Privacy Policy
Last Updated: September 2026 • Platform Version 2.4
01. Introduction
Welcome to Inskeys (accessible at https://inskeys.com). We hold user confidentiality and security as our core tenets. This Privacy Policy details our operational data handling protocols, how buyer and merchant information is processed, and the measures we employ to secure transactions for game keys, digital vouchers, and software licenses.
02. Information We Collect
We process only the minimum dataset strictly necessary for secure peer-to-peer digital trade:
- Account Credentials: Name, email address, password hash, and geographic region provided during buyer or merchant registration.
- Google OAuth Identity Data: If you choose to sign in via Google Authentication, we collect your verified primary email address, display name, and avatar URL strictly to establish and verify your Inskeys account session.
- Transactional History: Cryptographic order IDs, purchased license records, and merchant product catalog metadata. We never store private cryptocurrency wallet seeds or raw banking information.
03. Google API Services User Data Policy & Limited Use
Inskeys' use and transfer to any other app of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.
• No Advertising Exploitation: We will never use data obtained through Google OAuth to build profiles for personalized or targeted advertising.
• No Unauthorized Data Transfer: Google user data is never sold, leased, or transferred to third-party data brokers or marketing syndicates.
• Human Inspection Limits: No human personnel will read your raw Google authentication records unless required for critical security investigations or with your explicit prior consent.
04. How We Utilize Collected Data
Your information is leveraged exclusively for legitimate marketplace operations:
- Facilitating instant or manual delivery of purchased digital vouchers and keys.
- Enforcing our 36-Hour Buyer Protection guarantee and dispute mediation.
- Maintaining fraud detection protocols and preventing rogue store duplicates.
- Transmitting transactional receipts, security OTP codes, and order dispute alerts.
05. Storage and Infrastructure Security
All customer metadata, order records, and internal messages are encrypted in transit using TLS 1.3 and at rest via AES-256 standards on our Supabase infrastructure. Strict Row-Level Security (RLS) policies isolate user records, ensuring no unauthorized member can access another user's private tickets, purchased keys, or direct messages.
06. User Rights & Data Deletion (GDPR / CCPA)
Every user retains absolute ownership over their private data. You may request a machine-readable copy of your personal data or demand permanent deletion of your profile at any time.
Submit an inquiry from your authenticated address to contact@inskeys.com or initiate an in-dashboard support ticket. All profile entries, message records, and authentication tokens will be permanently scrubbed within 48 hours.
07. Contact & Regulatory Inquiries
If you have any questions or regulatory concerns regarding our privacy architecture:
Email: contact@inskeys.com
Platform: https://inskeys.com
Compliance Officer: Inskeys Legal Concierge