Privacy Policy

We are committed to handling your personal information with integrity and transparency. This Policy governs all information collected through the Clutch platform, website, APIs, and any related services. It applies to all users, including administrators, resellers, and end-users.

This Policy should be read in conjunction with our Terms of Service, which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given in the Terms of Service.

Account Information. When you register for an account, we collect your name, email address, hashed password, and account role. This information is required to create and maintain your account.

Technical & Usage Data. We automatically collect certain technical information when you access or use the Service, including: IP addresses, hardware identifiers (HWID), device fingerprints, operating system and version, browser or client type, session timestamps, login events, license key usage records, injection attempts, game session data, and other operational telemetry necessary for platform integrity and security.

Transaction Data. If you make a purchase, we collect billing and payment information as required to process your transaction. Full payment card data is processed by our payment processors and is not stored on our systems.

Communications. If you contact our support team or communicate through the platform, we retain records of those communications, including their content and associated metadata.

Log Data. Our servers automatically log all requests made to the Service, including the endpoint accessed, timestamps, response codes, and referral data. These logs are retained for security, fraud prevention, and operational purposes.

We use collected information for the following purposes:

• Providing, operating, maintaining, and improving the Service
• Authenticating users and verifying license entitlements
• Detecting, investigating, and preventing fraudulent transactions, abuse, and security incidents
• Enforcing our Terms of Service and other policies
• Processing payments and managing billing records
• Communicating with you about your account, the Service, and policy updates
• Analyzing aggregate usage patterns to improve Service performance and features
• Complying with applicable legal obligations and responding to lawful requests

We do not use your personal information for purposes incompatible with those described above without obtaining your prior consent.

We may disclose your information in the following limited circumstances:

Service Providers. We engage trusted third-party vendors who assist us in operating the Service, such as hosting providers, payment processors, and infrastructure partners. These parties access your information only to perform tasks on our behalf and are contractually obligated to maintain its confidentiality and security.

Legal Requirements. We may disclose your information if required to do so by law, court order, subpoena, or other governmental or regulatory authority, or if we believe in good faith that such disclosure is necessary to: (a) comply with a legal obligation; (b) protect and defend the rights or property of the Company; (c) prevent or investigate possible wrongdoing in connection with the Service; or (d) protect the personal safety of users or the public.

Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of the Company's assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

Enforcement. We may share information with third parties when we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, violations of our Terms of Service, or as otherwise required to protect the rights, property, or safety of the Company, our users, or others.

In all cases, we limit disclosure to what is strictly necessary for the stated purpose.

We retain your personal information for as long as your account remains active or as needed to provide you with the Service. We also retain and use your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes including security and fraud prevention.

Technical and operational data — including license activity logs, injection records, HWID fingerprints, and session telemetry — may be retained indefinitely for security, integrity, and anti-abuse purposes, even after your account is closed. This data is essential to our ability to detect and prevent platform abuse.

If you request deletion of your account, we will remove your identifiable personal information within a reasonable period, subject to our obligations to retain certain data for legal, security, or operational purposes. Some information may remain in backup systems for a limited period following deletion.

We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit using TLS, hashing of passwords using industry-standard algorithms, access controls restricting data access to authorized personnel, and regular security reviews of our infrastructure.

However, no method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security. You acknowledge and accept this inherent risk by using the Service. In the event of a security breach affecting your rights, we will notify you as required by applicable law.

You are responsible for maintaining the security of your account credentials. We strongly recommend using a strong, unique password and enabling any available security features.

We use browser local storage and session mechanisms to maintain your authenticated session with the Service. These tokens are strictly necessary for platform functionality and are not used for tracking, profiling, or advertising purposes.

We do not use third-party tracking cookies, advertising pixels, or analytics scripts that transmit your browsing behavior to external parties. Any analytics we conduct are performed server-side on aggregated, anonymized data.

You may clear local storage through your browser settings at any time, though doing so will log you out of the Service.

Subject to applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete personal information
• Deletion: request deletion of your personal information, subject to our retention obligations
• Objection: object to certain processing of your personal information
• Portability: request a machine-readable copy of personal information you have provided to us

To exercise any of these rights, contact us through the platform's support channels. We will respond within the timeframe required by applicable law. We may require verification of your identity before fulfilling any request. Please note that certain rights may be limited where we have legitimate grounds for processing or legal obligations that require us to retain data.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a person under 18 years of age, we will take prompt steps to delete such information. If you believe we have collected information from a minor, please contact us immediately.

We reserve the right to update or modify this Privacy Policy at any time in our sole discretion. We will provide notice of material changes through the Service or by email. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the Service following the effective date of any revised Privacy Policy constitutes your binding acceptance of those changes. If you do not agree to the revised Policy, you must discontinue use of the Service.

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us through the support channels available within the Clutch platform. We take privacy inquiries seriously and will respond within a reasonable timeframe.

For formal requests, including data subject access requests or deletion requests, please submit your inquiry through the platform with the subject line: "Privacy Request."