Privacy Policy

DuoAscenta (“we”, “us”, “our”) operates the Platform at duoascenta.com. We are the data controller responsible for personal data collected through the Platform. For privacy-related enquiries, contact us at privacy@duoascenta.com.

We collect the following categories of personal data when you use the Platform:

• Account information: email address, display name, password (hashed — never stored in plaintext)
• Profile information: summoner name, rank, region, Discord handle, preferred roles
• Order and session data: service type, session notes, order history, session chat messages
• Payment data: billing details processed by Stripe. We do not store full card numbers.
• Supported game-related account information: in-game name, region, rank, and match history and performance information retrieved from applicable third-party services
• Usage data: pages visited, timestamps of actions, error logs (no third-party analytics)
• Communications: messages sent through the in-platform session room

We use your personal data to:

• Create and manage your account
• Process orders and payments
• Match customers with available partners
• Provide and operate session rooms and communications
• Resolve disputes and handle support requests
• Detect fraud, abuse, and Terms of Service violations
• Send transactional notifications related to your orders and account

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We process your personal data on the following legal bases under GDPR:

• Contract performance: processing necessary to deliver the services you have purchased
• Legal obligation: compliance with applicable financial regulations and dispute resolution requirements
• Legitimate interest: fraud detection, platform security, and service improvement
• Consent: where you have explicitly opted in (e.g. marketing emails, if offered)

We share personal data only with:

• Stripe Inc. — payment processing. Stripe's privacy policy applies to payment data.
• Game data service providers — gameplay and performance information is retrieved from third-party services required for platform functionality.
• SendGrid — transactional email delivery (order confirmations, notifications).
• Railway / Vercel — infrastructure providers hosting the Platform. Data is stored in EU/EEA-compliant regions where possible.

We do not share personal data with marketing partners, data brokers, or any third party not directly required to deliver the service.

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law (e.g. financial records must be kept for a minimum period under applicable regulations). Anonymised or aggregated data may be retained indefinitely.

Under applicable data protection law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data (‘right to be forgotten’)
• Object to or restrict certain types of processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@duoascenta.com. We will respond within 30 days.

The Platform uses secure, httpOnly cookies to manage your authentication session. We do not use third-party tracking cookies or advertising pixels. A minimal session presence cookie is also set on login to support server-side routing — it contains only your account type and no sensitive credentials.

We apply industry-standard security measures including TLS encryption in transit, bcrypt password hashing, and JWT-based authentication with short-lived access tokens. Access to production infrastructure is restricted to authorised personnel.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Platform after changes are posted constitutes acceptance of the updated Policy.

For privacy enquiries: privacy@duoascenta.com. If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.