Privacy Policy
How we protect and handle your personal information
Last Updated: August 30, 2025
Introduction
SLMA (Second Life Marketplace Analytics) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, protect, and share information when you use our analytics platform for Second Life marketplace merchants.
We only collect data necessary to provide our analytics services and never sell your information to third parties.
Information We Collect
Account Information
- Avatar Name: Your Second Life avatar name for identification
- Avatar UUID: Your unique Second Life identifier
- Password: Securely hashed using Argon2 encryption
- Subscription Status: Your current plan and expiration date
- Login Tokens: One-time codes for secure account setup
Business Analytics Data
- Sales Transactions: Revenue, dates, product names, and transaction IDs
- Customer Information: Buyer names and purchase patterns (Second Life public data)
- Product Data: Item names, categories, and performance metrics
- Historical Data: CSV uploads of past marketplace performance
- ANS Webhook Data: Real-time transaction notifications from Second Life
Technical Information
- Session Data: Login sessions and activity timestamps
- User Preferences: Dashboard settings and filter preferences
- System Logs: Error logs and performance monitoring data
- Cookie Data: Essential cookies for authentication and preferences
How We Use Your Information
We use the information we collect for the following purposes:
Service Provision
Generate analytics dashboards, process marketplace data, and provide business intelligence insights
Account Management
Authenticate users, manage subscriptions, and provide customer support
Security & Compliance
Protect against fraud, ensure platform security, and comply with legal requirements
Platform Improvement
Analyze usage patterns to improve our service and develop new features
Information Sharing and Disclosure
We DO NOT Sell Your Data
We never sell, rent, or trade your personal information or business data to third parties for marketing purposes.
We may share information only in these limited circumstances:
- With Your Consent: When you explicitly authorize us to share information
- Service Providers: Trusted third parties who help us operate our platform (hosting, payment processing)
- Legal Requirements: When required by law, court order, or government regulation
- Business Transfer: In the event of a merger, acquisition, or sale of assets
- Security Protection: To protect against fraud, abuse, or threats to safety
Data Security and Protection
Security Measures
- Encryption: All data transmitted over HTTPS with TLS encryption
- Password Security: Argon2 hashing with salt for password protection
- Database Security: Encrypted PostgreSQL database with access controls
- Session Management: Secure, signed cookies with automatic expiration
- Webhook Verification: HMAC-SHA256 signatures for data integrity
- Rate Limiting: Protection against abuse and unauthorized access
Data Retention
Retention Periods
- Account Data: Retained while your account is active
- Business Analytics Data: Retained for the duration of your subscription
- Session Data: Automatically expires after 30 days of inactivity
- Support Tickets: Retained for 3 years after resolution
- System Logs: Retained for 90 days for security and debugging
Your Privacy Rights
You have the following rights regarding your personal information:
Contact Us About Privacy
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
contact form for privacy-related questions.
Please use ourInternational Data Transfers
Our services are hosted in secure data centers with appropriate safeguards for international data transfers. We ensure that any cross-border data transfers comply with applicable privacy laws and include appropriate contractual protections.
Children's Privacy
Our service is intended for adults who operate Second Life marketplace businesses. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Displaying a prominent notice on our website
- Sending you an email notification if you have an active account
- Updating the "Last Updated" date at the top of this policy
Your continued use of our service after any changes indicates your acceptance of the updated Privacy Policy.