Stav

Privacy Policy

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how Stav (“we”, “us”), operated by [LEGAL ENTITY NAME], collects, uses, and shares information when you use stavapp.com and the Stav service (the “Service”). By using the Service, you agree to this Policy.

1. Information we collect

Account information (via Discord). When you sign in with Discord, we receive your Discord user ID, username, and avatar. We use this to create and identify your account.

Linked Roblox account. If you link a Roblox account, we store your Roblox user ID and username so we can associate in-game activity and profiles with your account.

Workspace content. Information you or your workspace create in the Service — such as applications, sessions, training and quiz results, policy signatures, documents, leave requests, notices, payout points and requests, groups, permissions, and staff log entries (including warnings, promotions, terminations, and blacklists).

Activity data. If your workspace enables activity tracking, we receive gameplay session data (such as join and leave times and duration) reported by the in-game script for the Roblox experience your workspace links.

Technical data. Basic technical information necessary to operate the Service, such as log data and a session cookie used to keep you signed in.

2. How we use information

  • to provide, operate, and maintain the Service and its features;
  • to authenticate you and keep your account secure;
  • to enable workspace features such as activity quotas, payouts, training, and staff management;
  • to send notifications through the Stav Discord bot to your workspace’s linked server and members;
  • to communicate with you about the Service; and
  • to comply with legal obligations and enforce our Terms.

3. Workspaces: who controls your data

Stav is multi-tenant. When you join a workspace, that workspace’s owner and administrators act as the controllers of the information associated with your membership, and they can view and manage it (for example, your role, groups, activity, payout balance, training and policy status, and staff log history). Stav processes that information on their behalf to provide the Service. Requests to access or delete workspace information may need to be directed to the relevant workspace owner.

4. How we share information

We do not sell your personal information or use it for advertising. We share information only:

  • With your workspace — with owners, administrators, and (where relevant) other members, as part of how the Service works;
  • With Discord — to authenticate you and to deliver bot messages and direct messages you trigger or that concern you;
  • With Roblox— to resolve linked accounts and profile information via Roblox’s public interfaces;
  • With service providers — such as our hosting provider and, for paid plans, our payment processor, who process data on our behalf under appropriate obligations; and
  • For legal reasons — where required by law or to protect the Service, our users, or others.

Stav is not affiliated with or endorsed by Discord or Roblox.

5. Cookies

We use a single essential session cookie to keep you signed in. We do not use advertising or third-party tracking cookies. Because the sign-in cookie is essential to the Service, disabling it will prevent you from logging in.

6. Data retention

We retain information for as long as your account or workspace membership is active and as needed to provide the Service. Workspace content is retained while the workspace exists. We may retain certain information longer where required for legal, security, or dispute-resolution purposes. When you delete your account or a workspace is deleted, we remove or de-identify associated information within a reasonable period, subject to those exceptions.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us at [CONTACT EMAIL]. Where a workspace controls the information, we may direct your request to that workspace’s owner. You can also unlink your Roblox account or stop using the Service at any time.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or the minimum age of digital consent in your country, if higher). If you believe a child has provided information to us, contact us at [CONTACT EMAIL] and we will take appropriate steps to remove it. Workspace owners are responsible for the eligibility of their members.

9. Security

We take reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your information may be processed and stored in countries other than your own, including where our hosting and service providers operate. Where required, we take steps to ensure appropriate safeguards for such transfers.

11. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable notice (for example, in-app or by updating the date above). Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Questions or requests about your privacy? Contact us at [CONTACT EMAIL] [and postal address, if required in your jurisdiction].