Privacy Policy

The controller is [RAZÓN SOCIAL], tax id [NIF / CIF / RUT], [DIRECCIÓN FISCAL COMPLETA] ([PAÍS]). Privacy contact: [privacidad@svoltanic.com].

• Account: name, email, avatar and identifier from your sign-in provider (Google), preferred language, role, account status, and the date and version of the terms you accepted.
• Creator application: legal name, country, the Twitch data you authorise (channel id, login, display name, avatar, followers, account creation date, categories), and links you provide.
• Developer application: legal/studio name, country, website, Steam URL of the game, the public store data we read from it, and two sample keys, stored encrypted and used only to verify legitimacy.
• Transactions: purchased game, amount, currency, the streamer attributed, the applied commission, the delivered key identifier, and the Stripe payment identifier.
• Payouts: your Stripe connected-account identifier and its status. Identity documents, tax details and bank details are collected and held by Stripe, not by us, and we never see them.
• Communications: messages exchanged in the platform's negotiation chat.
• Technical: IP address, device and browser data, and event logs needed for security and abuse prevention.

• To provide the service, deliver keys and run payouts: performance of a contract.
• To verify developers and creators and prevent fraud: legitimate interest in a trustworthy marketplace, and legal obligation where applicable.
• To bill, invoice and keep accounting records: legal obligation.
• To send service emails (purchase confirmation, application status): performance of a contract.
• To improve and secure the platform: legitimate interest.
• For anything else, such as optional marketing: your consent, withdrawable at any time.

• Google Firebase (Google Ireland/LLC): hosting, authentication, database, storage and functions.
• Stripe: payment processing and, through Stripe Connect, identity verification and payouts. Stripe acts as an independent controller for KYC and anti-money-laundering purposes under its own privacy policy.
• Twitch (Amazon): only when you authorise the connection, to read your public channel data.
• Resend: sending transactional email.
• Authorities, when legally required.

We do not sell your personal data, and we do not share it for third-party advertising.

Some providers process data outside the EEA. In those cases the transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses, plus additional safeguards where needed.

• Account data: while the account exists, and 12 months after closure.
• Transactions, invoices and payouts: the period required by tax and accounting law (typically 5–10 years).
• Applications and verification evidence: 24 months after the decision, for fraud prevention and to justify approvals.
• Sample keys: deleted once the application is decided.
• Security logs: up to 12 months.

You may request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to [privacidad@svoltanic.com] from your account email. We reply within one month.

If you are in the EEA you may complain to your national data-protection authority. If you are in California, you also have the rights of the CCPA/CPRA, including the right to know, delete and not be discriminated against for exercising them.

We use encryption in transit, encryption at rest for sensitive material such as Steam keys and OAuth tokens, least-privilege access rules, and server-side validation of every operation that moves money or grants a role. No system is completely secure; if a breach affects you, we will notify you as required by law.

We use only cookies and local storage strictly necessary to keep your session, your language preference and platform security. We do not use advertising or third-party tracking cookies.

The service is not directed at people under 18. If we learn that we hold data of a minor, we delete it. Write to [privacidad@svoltanic.com] if you believe this has happened.

We will announce substantive changes to this policy in the app and, where required, by email. The version and date are shown at the top of this page.