Privacy Policy

1. Overview

This Privacy Policy describes how BuildWithDani ("we," "us," "our"), operating Flotix, collects, uses, and protects information when you use Flotix as a seller or a buyer.

2. Information we collect

From sellers (accounts)

Email address and account credentials (via our authentication provider); a session cookie via our authentication provider used to keep you signed in; display name, if provided; subscription tier and billing status; payment processor customer and subscription identifiers (the processor holds your actual payment details — we do not store your card information); scripts you upload for protection, including source code; usage data such as products created, keys generated, and license validation activity.

From buyers

Buyers do not create a Flotix account. When a buyer redeems a license key, we collect the email address they provide during activation; the specific license key and the Roblox game ("Place ID") it becomes bound to. If a buyer independently pays to keep a license key active ("keep-alive"), their payment is processed by our payment processor; we retain the subscription reference, not full payment details. If a buyer uses the buyer portal, we set a session cookie after they authenticate via a one-time emailed link. We do not require or store a password for buyers.

Automatically collected

IP address, for rate-limiting and abuse-prevention purposes on certain endpoints; standard web server logs.

Cookies and tracking

We do not currently use analytics or advertising cookies/tracking. If this changes, we will update this policy.

3. How we use information

We use the information above to operate your account and the Service (authentication, billing, key generation and validation); communicate with you about your account, including billing status and security notices; review Level 2 script submissions for policy compliance (see Section 4); detect and prevent abuse of the Service; improve the Service. We do not sell your personal information.

4. Third parties we share data with

We rely on service providers to operate Flotix, each processing data on our behalf only for the purposes described:

• A database and authentication provider — account data, script content, and key records.
• A payment processor — billing and subscription data (this provider holds your card details directly; we never see or store them).
• A transactional email service — your email address, used to send account and billing notifications.
• An AI-based review service — a script's source code, transmitted solely for automated safety review before a Level 2 script is hosted.

We do not otherwise share your personal information with third parties, except where required by law or to protect the rights, safety, or property of Flotix, our users, or the public.

5. Data retention and deletion

We retain your data for as long as your account is active. If your subscription lapses and is not resolved: 0–30 days, no change; 30 days–6 months, account marked dormant, no data deleted; 6–12 months, advance notice of a scheduled deletion date; 12+ months, your hosted Level 2 script source is permanently deleted (unrecoverable), and buyer email addresses associated with your license keys are removed. Lightweight license key records (not personal information) are retained for support and audit purposes.

If a buyer is independently paying to keep a specific license key active, that key and its associated data are excluded from this deletion process for as long as that payment continues.

You may request deletion of your account and associated data at any time via your dashboard settings.

6. Children's privacy

Flotix is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at the address below so we can remove it.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal information. You can access and update most account information directly through your dashboard, or request deletion as described in Section 5. For any other requests, contact us below. We will respond to requests within a reasonable time, typically no more than 30 days.

8. Security

We use industry-standard measures to protect your data, including encryption of Level 2 script source at rest and row-level access controls on our database. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by the Service.

9. International data transfers

Flotix is operated from the United States. Our infrastructure providers store and process your data primarily on servers located in the United States. Some of our service providers operate global networks that may cache non-personal, static website content at locations closer to you for performance — this is separate from where your personal information is actually stored and processed.

If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home country.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a dashboard notice.

11. Contact

Questions about this Privacy Policy can be sent to support@flotix.xyz.