Privacy Policy - Grand Glow

1. Collected Data Categories

Collected data categories include personally provided information such as name, email, profile details, and age verification. Automatically gathered categories include technical data: IP addresses, device information, browser types, and platform interaction metrics. Data collection enables service provision.

2. Lawful Processing Purposes

Lawful processing purposes encompass service maintenance, account management, age validation, content personalization, notification delivery, behavior analytics, platform improvement, fraud detection, and security enforcement. Purposes are legitimate and essential for service delivery.

3. No Sale of Personal Data

We maintain a strict no-sale policy for personal data. Sharing occurs only with trusted service providers, analytics platforms, payment processors, and legal entities when legally obligated. Contractual agreements ensure third parties protect data and restrict usage to specified functions.

4. Security Implementation Standards

Security implementation standards require encryption, secure server architecture, firewall deployment, access management, and routine security audits. While we employ industry-leading practices, absolute security cannot be warranted due to technological realities. Standards evolve continuously to improve security.

5. Data Ownership Rights

Data ownership rights include accessing owned information, updating details, correcting inaccuracies, deleting records, objecting to certain uses, revoking consent, and requesting transfers. Contact privacy team to assert ownership rights. Processing occurs within 30 days following verification.

6. Technology Cookie Practices

Technology cookie practices utilize cookies, tracking tools, and related mechanisms for experience enhancement, usage monitoring, preference retention, and content customization. Practices include necessary, functional, analytical, and preference cookies. Control practices via browser settings, acknowledging possible feature limitations. Reference Cookie Policy for practice details.

7. Retention Time Frames

Retention time frames cover necessary service provision periods, legal compliance durations, dispute resolution requirements, and agreement enforcement needs. Account inactivity beyond 365 days may trigger deletion. Data removal completes within 90 days post-account deletion, excluding legally mandated retention. Contact privacy team for deletion requests.

8. Youth Data Prohibition

Youth data prohibition prevents individuals under 21 from using platform. We do not knowingly gather information from children or youth. Youth data detection prompts instant account deletion and comprehensive data erasure. Guardians or parents suspecting youth data provision should contact us immediately for removal.

9. Global Data Movement

Global data movement may transfer information internationally to locations with varying privacy regulations. Movement safeguards include standard contracts, robust encryption, and comprehensive security measures. We protect data during global movement. Service usage signifies consent to global data movement with implemented safeguards.

10. Policy Update Authority

Policy update authority permits revising this Privacy Policy at any time. Updates are published with new revision dates on this page. Substantial updates are communicated through email or platform announcements. Continued platform use after updates signifies acceptance. Regular review is encouraged to understand current policy.