.

6. Payment data

6.1. Bank cards and other payment credentials may be processed directly by a third-party payment provider.

6.2. Unless the payment infrastructure in use provides otherwise, the operator does not store full bank card credentials.

7. Storage and protection

7.1. Personal data is stored only for as long as the purposes of processing require, or for the period established by law.

7.2. The operator takes reasonable technical and organisational measures to protect data against loss, alteration, disclosure and unauthorised access.

7.3. Once the purposes of processing are met, data may be deleted or anonymised where further storage is not required by law.

8. User rights

8.1. Where the law provides for it, the user may request access to their personal data, its correction or deletion, and may exercise any other rights granted by applicable law.

8.2. To exercise those rights the user may contact the operator using the contact details published in the Service.

9. Changes to this Policy

9.1. The operator may amend this Policy following changes in law, in the functionality of the Service or in how data is processed.

9.2. The current revision is published in the Service.

10. Contact

10.1. For any question about the Service or about this Policy, write to support on Telegram: @leleleasi.