Privacy Policy

1. Scope

This Policy applies to the CLAUSUMHUB website, customer account, private library, creator and pack pages, authentication flows, checkout-related access, and related communications. CLAUSUMHUB is intended only for adults aged 18 or older.

2. Data we process

Depending on how you use the Service, we may process:

• Account data: email address, display name, account identifiers, password hash when you choose email/password sign-in, and email-verification status.
• Connected-account data: identifiers and limited profile information returned by Google or Telegram when you choose those sign-in methods.
• Purchase and access data: orders, transaction status, products or packs purchased, entitlements, library access history, and identifiers needed to connect a purchase to your account.
• Technical and security data: session identifiers, security tokens, request metadata, IP address and browser/device information that may be processed by our application, hosting, security, or infrastructure providers.
• Support and communication data: information you provide when requesting help, password recovery, account access, privacy assistance, or other support.

3. Google sign-in data

If you choose “Continue with Google”, CLAUSUMHUB requests only the OpenID Connect scopes openid, email, and profile. We use the information returned by Google to authenticate you, confirm a verified email address, create or locate your CLAUSUMHUB customer account, link your Google identity to that account, and secure access to your private library.

CLAUSUMHUB does not request access to Gmail, Google Drive, Google Contacts, or other sensitive or restricted Google API scopes for this login flow. OAuth access tokens are used only during the authentication callback to verify identity and are not intentionally persisted by CLAUSUMHUB after the sign-in flow completes.

Google user data obtained through sign-in is not used by CLAUSUMHUB to provide advertising or to access unrelated Google services. Our use of Google user data is limited to the authentication and account-linking purposes described in this Policy.

4. Telegram sign-in data

If you choose “Continue with Telegram”, CLAUSUMHUB requests the Telegram OpenID scopes openid and profile. We may receive a Telegram user identifier, username, display name, avatar URL, and other profile claims provided by Telegram. We use this information to authenticate you, connect your Telegram identity with an existing customer/contact record when applicable, and keep purchases and entitlements inside one CLAUSUMHUB library.

The CLAUSUMHUB Telegram login flow does not request your phone number in the current version. Authentication tokens are verified during sign-in and are not intentionally stored as long-term account credentials.

5. Payments and digital purchases

Payment providers may collect payment information directly under their own privacy terms. CLAUSUMHUB may receive and store transaction identifiers, payment status, amount, currency, order information, and other data needed to confirm a purchase, prevent duplicate processing, provide access, handle refunds or disputes, and maintain financial records where required.

6. How we use personal data

We use personal data to provide and secure the Service; create and authenticate customer accounts; link Google, Telegram, email and purchase identities to the correct library; deliver purchased digital access; process and reconcile transactions; provide password recovery and account communications; prevent abuse, fraud, unauthorized access and duplicate entitlements; troubleshoot and improve reliability; comply with legal obligations; and protect the rights, safety and integrity of users, creators, CLAUSUMHUB and third parties.

7. Cookies and sessions

CLAUSUMHUB uses essential cookies and server-side session data for authentication, CSRF protection, age confirmation, secure account state and private-library access. These technologies are necessary for core account and security functionality. If non-essential analytics or advertising technologies are introduced later, this Policy and any required consent controls will be updated before they are used.

8. When data may be shared

We may share data only as reasonably necessary with service providers that help operate CLAUSUMHUB, such as hosting/infrastructure providers, authentication providers (including Google and Telegram), payment processors, transactional email providers, security providers, and professional advisers. We may also disclose information when required by law, legal process, fraud prevention, safety, or to protect legal rights. Third-party services process information under their own terms and privacy policies where they act independently.

9. Data retention

We retain data for as long as reasonably necessary to maintain your account and entitlements, provide purchased access, keep transaction and security records, resolve disputes, meet legal/accounting obligations, and protect the Service. Retention periods can differ by data category and jurisdiction. When information is no longer required, we may delete or de-identify it where reasonably possible.

10. Security

CLAUSUMHUB uses technical and organizational safeguards appropriate to the Service, including encrypted HTTPS connections, secure cookies in production, password hashing, CSRF protections, provider-side OAuth/OIDC validation, authorization checks for private content, and restricted operational access. No system can guarantee absolute security, and users are responsible for protecting their own credentials and devices.

11. International processing

CLAUSUMHUB is designed for a global audience. Our providers and infrastructure may process data in countries different from the country where you live. Where applicable law requires safeguards for international transfers, we will rely on the mechanisms available to the relevant operator or service provider.

12. Your privacy choices and rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, objection to, or portability of certain personal data, and to withdraw consent where processing is based on consent. We may need to verify your identity before fulfilling a request, and some records may need to be retained where required by law or to protect legitimate rights.

You can also disconnect or revoke Google/Telegram authorization from the relevant provider account settings. Revoking a provider does not automatically erase purchase records or entitlements that CLAUSUMHUB must retain to provide or document prior transactions.

13. Account deletion

You may request deletion of your CLAUSUMHUB customer account and associated personal data, subject to legal, security, fraud-prevention, transaction-record and dispute-retention requirements. A deletion request may affect your ability to access purchased digital content if the entitlement can no longer be associated with an authenticated account.

14. Adults only

CLAUSUMHUB is not intended for minors. You must be at least 18 years old, and at least the age of legal majority required to access adult content in your location, to create an account or access restricted content. If we learn that an ineligible minor has provided personal data, we may suspend access and take appropriate steps to delete the information where required.

15. Changes to this Policy

We may update this Privacy Policy as the Service, providers, legal requirements, or data practices change. The effective date at the top of the page will be updated when material revisions are published. Where required, we will provide additional notice or obtain consent.

16. Contact

For privacy or data-rights requests, contact CLAUSUMHUB at privacy@clausumhub.com. Please do not send passwords, OAuth secrets, payment credentials, or other highly sensitive authentication information by email.