Information we process
We process account identifiers such as email address, Supabase user ID, and Discord identity when used to sign in; Whop payment and order identifiers; selected products and plan balances; policy acceptance; support communications; and limited technical/security information needed to operate and protect the service. Whop and its payment processors handle payment-card information; Palm Proxy does not intentionally store full card numbers.
How we use information
We use information to authenticate customers, create and fulfill orders, display plans and usage, prevent fraud and abuse, provide support, enforce policies, maintain audit records, comply with law, and improve reliability.
Service providers
Information is shared only as reasonably necessary with payment, infrastructure, authentication, hosting, security, and service-provisioning providers, as well as professional advisers or authorities where legally required. Each provider processes information under its own terms and policies.
Retention
We retain account, transaction, acceptance, fraud-prevention, and support records for as long as reasonably needed for service, accounting, disputes, security, and legal obligations. Proxy credentials are retained while needed to provide the active plan. We avoid collecting information that is unnecessary for these purposes.
Security
We use access controls, encrypted transport, server-held credentials, signed payment webhooks, database row-level security, and logging. No system can guarantee absolute security. Protect your account and promptly report suspected compromise.
Your choices and rights
You may request access, correction, or deletion of eligible account information through Palm Proxy support. Some transaction, security, or legal records may need to be retained. Privacy rights vary by location, and we will honor applicable requirements.
Children and international use
The service is not directed to anyone under 18. Information may be processed in the United States and other locations where our providers operate.
Changes
Material changes will be posted with a revised effective date and, where appropriate, presented for renewed acceptance.