Privacy policy

Last updated 29 October 2026

What we collect

Account data: your email address, a username derived from it, and a password hash held by our authentication provider. We never see your password.

Usage data: your token balance and transactions, the orders you place, the links you submit to tools, and the items delivered to you.

Payment data: the amount, the provider, and a reference. Card and wallet details go directly to the payment provider and are never stored by us.

Verification data: where a product requires identity checks, the status of that check and the provider’s reference.

Why we hold it

To run your account and deliver what you buy; to credit top-ups and attribute referrals; to support you when something fails; to meet accounting obligations; and to detect fraud and abuse.

Who we share it with

Our hosting and database provider, our payment providers, and the suppliers who fulfil specific tools. Each receives only what that job requires. We do not sell personal data, and we do not share it for advertising.

How long we keep it

Account and transaction records are kept while your account is open and afterwards for as long as accounting rules require. Tool inputs, such as submitted links, are kept with the order they belong to.

Your rights

You can ask for a copy of your data, correct it, or ask us to delete your account. Some records must be kept for accounting even after deletion; we will say which.

You can change your email and password, and manage notifications, from Account settings in the app.

Security

Data is protected by row-level security so one account cannot read another’s records. Access by our team is limited to what support and administration require.

Contact

The controller is REBEL AGENCY. Reach us at@rebeldotad on Telegram.