Privacy Policy

The data controller responsible for your personal data is Sapphire Service, reachable through the official support channels listed at saph.services. We do not maintain a registered legal entity in any specific jurisdiction; for data-related inquiries, please contact us via our official support channels.

Account & Registration Data

• Username or display name chosen at registration
• Email address (if provided for account creation or support)
• Password (stored as a hashed value — never in plain text)
• Date and time of registration

Transaction & Payment Data

• Purchase history (product name, license type, date, amount)
• Cryptocurrency wallet addresses used for payments (public addresses only)
• Gift card or voucher redemption records (card type, denomination)
• Account balance and transaction history within the platform

Technical & Usage Data

• IP address and approximate geographic region (country/city level)
• Browser type and version, operating system
• Pages visited on saph.services and time spent
• Referring URL (how you arrived at our site)
• Hardware ID or device fingerprint (for license activation and anti-abuse)

Support & Communication Data

• Discord username or Telegram handle (if you contact us via these channels)
• Content of support tickets and related correspondence
• Any information you voluntarily provide during a support interaction

• Service delivery: process purchases, issue license keys, maintain your account balance, and provide access to purchased products.
• Support: respond to tickets, troubleshoot issues, and verify your identity during disputes.
• Security & fraud prevention: detect and prevent key sharing, unauthorized access, chargebacks, and other abuse using device IDs and IP data.
• Legal compliance: retain transaction records as required to defend against chargebacks, disputes, or legal claims.
• Service improvements: analyse aggregated, anonymised usage patterns to improve platform performance and features. We do not sell or share individual usage data for marketing.
• Communications: send service-critical notifications (product updates, downtime, key replacements). We do not send unsolicited marketing emails.

• Contract performance: processing necessary to fulfil your purchase and provide the service you paid for.
• Legitimate interests: fraud prevention, security, abuse detection, and dispute resolution — where our interest does not override your rights.
• Legal obligation: retaining transaction records to comply with applicable financial regulations and respond to legal claims.
• Consent: where we ask for your explicit agreement (e.g., optional communications). You may withdraw consent at any time.

We do not sell your personal data. We may share data with:

• Infrastructure providers: hosting, CDN, and database services that process data on our behalf under data processing agreements.
• Payment processors: where a third-party payment service is used, they process transaction data under their own privacy policies.
• Third-party product developers: where a resold product requires license activation via the developer's system, your hardware ID and activation request may be transmitted to that developer. We do not control their data practices.
• Law enforcement / legal process: if required by law, court order, or to protect the rights and safety of Sapphire or its users.

• Account data: retained for as long as your account is active. Inactive accounts may be deleted after 24 months of no activity, with reasonable notice where possible.
• Transaction records: retained for a minimum of 3 years to support dispute resolution and legal compliance.
• Support logs: retained for 12 months after the ticket is closed, then deleted or anonymised.
• Technical/usage data: aggregated and anonymised within 90 days; individual IP logs retained for up to 30 days for security purposes.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your data, subject to our legal obligations to retain certain records.
• Restriction: ask us to limit processing of your data in certain circumstances.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us via official support channels. We will respond within 30 days. Note that exercising these rights may affect your ability to use our services (e.g., account deletion terminates all active licenses).

We use cookies and similar technologies to operate the platform. For a full breakdown of what cookies we use and how to manage them, see our Cookie Policy.

We implement industry-standard technical and organisational measures to protect your data: passwords are hashed and never stored in plain text; access to production systems is restricted; data in transit is encrypted via HTTPS. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we take reasonable steps to protect your information and will notify affected users in the event of a data breach affecting their personal data.

Our services are not directed at children under 13. Users between 13 and 18 require verifiable parental consent (see Terms of Service, Section 2). We do not knowingly collect personal data from children under 13. If you believe a child's data has been submitted without parental consent, contact us immediately and we will delete it promptly.

Sapphire operates internationally and your data may be processed on servers located outside your country of residence. We take steps to ensure that any such transfers are subject to appropriate safeguards (e.g., contractual protections with service providers). By using saph.services, you acknowledge that your data may be transferred to and processed in countries with different data protection standards than your own.

We may update this Privacy Policy at any time. The revised version will be published on this page with an updated date. Continued use of saph.services after changes are posted constitutes acceptance. For material changes, we will make reasonable efforts to notify users via official channels.