Privacy Policy
Last updated: March 31, 2026
At KuyHub, your privacy matters to us. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform. We are committed to being transparent about our data practices and giving you control over your information.
1. Information We Collect
- We collect only the information necessary to provide our services:
- —Roblox Username & User ID: Used to identify your Roblox account for Robux delivery and marketplace transactions. Your User ID is retrieved automatically from the Roblox API
- —Email Address: Required for guest orders to send order confirmations and delivery notifications. Logged-in users can optionally set a contact email in their profile
- —Discord Username (optional): Used as an alternative communication channel for order updates and support
- —Account Credentials: If you register with email and password, your password is securely hashed and never stored in plain text. If you register via Roblox OAuth, we store your Roblox account link
- —Transaction Records: Order IDs, purchase amounts, payment status, payment method used, and timestamps
- —Wallet Data: If you use the KuyHub Wallet, we store your balance and transaction history
- Important: Payment credentials (credit card numbers, bank details, crypto wallet keys) are processed entirely by our payment providers and are never stored on KuyHub servers
2. How We Use Your Information
- We use your information strictly for the following purposes:
- —Order fulfillment: Processing purchases, delivering Robux via group payout, and facilitating marketplace escrow transactions
- —Communication: Sending order status updates, delivery confirmations, and responding to support requests via email
- —Security & fraud prevention: Detecting unauthorized or fraudulent transactions, rate limiting, and webhook verification
- —Service improvement: Analyzing aggregate, anonymized usage patterns to improve our platform
- —Error monitoring: Tracking application errors to maintain platform stability and reliability
- We will never sell, rent, or share your personal information with third-party marketers or advertisers
3. Data Retention
- Order records and associated account information are retained securely in our database for as long as necessary to provide our services and fulfill legal obligations
- Transaction history is maintained for dispute resolution, fraud prevention, and compliance with applicable regulations
- Wallet balance and transaction history are retained as long as your account is active
- We do not retain sensitive payment credentials. All payment data is handled exclusively by our payment providers in accordance with their respective security standards
4. Third-Party Services
- KuyHub integrates with trusted third-party services to operate our platform:
- —Midtrans: Processes QRIS, e-wallet, bank transfer, and convenience store payments. Subject to Midtrans's privacy policy and PCI DSS standards
- —Stripe: Processes credit/debit card and international payments. Subject to Stripe's privacy policy and PCI DSS standards
- —PayPal: Processes PayPal account payments. Subject to PayPal's privacy policy
- —NowPayments: Processes cryptocurrency payments. Subject to NowPayments' privacy policy
- —Roblox API: Used to verify usernames, process group payouts, and retrieve asset information. Subject to Roblox's privacy policy
- —Resend: Used to send transactional emails (order confirmations, notifications). Only your email address and order details are shared
- —Cloudflare R2: Used for secure file storage (chat images). Files are stored with randomized keys
- —Sentry: Used for error monitoring and application performance. May receive anonymized technical data
- —PostHog: Used for product analytics. Collects anonymized usage data to help improve our platform
- We only share the minimum data necessary for each service to perform its function
5. Cookies & Sessions
- KuyHub uses session cookies to keep you logged in after authentication. These cookies are essential for the platform to function and are not used for tracking
- We use browser localStorage to save your language preferences and UI settings. This data remains on your device and is never transmitted to our servers
- We do not use third-party advertising cookies or tracking pixels
6. Your Rights
- You have the following rights regarding your personal data:
- —Right to access: Request a copy of the personal information we hold about you
- —Right to rectification: Request correction of any inaccurate or incomplete data
- —Right to erasure: Request deletion of your personal data, subject to our legal retention requirements
- —Right to object: Object to the processing of your data for specific purposes
- To exercise any of these rights, please contact our support team. We will respond within a reasonable timeframe
7. Data Security
- We implement industry-standard security measures to protect your personal information, including:
- —HTTPS encryption for all data transmitted between your browser and our servers
- —Webhook signature verification using HMAC and timing-safe comparison to prevent tampering
- —Access controls that restrict data access to authorized personnel only
- —Rate limiting on sensitive operations to prevent abuse
- —Input validation and sanitization on all user-submitted data
- While we take every reasonable precaution to safeguard your data, no method of transmission over the internet is 100% secure. We are committed to protecting your information to the best of our ability
8. Changes to This Policy
- We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements
- When we make significant changes, we will update the "Last updated" date at the top of this page and notify you through our platform or Discord
- We encourage you to review this policy periodically to stay informed about how we protect your data
9. Contact Us
- If you have questions or concerns about this Privacy Policy, please contact us:
- —Discord — Open a support ticket in the official KuyHub server
- —Email — Send your inquiry to our support email listed on the website
- We aim to respond within 24 hours