PRIVACY POLICY

ARTICLE I: INFORMATION WE COLLECT

1.01. Account and Profile Information. The Platform collects information that Users and Vendors provide when creating or using an account, including username, email address where supplied, profile information, moderator settings, support communications, and information necessary to operate account features. Because AIM Outlet uses the existing EasyAimLock account, certain account data, membership state, service time, product-code information, member-since date, masked email, device details, install/usage counts, and trial status may be shared between EasyAimLock and the Platform to operate integrated features.

1.02. Usage and Technical Information. The Platform may collect IP address, browser type and version, operating system, internet service provider, referring and destination pages, pages and functions used, searches, dates and times of access, files requested, transfer volume, device or session identifiers, and access or error status. This information is used for security, fraud prevention, troubleshooting, service operation, analytics, and improvement.

1.03. User Content and Marketplace Information. Vendors may provide listing metadata, descriptions, thumbnails, digital asset information, pricing selections, and related moderation information. Users may provide votes, requests, direct messages, and support communications. Custom thumbnails uploaded by support-role moderators are validated server-side, limited to 3 MB, accepted as JPG/PNG/WEBP/GIF, resized as needed, and converted to WEBP.

1.04. Notifications and Direct Messages. Where a User or Vendor enables optional notifications through ntfy, a free third-party service, the Platform transmits notification payloads over the public internet. Notifications are not encrypted on the ntfy free tier, and anyone who knows or guesses a topic name may read the notifications sent to that topic. The Platform sends only event alerts (such as event type, listing or request identifiers, and message alerts) and does not include passwords, payment details, or other sensitive information in notification content. Users and Vendors should treat notifications as a convenience, not as a secure messaging channel. Direct messages exchanged between Users and Vendors through the Platform are processed and stored to operate the messaging feature. The Platform is not a mediator for private payment disputes conducted through direct messages.

1.05. Moderator API Keys. Vendors may generate an API key for external integrations such as a payment bot or service that grants or revokes access after an off-Platform payment. API keys are stored in a form suitable for verification and are the Vendor's responsibility to protect. Regenerating a key revokes the previous key.

ARTICLE II: HOW WE USE INFORMATION

2.01. Purposes of Processing. The Platform uses collected information to provide and secure the Platform; authenticate Users; process access grants; operate marketplace, notification, direct-message, and support features; prevent abuse and fraud; comply with legal obligations; enforce the Terms; maintain records; and improve Platform performance and reliability.

2.02. Access and Download Authorization. Information is used to determine whether a User is signed in and has access through a free sample, Vendor enrollment, specialty purchase, bundle purchase, or Vendor grant, and to deliver encrypted downloads through temporary secure links. Blocked Users cannot download a Vendor's weights.

ARTICLE III: PAYMENTS AND CONNECTED ACCOUNTS

3.01. Third-Party Payment Processors. Payments may be processed by third parties, including Stripe, PayPal, Cash App, Discord, or other services selected by a Vendor. When Stripe Connect is used, Stripe may collect and process payment-card data, identity-verification data, tax information, bank-account details, and other financial information under Stripe's own privacy policy and terms. The Platform does not store full payment-card numbers or complete identity-verification materials submitted to Stripe.

3.02. Limited Payment-Related Information. The Platform may receive limited payment-related information from processors, such as transaction identifiers, payment status, amount, currency, connected-account identifier, and information needed to grant or revoke Platform access, maintain records, resolve support issues, and comply with law.

3.03. External Pay. For External Pay transactions, payment occurs off-Platform through a provider selected by the Vendor. The Platform does not receive, process, or store the payment-card data, account credentials, or transaction details handled by the external provider. The Vendor is solely responsible for the handling of any information submitted to the external provider under that provider's own privacy policy and terms.

ARTICLE IV: SHARING OF INFORMATION

4.01. Service Providers. The Platform may share information with service providers that help operate the Platform, including hosting, storage, security, analytics, notification, and payment providers. These providers are contractually obligated to handle information consistently with this policy and only process information as necessary to provide their services.

4.02. Legal Disclosures. The Platform may disclose information when required by law, legal process, or a valid government request; to protect rights, safety, and property; to investigate fraud or abuse; or as part of a business transfer. The Platform does not sell personal information for monetary consideration.

4.03. Vendor Visibility. Certain information, such as public display name, bio, profile image, banner image, optional social links, listing metadata, pricing, and vote or access state, may be visible to other Platform Users as part of the normal operation of the marketplace.

ARTICLE V: SECURITY AND DIGITAL ASSETS

5.01. Safeguards. The Platform uses reasonable administrative, technical, and organizational safeguards designed to protect information and distributed digital assets, including encrypted storage, access controls, authentication, integrity checks, and controlled delivery mechanisms.

5.02. No Absolute Security. No online system, encryption method, transmission, storage system, or access-control mechanism is completely secure. The Platform cannot guarantee that User information or Vendor assets will never be accessed, copied, altered, disclosed, lost, or compromised by unauthorized parties, software vulnerabilities, reverse engineering, third-party failures, or other events. Vendors are responsible for evaluating the sensitivity of their materials, maintaining their own backups, and deciding whether distribution through the Platform is appropriate for their needs.

ARTICLE VI: RETENTION

6.01. Retention Periods. The Platform retains information only as long as reasonably necessary to operate the Platform, maintain security and records, resolve disputes, enforce agreements, meet legal obligations, and support legitimate business operations. Retention periods vary by information type and applicable legal requirements.

6.02. Account Tools and Cooldowns. Certain account actions are subject to technical retention and cooldown rules, including HWID reset (48-hour cooldown) and password-reset flow initiation (2-hour cooldown). These rules are operational and do not alter the retention obligations described in this Article.

ARTICLE VII: YOUR CHOICES AND REQUESTS

7.01. Account and Notification Settings. Subject to applicable law, you may manage certain account, profile, notification, and connected-payment settings through the Platform, including enabling or disabling ntfy notification topics and selecting which events you receive.

7.02. Privacy Requests. You may request access to, correction of, or deletion of personal information the Platform maintains about you. To make a privacy request, contact support@aimoutlet.com. The Platform may need to verify your identity before responding.

ARTICLE VIII: CHILDREN

8.01. Age Restriction. The Platform is a commercial service and is not directed to children under 13. The Platform does not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the Platform, contact the Platform so it can investigate and take appropriate action.

ARTICLE IX: INTERNATIONAL USERS AND REGIONAL PRIVACY RIGHTS

9.01. Cross-Border Processing. Information may be processed or stored in locations where the Platform or its service providers operate. By using the Platform, you understand that information may be transferred to jurisdictions with different data-protection laws than those of your country of residence.

9.02. California Consumers (CCPA). If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion of your personal information, and the right to opt out of the sale or sharing of your personal information. The Platform does not sell personal information for monetary consideration. To exercise these rights, contact support@aimoutlet.com. The Platform may need to verify your identity before responding.

9.03. European Union and UK Residents (GDPR). If you are located in the European Union, the European Economic Area, or the United Kingdom, you may have additional rights under the General Data Protection Regulation (GDPR) or the UK GDPR, including the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. Where the Platform processes your personal data based on legitimate interests, you may also have the right to object. To exercise these rights, contact support@aimoutlet.com. The Platform may need to verify your identity before responding. If you believe the Platform has not complied with applicable data-protection law, you have the right to lodge a complaint with your local data-protection authority.

ARTICLE X: CHANGES TO THIS POLICY

10.01. Updates. The Platform may update this Privacy Policy from time to time. The effective date above reflects the latest version. Continued use of the Platform after an update is subject to the updated policy to the extent permitted by law.

ARTICLE XI: CONTACT AND RELATED DOCUMENTS

11.01. Contact. For privacy questions or requests, contact support@aimoutlet.com. For general EasyAimLock account and product information, visit easyaimlock.com.

11.02. Related Documents. This Privacy Policy should be read together with the AIM Outlet Master Terms of Service and Legal Disclaimer and the AIM Outlet User & Moderator Guide. This Privacy Policy does not alter the limitations of liability or disclaimers set forth in the Master Terms of Service.