1. Who We Are
RiD Software is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, please contact us at privacy@robotzindisguise.com.
This policy is issued under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
| Category | Examples | Source |
|---|---|---|
| Account data | Username, email address, password (hashed), registration IP | You, at registration |
| Payment data | Transaction ID, amount, date, subscription tier | PayPal / Stripe (we do not store card numbers) |
| Usage data | Session duration, daily botting hours, bot configuration files, calibration logs, error logs, setup-progress diagnostics | Genesis application, automatically |
| Technical data | IP address, device identifiers, browser/client type, pages visited | Our servers, automatically |
| Diagnostic screenshots | An image of your screen at the moment a setup step failed, sent only if you choose to | Genesis application, at your request |
| Communications | Support emails, Discord account link (if connected) | You, voluntarily |
We do not collect sensitive personal data (as defined by UK GDPR Article 9) and do not knowingly collect data from individuals under 18.
3. Legal Basis for Processing
| Purpose | Legal basis |
|---|---|
| Providing and managing your subscription | Contract (UK GDPR Art. 6(1)(b)) |
| Processing payments and preventing fraud | Contract & Legitimate interests (Art. 6(1)(b) & (f)) |
| Operating the Genesis application (sessions, bot files, mouse data) | Contract (Art. 6(1)(b)) |
| Security, abuse prevention, ban enforcement, brute-force protection | Legitimate interests (Art. 6(1)(f)) |
| Improving our service and software | Legitimate interests (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Data
- To create and maintain your account and subscription.
- To authenticate you and authorise access to the Genesis application.
- To process payments and record transaction history.
- To store and serve your bot configurations and session data.
- To detect and prevent abuse, fraud, and policy violations.
- To send service-related communications (e.g. account changes, payment confirmation).
- To improve our software and website based on aggregated usage patterns.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Who We Share Data With
- PayPal / Stripe — payment processing. Each has its own privacy policy and is an independent data controller for payment data.
- Discord — only if you voluntarily link your Discord account; used to assign subscriber roles.
- Cloudflare Turnstile — used on our registration form to detect automated/bot submissions. Processes your IP address and device/browser signals at the point of registration; we do not receive or store the underlying signals ourselves, only a pass/fail result.
- Law enforcement / regulators — where we are legally required to disclose data (e.g. court order, police request relating to suspected illegal activity).
- Hosting infrastructure (USA) — our web host processes data on our behalf under a data processing agreement. See section 6 for the international transfer safeguards that apply.
6. International Transfers
Our web servers are hosted by Amazon Web Services (AWS) in the United States of America. The USA is not covered by a UK adequacy regulation, so this transfer requires a specific legal safeguard.
AWS has self-certified under the UK-US Data Bridge programme (in force from 12 October 2023), which provides the legal basis for transferring personal data to AWS from the UK. AWS also incorporates the UK International Data Transfer Agreement (IDTA) into its Data Processing Addendum as a supplementary safeguard.
Data transferred to PayPal, Stripe, Discord, or Cloudflare (where applicable) is similarly covered by their own UK-US Data Bridge certifications or standard contractual clause arrangements. You can request further detail by emailing privacy@robotzindisguise.com.
7. Retention
| Data type | Retention period |
|---|---|
| Active account data | For the life of your account |
| Payment records | 7 years (UK tax / accounting obligations) |
| Session and usage logs | Up to 12 months from creation |
| Diagnostic screenshots | 30 days |
| Login / security logs | 90 days |
| Closed account data | Deleted within 30 days of a verified deletion request, except where retention is required by law |
8. Security
We take reasonable technical and organisational measures to protect your data, including SSL/TLS encryption on all data transmissions and access controls on our systems. No system is completely secure; if you become aware of any security issue please contact us immediately at privacy@robotzindisguise.com.
Please note: passwords in the current system are stored in a hashed format. You should use a unique password for your account.
9. Your Rights
Under UK GDPR you have the following rights. To exercise any of them, email privacy@robotzindisguise.com from your registered address. We will respond within one calendar month.
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data where there is no lawful reason to retain it.
- Restriction — ask us to restrict processing of your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
10. Cookies
We use session cookies to keep you logged in while you use the members area. We do not use tracking or advertising cookies. No cookie consent banner is required for strictly necessary session cookies.
11. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the opportunity to resolve any concern first — please contact us at privacy@robotzindisguise.com.
12. Changes to This Policy
We may update this policy from time to time. The current version is always available on this page with the date it was last updated. Continued use of our services following a material change constitutes acceptance of the updated policy.