Privacy Policy

AuthGuards (“we,” “us,” or “our”) operates a license-management and authentication platform. This Privacy Policy describes how we handle personal information when you visit our site, create an account, use the dashboard or APIs, or interact with marketplace and storefront features.

We do not sell your personal information. We process data to provide the service, keep accounts secure, comply with law, and improve reliability. If you operate customer panels or seller storefronts, you may also process end-user data on your own behalf - you are responsible for your relationship with those users and for any notices or consents required in your jurisdiction.

Depending on how you use the service, we may collect:

• Account data - Email, username, password hash (passwords are stored with one-way hashing, not plaintext), subscription tier, and authentication records such as 2FA status and linked OAuth identifiers when you connect them.
• Product & business data - License keys, end-user records, projects, reseller sub-accounts, balances, webhook configuration, store listings, and logs you create while using the dashboard and APIs.
• Technical & security data - IP addresses, browser and device information, session identifiers, API request metadata, HWID or similar device identifiers where your software sends them, and activity needed for fraud prevention and abuse handling.
• Checkout & delivery data - When sellers enable automated checkout (for example via SellAuth), buyer email and order details needed for fulfillment may be processed on the seller’s behalf.
• Communications - Messages you send through Contact, support tickets, and transactional emails (verification, security alerts, delivery notifications where configured).

You choose what product data to upload. Some fields are required to operate specific features (for example issuing a license key or publishing a public store listing).

We use the information described above to:

• Provide, maintain, and improve the service (dashboard, APIs, webhooks, panels, and marketplace tools).
• Authenticate users, enforce plan limits, and protect accounts from unauthorized access.
• Process subscriptions, deliver licenses, and support automated checkout where configured.
• Send transactional communications and respond to support or legal requests.
• Detect, investigate, and prevent abuse, fraud, and security incidents.
• Comply with applicable law and enforce our Terms of Service.

We may use aggregated or de-identified data for analytics and service improvement. We do not use your customer license records to train public AI models.

Signed-in sessions use cookies or equivalent storage to keep you logged in securely. Session lifetime, idle timeout, and related protections follow your site’s security configuration.

We may also store a theme preference (light or dark mode) in your browser’s local storage so the interface remembers your choice. These preferences are not used to track you across unrelated sites.

You can control cookies through your browser settings. Disabling session cookies may prevent you from staying signed in.

We use subprocessors and integrations only as needed to run the service. Examples include:

• Hosting & infrastructure - To store and serve the application and your data.
• Bot & abuse protection - For example Cloudflare Turnstile on login and registration forms.
• OAuth sign-in - Discord, GitHub, or Google when you choose to link them from Account → Security. We receive the profile identifiers those providers share with your consent.
• Checkout & delivery - Partners such as SellAuth when sellers enable automated checkout.
• Email - Transactional delivery for verification, security alerts, and notifications where configured.

Those providers process data under their own policies when you interact with them. We require subprocessors to handle data only for the purposes we specify, consistent with this policy.

Seller accounts may publish public hub profiles, link pages, and product stores. The global marketplace displays public listings from participating sellers. Information shown on a storefront (product names, descriptions, pricing, and trust signals such as review counts) is provided by the seller or their checkout integration.

AuthGuards hosts storefront pages and discovery tools but is generally not the merchant of record for third-party seller purchases. Buyer data from a seller’s checkout may be processed by that seller and their payment or checkout provider. Sellers must not expose buyer or license data publicly or embed API secrets in client-side code.

When enabled, eligible accounts may adjust optional display preferences from account security settings or the opt-out page - for example masking certain IP or Discord-related fields in applicable dashboard views. These settings affect how data is shown to you in the interface; they do not delete underlying records required to operate the service or meet legal obligations.

Exact options depend on your plan and site configuration. Sub-accounts inherit permissions set by their parent reseller.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You can update much of your account information from your profile and security settings.

• Account access - Sign in to review and update profile details, manage 2FA, and revoke linked OAuth providers.
• Deletion - Contact us to request account deletion. We may retain certain records where required by law, for fraud prevention, or to resolve disputes.
• Marketing - We send primarily transactional email. If we send optional marketing, you may opt out using the unsubscribe method provided.
• EEA / UK residents - You may lodge a complaint with your local data protection authority. We process data on lawful bases such as contract performance, legitimate interests in securing and improving the service, and consent where required (for example OAuth linking).

To exercise privacy rights, use Contact and describe your request. We may need to verify your identity before responding.

We retain personal information for as long as your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Backup and log retention periods may vary by data type.

We implement technical and organizational measures designed to protect data, including encrypted transport (HTTPS), hashed passwords, access controls, and monitoring for abuse. No method of transmission or storage is completely secure; you are responsible for safeguarding your credentials and API keys.

Data may be processed in countries other than where you reside. Where required, we use appropriate safeguards for international transfers. The service is not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date. If changes are material, we will provide additional notice as appropriate (for example by email or in-product notice). Continued use after the effective date constitutes acceptance where permitted by law.

For privacy questions, data requests, or security concerns, contact us via Contact. For platform overview and use policies, see About and Terms.