Grey Studio collects identity, account, session, order, contract, payment, delivery, support, staff, audit, fraud, appeal, and security information needed to operate its services.
Information is used to authenticate accounts, execute contracts, deliver products, enforce licences, provide support, prevent fraud, resolve disputes, secure systems, comply with law, and send service communications.
Discord OAuth may provide an ID, username, display name, avatar, and email. Grey Studio does not receive the Discord password.
Payment providers handle payment credentials under their own policies. Grey Studio stores the transaction and contract metadata needed for status, accounting, delivery, disputes, fraud prevention, and legal records, but should not receive full card credentials.
Access is restricted by role and operational need. Grey Studio does not sell personal data to advertisers or data brokers.
Data is retained only for documented operational, legal, security, contract, payment, accounting, support, and dispute purposes, then deleted, restricted, or anonymized where practical.
Depending on applicable law, people may request access, correction, deletion, restriction, objection, or export, subject to identity verification and lawful retention needs.