Privacy Policy

BetonBits Ltd. is the data controller for personal data processed through betonbits.com and our Discord and Telegram channels.

Privacy contact: privacy@betonbits.com

This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you can exercise at any time.

Data you give us

• Account & channel data: email address, Discord or Telegram username and user ID, display name, subscription tier.
• Billing data: billing name, billing country, postal code, currency, the last four digits and brand of your card, transaction and invoice IDs. Full card numbers and bank credentials are collected and stored by our payment processors — never by us.
• Support & contact data: the content of messages you send us, your chosen topic, and any attachments.
• Eligibility confirmations: your confirmation that you are 18 or older and, where required, evidence of age or location.

Data collected automatically

• Technical data: IP address, approximate location derived from it, device and browser type, language, referring URL, and timestamps.
• Usage data: pages viewed, links clicked, signal-delivery and open/read events, and error logs.

We do not knowingly collect special category data (such as health data) and we ask you not to send it to us.

• To provide the Service — creating your access, delivering signals, managing channels. Legal basis: performance of a contract.
• To take payment — processing subscriptions, renewals, refunds, and chargebacks. Legal basis: contract and legal obligation.
• To support you — answering enquiries and resolving disputes. Legal basis: contract and legitimate interests.
• To keep the Service safe and lawful — preventing fraud, abuse, underage access, and prohibited-territory access; meeting our obligations to payment providers and regulators. Legal basis: legitimate interests and legal obligation.
• To improve the Service — aggregate analytics and performance monitoring. Legal basis: legitimate interests, or consent where cookies require it.
• To send updates and offers — service messages always; marketing only with your consent (or where permitted for existing customers). Legal basis: consent or legitimate interests. You can unsubscribe at any time.

We do not sell personal data, and we do not use automated decision-making that has a legal or similarly significant effect on you.

We share data only with service providers who process it on our instructions under written agreements, and only as far as needed:

• Payment processing: Stripe and PayPal (payments, subscriptions, fraud prevention, tax calculation).
• Delivery platforms: Discord and Telegram (channel access and message delivery).
• Hosting & infrastructure: Vercel (hosting, logs, privacy- friendly product analytics).
• Communications: our email and support tooling.
• Professional advisers, auditors and authorities where we are legally required to disclose, or to establish or defend legal claims.
• A buyer or successor if we are involved in a merger, acquisition, or asset sale — we will tell you before your data becomes subject to a different policy.

Each of these providers is an independent controller for its own purposes in some cases (for example Stripe's and PayPal's fraud prevention) and publishes its own privacy notice.

We use a deliberately small number of cookies and similar technologies:

• Strictly necessary — security, load balancing, session integrity, and remembering your cookie choice. These cannot be switched off.
• Analytics — aggregate page and performance measurement so we can see what to fix. Where required by law, these are set only after you consent.

We do not use cross-site advertising or behavioural retargeting cookies. You can clear or block cookies in your browser settings, and where a consent banner is shown you can change or withdraw your choice at any time. We honour Global Privacy Control (GPC) signals where they are sent.

• Account and channel data: for as long as your access is active, then up to 12 months after closure.
• Billing and tax records: up to 7 years, as required by tax and accounting law.
• Support messages: up to 24 months.
• Server and security logs: up to 12 months.
• Self-exclusion and age-restriction records: for as long as needed to keep honouring the request.

When a retention period ends we delete or irreversibly anonymise the data. Aggregated statistics that cannot identify you may be kept indefinitely.

We and our providers may process data in countries other than yours, including the United States. Where data leaves the UK or EEA, we rely on an adequacy decision or on the UK Addendum and the European Commission's Standard Contractual Clauses, together with additional technical and organisational safeguards. You can request a copy of the relevant transfer mechanism from privacy@betonbits.com.

We use TLS encryption in transit, encryption at rest with our infrastructure providers, least-privilege access controls, multi-factor authentication for staff, and logging and monitoring of administrative actions. No system is perfectly secure; if a breach occurs that is likely to affect your rights we will notify the relevant supervisory authority within 72 hours and inform affected users without undue delay.

Depending on where you live you may have the right to: access a copy of your data; correct inaccurate data; delete data; restrict or object to processing; withdraw consent; receive your data in a portable format; and opt out of marketing.

California (CCPA/CPRA):you may request to know, delete, or correct personal information, and opt out of “sale” or “sharing” for cross-context behavioural advertising. We do not sell or share personal information in that sense, and we do not discriminate against anyone who exercises their rights. You may use an authorised agent.

How to exercise a right: email privacy@betonbits.com or use the contact formand choose “Privacy request”. We respond within one month (UK/EU) or 45 days (California) and may ask for information to verify your identity. There is no charge for a reasonable request.

If you are unhappy with our response you can complain to your data protection authority — in the UK that is the Information Commissioner's Office (ico.org.uk).

The Service is strictly for adults aged 18 or over (21+ where local law requires). We do not market to children and we do not knowingly collect data from anyone under 18. If we learn that a minor has provided data or gained access, we will close the account and delete the data promptly. Parents or guardians who believe a minor has used the Service should contact privacy@betonbits.com.

We update this policy when our practices, providers, or legal obligations change. The effective date at the top always reflects the current version, and we will notify subscribers of material changes by email or in-channel before they take effect. Previous versions are available on request.