Privacy Policy

Depending on how you use ACO HQ, we may collect:

• account details such as name, email address, authentication identifiers, and Discord identity;
• workspace, team-role, member, profile, checkout, order, drop, PAS, invoice, and payment-status records;
• webhook payloads, scraper and destination configuration, delivery results, and integration identifiers;
• subscription and membership status received from Whop, but not full card details; and
• security, diagnostic, usage, device, and error logs.

ACO HQ uses cookies and browser storage that are necessary for authentication, security, active-workspace selection, setup progress, and interface preferences. We do not use this information for third-party advertising.

• provide and operate your private workspace;
• authenticate users and enforce workspace permissions;
• process webhooks, match members, and power workflows;
• manage subscriptions, activation, and account support;
• monitor reliability, prevent abuse, and protect security;
• debug, analyze, and improve product performance; and
• comply with law and enforce our agreements.

We do not sell personal information. Information may be shared with workspace owners and authorized team members according to their roles.

We also use service providers to operate ACO HQ, including Whop for subscriptions, Supabase for authentication and data storage, Vercel and Railway for hosting, Resend for transactional email, and Discord for connected authentication and messaging features. Information may also be disclosed when required by law, to protect users or the service, or in connection with a business reorganization.

Other ACO HQ customers are not permitted to access your workspace. ACO HQ personnel may access limited information only when needed to provide support, investigate security or reliability issues, enforce agreements, or meet legal obligations. Access is limited to authorized personnel and protected server processes.

Workspace owners decide what member and operational data is entered into ACO HQ and who may access it. If your information appears in a workspace operated by an ACO provider, contact that provider first regarding access, correction, or removal.

We keep information for as long as reasonably needed to provide the service, maintain business and security records, resolve disputes, and meet legal obligations. Retention can vary by record type. Backup copies may remain for a limited period after deletion.

We use administrative and technical safeguards designed to protect information, including authenticated access, optional authenticator-based two-step verification, database-enforced workspace isolation, role-based permissions, encryption in transit and at the hosting and database layers, protected integration secrets, signed webhook entry points, and activity logging.

ACO HQ is not intended to receive or store full payment-card numbers, CVV/CVC security codes, PINs, or magnetic-stripe data. Subscription card entry is handled by Whop. Automated safeguards redact or reject detected payment-card data, but workspace users must not intentionally submit it. No online service can guarantee absolute security.

Depending on your location, you may have rights to request access, correction, deletion, restriction, or a copy of personal information. You may also update many account and workspace details directly in ACO HQ.

To make a privacy request, email acohqapp@gmail.com from the address associated with your account and describe the workspace and request. We may need to verify your identity and authority before completing it.

ACO HQ is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users must also meet any higher minimum age required in their location.

We may update this policy as the service evolves. Material changes will be communicated through the service or by email when appropriate. Privacy questions and requests may be sent to acohqapp@gmail.com.