Privacy Policy

QALITH respects your privacy. This document explains what data we collect, what we use it for, and what your rights are.

1. Who we are

Qalith is a development studio based in Santiago, Chile, and is the party responsible for the personal data described here. For anything in this policy, write to contact@qalith.com.

2. Data we collect

• Account and billing: your customer account, order history, and payment details live entirely in Paymenter, our billing platform — the site itself has no login of its own.
• Payment: card and payment processing is handled by Paymenter's gateways (currently PayPal, and a direct bank transfer option). We do NOT store card numbers. We only keep the order reference and a product summary.
• Usage: your browser IP (for rate limiting and fraud prevention) and user-agent string.
• Service: the configuration of the server you purchase (RAM/CPU, game, server IP) and basic usage metrics, held in Pterodactyl.
• Communication: the content of messages you send us through the contact form, email, WhatsApp, or Discord.

3. Cookies

We use only strictly necessary cookies, for anti-bot protection (Cloudflare Turnstile) on our forms. We do not set advertising or tracking cookies. Paymenter, a separate site with its own login, sets its own session cookie when you sign in there.

4. What we use your data for

• Processing payments and delivering the service you purchased.
• Sending you service notifications (receipts, alerts, renewals) via Brevo.
• Technical support when you request it.
• Improving our services (anonymous aggregate statistics).
• Complying with Chilean legal obligations (Law 19.628 and SII tax regulations).

5. Third parties we share data with

• Paymenter: your account, orders, and payments — with its own privacy policy.
• Pterodactyl: the game server administration panel. Hosted by us in the United States.
• Supabase (PostgreSQL): stores contact-form leads and anti-abuse rate-limit data, on our own infrastructure.
• Brevo (Sendinblue): sends transactional emails. Servers in the EU.
• Cloudflare: CDN and DDoS/bot protection.

We do not sell your data. We do not share it with third parties for advertising.

6. Your rights

Under Law 19.628 (Chile) and GDPR (if it applies to you), you may:

• Access the data we hold about you.
• Request correction or deletion.
• Request portability (an exportable copy).
• Withdraw your consent at any time (we delete your account in Paymenter).

To exercise any of these rights: contact@qalith.com.

7. Retention

We keep your data while your account is active, and up to 12 months after closing it (for tax record-keeping requirements). Encrypted backups are kept for 30 days.

8. Security

We use HTTPS across the site, encrypted connections to our databases, and secrets kept in environment variables rather than in code. We never access your Pterodactyl servers except for support, and only when you explicitly authorize it.

9. Minors

We do not offer services to anyone under 18. If you are a minor, do not purchase without parental authorization.

10. Changes

Material changes are communicated by email 14 days in advance.