Data Processing Agreement

1. Data we process

Discord ID, username, email address, license records, hardware identifier hashes, IP addresses, team memberships, support tickets, messages, and payment references. See the Privacy Policy for the full breakdown.

2. Where it lives

Data is hosted on servers in the United States, in the states of Washington and North Virginia, and processed under the laws of the United States. Where data from the EEA, UK, or Switzerland is transferred there, we rely on Standard Contractual Clauses approved by the European Commission.

3. Sub-processors

• Discord, Inc., authentication via Discord OAuth2.
• PayPal Holdings, Inc., payment processing.
• Resend, Inc., transactional email delivery.

Each processes only the data needed for its function, under its own terms and applicable law.

4. Your rights

Access, rectification, erasure, restriction, portability, and objection (GDPR Art. 15–21). Exercise them at any time by writing to hello@uliseslicenses.xyz, or directly from your dashboard (export and delete your account). We respond within 30 days. Financial transaction logs are retained 7 years by statutory obligation and are excluded from erasure.

5. Security and breach notice

Data travels over TLS 1.3, sessions are HMAC-signed, and access is role-based. If a breach affecting your data occurs, we notify you without undue delay and cooperate with supervisory authorities as required.