Privacy Policy

1. Overview & Commitment to Privacy

GriffinsScript ("we", "us", or "our") respects the privacy of our platform customers, tenant administrators, and end-users. This Privacy Policy explains how personal data is collected, used, disclosed, and safeguarded when you visit our website at grifinsgigs.online, manage platforms via our SaaS portal, or access any provisioned tenant service.

2. Information We Collect

We collect information in the following operational categories:

• Customer Account Information: Email address, username, full name, company name (optional), cryptographic password hash, and IP address recorded at the time of registration.
• Tenant Platform Configuration: Chosen brand names, custom domain addresses, logo/favicon image references, theme choices, and support contact emails.
• Billing & Transaction Identifiers: Subscription plan ID, order reference numbers (e.g. GS-ORD-...), payment status, and gateway confirmation tokens. We never store private cryptocurrency keys or bank account details.
• Security & Anti-Fraud Logs: IP address, browser user-agent, session timestamps, and authentication failure logs used strictly to mitigate bot attacks and unauthorized intrusions.

3. Multi-Tenant Architectural Isolation

GriffinsScript is designed with multi-tenant data partitioning. Each provisioned rewards platform operates with strict logical separation:

• End-user accounts, faucet claim records, withdrawal queues, and currency configurations are strictly scoped to the tenant's identifier (tenant_id).
• One tenant cannot query, access, or view data belonging to another tenant.
• Our central SaaS super administrators access records exclusively for platform health monitoring, fraud mitigation, and support fulfillment.

4. How We Use Collected Data

Collected data is processed for legitimate business and operational purposes, including to:

• Deploy, configure, and maintain your tenant rewards platform and domain routing.
• Issue and verify cryptographic software license keys (GS-TIER-...).
• Process and verify cryptocurrency payments via merchant callbacks.
• Provide customer support via our centralized ticket and live helpdesk system.
• Detect and prevent fraudulent traffic, DDoS attacks, and abusive botnet activity.

5. Cookies, Session Tracking & Local Storage

We utilize essential HTTP cookies and session tokens strictly necessary for secure platform operation:

• Authentication Cookies: Secure session tokens (e.g. ci_session) to maintain logged-in state across the dashboard.
• Security Tokens (CSRF): Cryptographic tokens to defend against Cross-Site Request Forgery attacks.

We do not use invasive third-party tracking pixels or behavioral cross-site advertising cookies.

6. Payment & Gateway Information

Payments for upgraded subscription plans are processed through external cryptocurrency gateways (such as FaucetPay Merchant API and Payeer). When initiating a transaction, the payment processor receives transaction order references and amounts. All on-chain transactions are publicly visible on their respective distributed ledgers.

7. Third-Party Integrations & Offerwalls

Tenant platforms may configure external offerwalls (such as VeloxOffer, CPALead, Monlix, Wannads) and micro-wallets. When a tenant end-user interacts with an external offerwall, the third-party provider's privacy policy governs the interaction. We advise all tenant operators to post clear end-user disclosures regarding third-party offer networks.

8. Security & Encryption Standards

We implement comprehensive technical and organizational safeguards to protect your data:

• All web traffic is transmitted across encrypted Transport Layer Security (HTTPS / TLS).
• Customer and administrator passwords are encrypted using high-cost one-way Bcrypt hashing with salted cost factors.
• Database queries are parameterized and escaped through Active Record queries to prevent SQL injection.
• Sensitive system actions and configuration updates are preserved in immutable audit logs.

9. Data Subject Rights (GDPR & CCPA Compliance)

Depending on your location, you hold statutory rights regarding your personal information:

• Right of Access: You can review your account data directly from your customer profile.
• Right to Rectification: You may edit and update your name, email, and company details at any time.
• Right to Erasure ("Right to Be Forgotten"): You may request complete account deletion.
• Right to Restrict Processing: You may cancel subscriptions or deactivate provisioned sites at will.

10. Data Retention & Account Deletion

We retain account data for as long as your account remains active. Customers can request immediate account deactivation and data purging directly via the Customer Settings > Danger Zone panel.

Upon verified deletion, tenant databases, DNS configurations, API secrets, and profile identifiers are permanently erased from active production tables within 30 days, retaining only legally mandated financial accounting records.

11. Children's Online Privacy

Our multi-tenant SaaS services are exclusively designed for adult platform operators (18 years of age or older). We do not knowingly solicit or collect information from individuals under the age of 18. If we learn that personal data of a minor has been collected, we will take prompt steps to delete the record.

12. Data Protection Officer & Privacy Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection desk: