Privacy Policy

1. Scope and contact

This policy describes how RoCentral, operated from India, processes information for accounts, game listings, portfolios, reviews, communications and optional payment features. Contact us through the Support Center or the official RoCentral Discord server for privacy questions, correction, export or deletion requests. We may ask for account verification before fulfilling a request; do not send passwords or full identity documents in public channels.

2. Information we process

Roblox sign-in supplies your user identifier and permitted profile details. With separate resource consent, we access the experience information and analytics you authorize. Access and refresh tokens are encrypted on the backend; browser session identifiers are stored as hashes in the database. Discord sign-in supplies your identifier, profile, avatar and server-membership information needed for portfolio applications.

We store the listing or portfolio information you submit, uploaded photos and videos, asset-interest registration details, settings, offers, messages, support requests, moderation decisions and notification-delivery records. Photos and videos are processed into optimized formats; temporary originals are removed after processing. Avoid sensitive personal information in uploads and messages.

Operational data can include visited page paths and timestamps, security and error logs, IP addresses in hosting logs, and technical request information used to deliver and protect the service. We do not use these page counts to claim unique people. No advertising pixels or third-party behavioral analytics SDK is currently included.

3. Why we use it

We use information to authenticate users, keep workspaces separate, save drafts, publish approved content, deliver communications, operate moderation and support, prevent fraud and abuse, maintain security, and comply with applicable obligations. Analytics are accessed at your direction for the selected resources; dashboard reports are not automatically published to buyers.

Where enabled, Discord notifications communicate application receipts and decisions. Marketplace-interest registration records your opt-in; it does not itself subscribe you to unrelated advertising. You can remove an interest registration through its management control. Optional payment information is used only to initiate, reconcile, refund or investigate the requested transaction.

4. Who can access information

Published listings, approved portfolios and approved reviews are visible publicly. Private drafts are restricted to the account and authorized reviewers. Conversations are available to their participants and authorized moderators; support tickets are available to the submitting account and staff. These are access controls, not end-to-end encryption.

Vercel delivers the frontend. The backend hosting provider, PostgreSQL database and media storage support service operation. Roblox and Discord process authorization and provider interactions under their own policies. If enabled, Stripe and PayPal process payment and merchant-verification information. Service providers may process information in countries different from your residence. We may disclose necessary records in response to valid legal obligations, to protect users, or in a documented business transfer; we do not sell personal information.

5. Retention and security

We retain account, content and transaction records while needed to provide your account, maintain requested publications, handle support or disputes, prevent abuse, or satisfy applicable legal obligations. Deleting a visible message or unpublishing content does not necessarily remove retained evidence, audit records or backups immediately. Retention and legal-hold decisions are reviewed when a deletion request is processed; this policy does not promise a deletion interval that the service cannot yet enforce automatically.

Roblox sessions expire after seven days; OAuth state is short-lived and single-use. Disconnecting Roblox removes stored authorization tokens and sessions and requests provider revocation. Discord session cookies also last up to seven days. Transport encryption, authenticated encrypted Roblox token storage, account checks and administrative access controls reduce risk, but no system can guarantee absolute security. Backups remain access-restricted and may retain records until replaced.

6. Your controls and requests

You can change settings, withdraw open offers, archive listings, unpublish your portfolio, disconnect Roblox and remove an asset-interest registration through the relevant controls. You can also request access, correction, export, deletion, consent withdrawal, or review of a privacy decision through support. Applicable rights and any lawful exceptions depend on your circumstances and jurisdiction.

We may retain information necessary for unresolved transactions, fraud prevention, legal claims or statutory obligations, and will explain relevant restrictions when responding. Disconnecting an authorization does not erase listings, chat records or obligations associated with the account. You can separately revoke the app through Roblox or Discord settings.

7. Age, payments and updates

RoCentral does not impose a blanket adult-only requirement for community access. Connected services apply their own minimum ages. Where applicable law requires verifiable parental or guardian consent to process a younger user’s personal data, that consent must be obtained before the relevant processing; accepting these terms alone does not establish it. Contact support about a younger user’s information, consent requirements or a removal request. Payment and contractual eligibility are assessed separately.

Payment providers host collection of card or merchant onboarding information. RoCentral may receive transaction IDs, amounts, currency, payer or seller references and processing status; it does not request full card numbers, CVV or banking passwords in chat. Payment features remain unavailable until the operator and provider accounts are configured. Changes to processing will be reflected in this policy and additional notices where appropriate.