Privacy Policy

This Privacy Policy describes how HoneyPot ("HoneyPot," "we," "our," or "us") collects, uses, discloses, and protects information about you when you use the Services available at honeypot.com.

We take the protection of your information seriously. All user data we handle is encrypted in transit (TLS) and at rest using industry-standard cryptography. Our infrastructure runs on platforms with SOC 2-aligned controls and GDPR-aligned data-processing safeguards.

By using the Services you agree to the practices described here. If you don't agree, please don't use the Services. Undefined capitalized terms have the meaning given in our Terms of Service.

1. Information We Collect

Information you provide directly:

• Email address and username
• Payment information (handled by our payment processors described under "Vendors" below; we don't store card numbers ourselves)
• Honeys you create (name, appearance descriptors, personality prompts, gallery items)
• Chat messages and prompts you send to Honeys
• Communications you send to support

Information we collect automatically. When you use the Services we collect technical signals: browser type, operating system, IP address, device identifiers, access timestamps, pages viewed, referring / exit pages, and feature usage. We use cookies, web beacons, and similar technologies for session management, analytics, and (where lawful) abuse prevention.

Information from third parties. If you sign in via a third-party provider (Google, Discord, or Telegram), we receive the basic identity information that provider returns. (You can also sign in with a one-time code sent to your email; we do not use passwords.) We may also receive information about you from referrers (e.g. an affiliate who linked you to us) or from fraud-prevention vendors.

2. How We Use Information

We use your information to:

• Provide, operate, and personalize the Services
• Process payments and grant credits
• Train, test, and improve our AI models and content-moderation systems
• Communicate with you about your account and the Services
• Detect and prevent fraud, abuse, and violations of our Terms
• Comply with legal obligations and enforce our agreements
• Conduct internal research and analytics

We may combine information from different sources and may aggregate or de-identify data for any purpose.

3. When We Disclose Information

We disclose information in these circumstances:

• Affiliates: entities under common control with HoneyPot, for purposes consistent with this Policy
• Vendors and processors: payment processors (Telegram Stars, MixPay, and any future payment providers), hosting and storage providers, analytics platforms, AI model providers, customer-support tooling, and similar operational vendors who need access to perform their function
• Safety and protection: when we believe in good faith that disclosure is necessary to protect HoneyPot, our users, or the public, or to enforce these Terms
• Legal requirements: to comply with applicable law, valid legal process, or government requests
• Business transfers: in connection with a merger, financing, acquisition, or sale of assets
• With your consent: for any purpose you direct or consent to

We don't sell your personal information for money.

4. Cookies and Analytics

We use cookies and similar technologies for session management, security, preferences, and analytics. You can control cookies through your browser settings; disabling them may break some functionality.

We don't currently run third-party advertising. If that changes we'll update this Policy and provide an opt-out mechanism.

5. Your Choices and Rights

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you
• Restrict or object to certain processing
• Receive a portable copy of your data
• Withdraw consent for processing that relies on consent
• Lodge a complaint with a data-protection authority

You can deactivate your account from Settings. To exercise other rights, write to support@honeypot.com from the email tied to your account so we can verify identity. We respond within 30 days; complex requests may take longer (we'll keep you updated).

You can unsubscribe from marketing emails via the link in any such email. We may still send administrative notices about your account.

6. Regional Disclosures

EEA / UK residents. HoneyPot is the data controller for your personal data under GDPR / UK GDPR. Our legal bases for processing are: (a) contractual necessity (to provide the Services); (b) legitimate interests (security, fraud prevention, product improvement); (c) consent (where applicable); and (d) legal obligation. You may lodge a complaint with your local supervisory authority, though we encourage you to contact us first.

California residents. Under the CCPA / CPRA you have rights to know, access, delete, correct, and opt out of "sale" / "sharing" of personal information. The categories of personal information we collect map to identifiers, financial information, internet activity, general geolocation, audio / visual information you submit, and inferences drawn from the above. We don't "sell" personal information in the traditional sense; we may "share" pseudonymous identifiers with analytics partners. You can opt out at support@honeypot.com.

We don't respond to browser-initiated Do Not Track signals, as the standard isn't yet settled.

7. Children's Privacy

The Services are not intended for anyone under 18. We don't knowingly collect information from minors. If we learn that we have collected personal information from a minor, we'll close the account and delete the data. See the Underage Policy for our full procedure.

8. Security

We use technical, administrative, and physical safeguards to protect your information. No internet transmission is ever 100% secure, so we can't guarantee absolute security. If we become aware of a breach affecting your information, we'll notify you and the relevant authorities as required by law.

9. Data Retention

We keep your information for as long as it's needed to provide the Services and comply with our legal obligations. When you delete your account we delete most associated data within 30 days, retaining only what's needed for compliance, dispute resolution, or fraud prevention.

Community Honeys. If a Honey you create and publish to the community library reaches significant engagement, we may preserve its public configuration and gallery (without the original creator's account data) so the experience for other users isn't disrupted. To avoid this entirely, avoid publishing Honeys to the community.

10. International Data Transfers

The Services are global. Your information may be stored and processed in countries outside your country of residence, including the United States and other jurisdictions whose data-protection laws differ from yours. Where we transfer EEA / UK personal data to non-adequate jurisdictions, we rely on Standard Contractual Clauses and equivalent safeguards.

11. Third-Party Links

The Services may contain links to third-party websites and services. Those sites have their own privacy practices that we don't control. Read their privacy notices before sharing information with them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last Modified" date at the top and, for material changes, provide notice through the Services or via email.

Contact

For any privacy question or to exercise your rights, write to support@honeypot.com.