Privacy Policy

1. Who we are

WG2Bot is the controller responsible for the personal data described in this policy. Questions, privacy requests and complaints can be sent to support@wg2bot.com.

2. Information we collect

Account and security information

• Your name, email address, account ID and account status.
• Your password in securely hashed form; we do not store your plain-text password.
• Email-verification, password-reset, one-time login and two-factor authentication records.
• Login, session and security information, including IP address, user agent and relevant timestamps.

Subscription, order and licence information

• Plan, game, farm quantity, subscription status, renewal or expiry dates and transaction history.
• Stripe customer, checkout, subscription and payment references.
• PC licence status, activation history, device limits and hashed or pseudonymous device identifiers used for licence validation.

Payment card details are entered and processed by Stripe. WG2Bot does not receive or store your complete card number, card security code or online-banking credentials.

Farm and automation information

• Farm labels, selected game, server and emulator identifiers, configuration choices and automation settings.
• Farm status, bot status, last-seen times, activity logs, error information and service commands.
• Any farm or game-account email address that you choose to add to your configuration.

Android app and notification information

• App installation ID, device name, platform, app version and last-seen time.
• Firebase Cloud Messaging token and notification preferences.
• Notification delivery, read status and the actions required to open the relevant app screen.

The Android app requests internet access and, with your permission, permission to display notifications. It does not request access to precise location, contacts, photos, camera, microphone, SMS or call logs.

Support and communications

• Support tickets, replies, attachments or other information you provide when asking for help.
• Service, billing, security and account communications sent to you.

Website and service usage

• Pages requested, approximate time of access, browser/device information, IP address and service logs.
• Diagnostic, security and performance information needed to operate and protect the service.

3. Why we use your information and our lawful bases

Where we rely on legitimate interests, we consider the necessity and impact of the processing and your rights. We do not use your data for solely automated decisions that produce legal or similarly significant effects.

4. When we share information

We share only what is reasonably necessary with service providers acting on our behalf or where disclosure is required by law. These providers may include:

• Stripe, for checkout, subscription and payment processing.
• Google Firebase, for Android push-notification delivery.
• Hosting, infrastructure, backup, content-delivery and security providers.
• Email-delivery and customer-support communication providers.
• Professional advisers, regulators, courts or law-enforcement bodies where legally required.

We do not sell or rent personal data. Our providers may process data outside the United Kingdom. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

If you choose to open an external service such as Google Play, Stripe or WhatsApp, that provider also handles information under its own privacy terms.

5. How long we keep information

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including providing your account and services, resolving disputes, preventing abuse and meeting tax, accounting and legal obligations.

• Account, subscription, farm and licence information is generally retained while your account or service is active.
• Billing and transaction records may be retained after account closure where required for tax, accounting, chargeback or legal purposes.
• Security, audit, diagnostic and activity logs are retained for periods proportionate to troubleshooting, security and abuse-prevention needs.
• Notification tokens are removed or invalidated when you sign out, revoke a device, disable registration or when the token is reported invalid.
• Support correspondence may be retained to resolve ongoing issues and maintain an appropriate service history.

When information is no longer needed, it is deleted or anonymised. Backup copies may remain for a limited period until they are overwritten through the normal backup cycle.

6. Account and data deletion

You can request deletion of your WG2Bot account and associated personal data by emailing support@wg2bot.com from the email address registered to your account. Use the subject Account deletion request and include enough information for us to identify the account.

We may need to verify your identity before acting. Deletion does not automatically reverse completed payments, and you should cancel any active subscription separately. We will delete or anonymise data that is no longer required, but may retain limited records where necessary for legal obligations, payment disputes, fraud prevention, security or the establishment, exercise or defence of legal claims.

7. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you the right to:

• ask for access to your personal data;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict how information is used;
• object to processing based on legitimate interests;
• receive certain information in a portable format; and
• withdraw consent where consent is the lawful basis.

These rights are not absolute and exemptions may apply. To make a request, email support@wg2bot.com. We may ask for information to verify your identity.

You also have the right to complain to the UK Information Commissioner's Office. Visit ico.org.uk for guidance. We would appreciate the opportunity to address your concern first.

8. Security

We use technical and organisational safeguards designed to protect personal data, including encrypted connections, password hashing, access controls, authenticated API sessions, two-factor authentication options, restricted administrator access and security logging. No internet service can guarantee absolute security, but we review and improve protections as the service develops.

9. Children

WG2Bot is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided personal data to WG2Bot, contact us so that we can investigate and take appropriate action.

10. Changes to this policy

We may update this policy when WG2Bot features, providers or legal requirements change. The revised policy will be published on this page with a new “Last updated” date. We will provide an additional notice where a change materially affects how personal data is used.

11. Contact

For privacy questions, rights requests or account deletion, contact:
WG2Bot
support@wg2bot.com