Privacy Policy

DRAFT — requires legal review. The data controller for JuanStock is the business owner and operator in Colombia who administers www.juanstock.co. Data rights requests are handled via the official Discord link on the site.

DRAFT — requires legal review. We process only data necessary to provide the service:

• Account: email, name or alias, optional profile photo.
• Orders: Roblox username, gamepass details, amount and currency, payment method.
• Payments: receipts for manual payments; gateway metadata (we do not store full card numbers).
• Support: messages via Discord or in-app chat.
• Technical: IP address, user agent, language, and functional session cookies.

DRAFT — requires legal review. We use your data for legitimate purposes only:

• Process orders and deliver Robux.
• Verify payments and prevent fraud.
• Provide support and resolve disputes.
• Keep the platform secure and improve the experience.
• Comply with legal obligations.

We do not sell your data or use it for third-party advertising without explicit consent.

DRAFT — requires legal review. We use essential cookies for session, authentication, and anti-fraud security. Analytics cookies, if enabled, will be disclosed via a consent banner.

You may clear cookies in your browser, but some features (login, cart) may stop working.

DRAFT — requires legal review. We rely on technology providers:

• Supabase (database, auth, storage).
• Vercel (hosting and CDN).
• Resend (transactional email).
• Payment gateways (e.g. Bold, ePayCo) when you use those methods.

We share only the minimum necessary for the service to function.

DRAFT — requires legal review. We retain data while your account is active and for periods required by tax, accounting, or legal defense obligations. When no longer needed, data is deleted or anonymized.

DRAFT — requires legal review. We apply reasonable practices: HTTPS encryption, role-based access, admin audit logs, and provider-managed backups.

If we detect a relevant security incident affecting your data, we will notify you through official channels within a reasonable timeframe.

DRAFT — requires legal review. You may exercise access, rectification, update, deletion, and objection rights by contacting us through official channels. Identify yourself as the data subject and describe your request.

Some requests (e.g. full deletion) may be limited by legal retention requirements.

DRAFT — requires legal review. Providers may host data outside Colombia (e.g. United States or EU). We work only with providers offering reasonable equivalent protection guarantees.

DRAFT — requires legal review. We may update this policy to reflect legal or service changes. The "Last updated" date will always be published. Material changes will be notified by email or a visible site notice.