Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Feedback in Games, operated by Christos Sinopoulos SP under the Feedback in Games and Octappush names (“we”, “us” or “our”), handles personal data across our website, dashboard, APIs and in-game SDK (the “Service”). Contact us at support@octappush.com or at 21st Navarchou Kountouriotou, 54625 Thessaloniki, Greece.

2. Our role

We act as a controller for account, team, billing, support, security and business-relationship data that we determine how to use.

For player identifiers, traits, events and survey responses collected through a Customer’s game, the Customer normally acts as controller and we act as its processor. The Customer decides why that data is collected and is responsible for its player-facing notices and legal basis. Players should generally contact the game operator first about that data. Our processing obligations are set out in the Data Processing Addendum.

3. Data we collect

• Account and team data: name, email, username, company, country, role, team membership and authentication records.
• Customer content: games, surveys, questions, targeting rules, translations, uploaded images, reward settings and related configuration.
• Billing data: Stripe customer and subscription identifiers, package, status, invoices, payment outcomes, billing address and tax information. Complete payment-card numbers are handled by Stripe and are not stored by us.
• Player and SDK data: a Customer-supplied player identifier, game and application version, SDK version, language, survey responses, timestamps, configured traits or events, debug status, and reward claim or opening status. The identifier may be pseudonymous to us but may be linkable by the Customer.
• Technical and usage data: session IP address, user agent, security logs, page views and deliberately recorded product actions. Dashboard text entry and player survey content are not intentionally captured by analytics autocapture.
• Communications: support requests, team invitations, subscription notices and other messages sent to or from us.

4. How we obtain data

We receive data directly from account users, team administrators and Customers; automatically when the dashboard, API or SDK is used; and from service providers such as Stripe when they report billing events. Player data is supplied by or collected on the instructions of the Customer operating the relevant game.

5. Why we use data and our legal bases

• Contract: to provide accounts, surveys, analytics, subscriptions, support and rewards requested by the Customer.
• Legitimate interests: to secure, monitor, improve and understand the Service; prevent abuse; and communicate about the business relationship, balanced against individual rights.
• Legal obligations: for accounting, tax, fraud, regulatory and lawful-request requirements.
• Consent: where required for optional communications, cookies or another specific purpose. Consent can be withdrawn for future processing.
• Customer instructions: when we process player data as a processor, the Customer determines and documents the applicable legal basis.

6. Sharing and service providers

We share data only as needed with:

• AWS and infrastructure providers for hosting and storage;
• Stripe for checkout, subscriptions, invoices and tax information;
• PostHog for limited product analytics;
• DeepL when a Customer requests automatic translation;
• reward providers connected by a Customer when a player claims an provider reward;
• email providers for transactional communications;
• professional advisers, authorities or another party where required by law, to protect rights and security, or as part of a corporate transaction subject to appropriate safeguards.

We do not sell personal data.

7. International transfers

Some providers may process data outside Greece or the European Economic Area. Where required, we use a lawful transfer mechanism such as an adequacy decision or standard contractual clauses and apply supplementary safeguards appropriate to the transfer.

8. Retention

We keep account and Customer Data while the account or Customer relationship is active and for a reasonable period afterward to allow export, recovery, dispute handling and secure deletion. Billing and transaction records are kept for periods required by accounting, tax and fraud laws. Security logs and backups are retained only as long as reasonably needed for their purpose and are deleted or overwritten on scheduled cycles.

When we process player data for a Customer, retention follows the Customer’s instructions and the Data Processing Addendum, unless law requires continued storage.

9. Security

We use technical and organisational safeguards designed to protect personal data, including access controls, authentication, transport encryption, secret management, backups and monitoring. No system is completely secure, so Customers must also protect credentials and configure access appropriately.

10. Your rights

Depending on applicable law, individuals may have rights to be informed, access, correct, erase, restrict or port their data, object to processing, withdraw consent and request human review of certain automated decisions. These rights can be subject to legal conditions and exceptions.

Contact support@octappush.com. We may need to verify identity. For player data controlled by a game operator, we may direct the request to that Customer or assist it in responding. You may also complain to the Hellenic Data Protection Authority at dpa.gror another competent supervisory authority.

11. Cookies and analytics

The dashboard uses cookies required for authentication, security and preferences. Limited product analytics runs without persistent analytics cookies and records page navigation and explicitly defined product actions. We do not use analytics autocapture or session recording. Browser settings can control cookies, but disabling essential cookies prevents account access.

12. Children

Account access is for adults acting in a business or professional capacity. Customers integrating the SDK are responsible for assessing their audience and complying with laws applying to children, including obtaining parental consent where required. Customers must not send us children’s personal data without a lawful basis and appropriate instructions.

13. Changes and contact

We may update this policy to reflect product, provider or legal changes. Material updates will be announced through the Service or by email, and the effective date above will be revised.

Privacy questions and requests may be sent to support@octappush.com.