Section 1 - Categories of Information We Collect
We collect information you provide directly and information generated through service use. Depending on how
you interact with Tsumi, this may include account identifiers, profile details, authentication data,
support communications, and transaction-related records.
We may also collect technical and operational metadata necessary to run, secure, and improve Tsumi,
including device characteristics, network and connection metadata, license and session activity,
anti-abuse telemetry, system diagnostics, and security event logs.
Information may be collected from you, from your device or browser, from payment and infrastructure providers,
and from integrated systems that support account management, fraud prevention, and service reliability.
Section 2 - Purposes and Legal Basis for Processing
Tsumi processes information to provide and administer services, authenticate users, enforce license rules,
process purchases, deliver requested functionality, respond to support inquiries, and maintain account security.
We also process data to detect and prevent abuse, investigate incidents, monitor reliability,
improve product performance, satisfy legal obligations, and protect Tsumi, its users, and third parties.
Where required by applicable law, our legal basis may include performance of a contract, legitimate interests,
legal compliance, fraud prevention, security operations, and user consent where consent is required.
Section 3 - Security, Encryption, and Access Control
Tsumi uses administrative, technical, and organizational safeguards designed to protect data against
unauthorized access, disclosure, alteration, and destruction. Safeguards include encryption controls,
access restrictions, auditability mechanisms, and environment hardening practices where appropriate.
- Authentication and sensitive traffic are protected during transmission using secure transport methods.
- Sensitive account and licensing fields may be encrypted at rest in storage systems.
- Security, audit, and access logs are protected against unauthorized manipulation or disclosure.
- Access to sensitive data is restricted by role, business need, and operational controls.
No security measure is absolute, and Tsumi cannot guarantee complete immunity from all threats.
However, we continuously review and improve safeguards to reduce risk and respond to emerging threats.
Section 4 - Sharing, Disclosure, and Third-Party Processors
Tsumi does not sell personal information. We may share data with vetted service providers that perform functions
on our behalf, such as hosting, payment processing, infrastructure, analytics, customer support,
anti-abuse operations, and security monitoring.
Where third-party processors are used, sharing is limited to data reasonably necessary for contracted services,
and subject to confidentiality and security obligations.
We may disclose information when required by law, legal process, regulatory request, or where disclosure is
reasonably necessary to enforce terms, investigate misuse, prevent fraud, protect rights, or protect service integrity.
Section 5 - Retention, Deletion, and User Rights
Tsumi retains data only for as long as reasonably necessary for service delivery, account administration,
security operations, fraud prevention, dispute handling, and legal compliance.
You may submit verified requests for access, correction, or deletion through Tsumi support channels,
subject to identity verification and applicable legal limitations.
Tsumi may retain certain records where required or permitted by law, including records needed for legal compliance,
tax and accounting requirements, abuse prevention, fraud investigation, security integrity, or contractual enforcement.
Section 6 - Policy Changes and Continued Use
Tsumi may update this Privacy Policy to reflect legal, operational, product, or technical changes.
Material updates may be communicated through website notice, dashboard notice, or other reasonable means.
Your continued use of Tsumi after an updated Privacy Policy becomes effective constitutes acknowledgment
of the revised policy, to the extent permitted by applicable law.
