Privacy Policy

Section 1 — Categories of Information We Collect

We collect information you provide directly and information generated through service use. Depending on how you interact with Tsumi, this may include account identifiers, profile details, authentication data, support communications, and transaction-related records.

We may also collect technical and operational metadata necessary to run, secure, and improve Tsumi, including device characteristics, network and connection metadata, license and session activity, anti-abuse telemetry, system diagnostics, and security event logs.

Information may be collected from you, from your device or browser, from payment and infrastructure providers, and from integrated systems that support account management, fraud prevention, and service reliability.

Section 2 — Purposes and Legal Basis for Processing

Tsumi processes information to provide and administer services, authenticate users, enforce license rules, process purchases, deliver requested functionality, respond to support inquiries, and maintain account security.

We also process data to detect and prevent abuse, investigate incidents, monitor reliability, improve product performance, satisfy legal obligations, and protect Tsumi, its users, and third parties.

Where required by applicable law, our legal basis may include performance of a contract, legitimate interests, legal compliance, fraud prevention, security operations, and user consent where consent is required.

Section 3 — Security, Encryption, and Access Control

Tsumi uses administrative, technical, and organizational safeguards designed to protect data against unauthorized access, disclosure, alteration, and destruction. Safeguards include encryption controls, access restrictions, auditability mechanisms, and environment hardening practices where appropriate.

• Authentication and sensitive traffic are protected during transmission using secure transport methods.
• Sensitive account and licensing fields may be encrypted at rest in storage systems.
• Security, audit, and access logs are protected against unauthorized manipulation or disclosure.
• Access to sensitive data is restricted by role, business need, and operational controls.

No security measure is absolute, and Tsumi cannot guarantee complete immunity from all threats. However, we continuously review and improve safeguards to reduce risk and respond to emerging threats.

Section 4 — Sharing, Disclosure, and Third-Party Processors

When you use the optional AI support chat, your submitted messages and recent conversation history are sent through our server to OpenAI to generate a reply. The chat does not automatically attach your account, license, or browser storage data. Its conversation is held in page memory and cleared when you reload the page or choose New chat. Our chat implementation does not save conversation logs and requests that API responses are not stored; provider and hosting operational retention may still apply. Do not submit passwords, license keys, payment details, or other sensitive information. You can use Discord support instead.

Tsumi does not sell personal information. We may share data with vetted service providers that perform functions on our behalf, such as hosting, payment processing, infrastructure, analytics, customer support, anti-abuse operations, and security monitoring.

Where third-party processors are used, sharing is limited to data reasonably necessary for contracted services, and subject to confidentiality and security obligations.

We may disclose information when required by law, legal process, regulatory request, or where disclosure is reasonably necessary to enforce terms, investigate misuse, prevent fraud, protect rights, or protect service integrity.

Section 5 — Retention, Deletion, and User Rights

Tsumi retains data only for as long as reasonably necessary for service delivery, account administration, security operations, fraud prevention, dispute handling, and legal compliance.

You may submit verified requests for access, correction, or deletion through Tsumi support channels, subject to identity verification and applicable legal limitations.

Tsumi may retain certain records where required or permitted by law, including records needed for legal compliance, tax and accounting requirements, abuse prevention, fraud investigation, security integrity, or contractual enforcement.

Section 6 — Policy Changes and Continued Use

Tsumi may update this Privacy Policy to reflect legal, operational, product, or technical changes. Material updates may be communicated through website notice, dashboard notice, or other reasonable means.

Your continued use of Tsumi after an updated Privacy Policy becomes effective constitutes acknowledgment of the revised policy, to the extent permitted by applicable law.