FixBuff Legal
FixBuff Privacy Policy
FixBuff (operated by Junyun Limited) respects your privacy. This Policy explains how we collect, use, disclose, store, and protect personal data when you use the FixBuff Windows application, fixbuff.com and its localized versions, account services, diagnostic and repair tools, game‑specific utilities, customer support, updates, and paid membership features (collectively, the “Services”).
We process personal data only when necessary to provide features you request, operate and secure the Services, comply with law, or for another purpose described in this Policy. Where processing is optional or based on consent, you may refuse or withdraw consent; the corresponding feature may then become unavailable.
1. Data Controller
The data controller for the processing described in this Policy is Junyun Limited, with registered address at 19H MAXGRAND PLAZA, NO. 3 TAI YAU STREET, SAN PO KONG, KOWLOON, HONG KONG (“FixBuff,” “we,” “us,” or “our”).
This Policy does not cover third‑party websites, games, payment services, or identity providers that publish their own privacy notices.
2. Personal Data We Collect
We collect the following categories of personal data:
Account and identity data – When you sign in through Google, Discord, or VK, we receive a provider identifier and the profile information you authorise the provider to share, which may include display name, avatar, email address, and region. We do not receive or store your passwords for those providers.
Device and session data – We process a device identifier used exclusively to enforce the one‑active‑device rule (as described in the Terms of Service), Windows and client version, device model or hardware category, system language and region, timestamps, session and token status, and security or error information.
Diagnostic and repair data – FixBuff inspects operating‑system version, supported runtime libraries, DirectX and DLL components, selected registry or configuration values, installed game names or identifiers, and the results of detection and repair actions. Core scans run locally on your device. We do not upload complete file paths, unrelated files, personal documents, or the contents of registry keys. Only game names/IDs and selected diagnostic logs are transmitted when strictly necessary to match a repair rule, provide support, or operate a requested cloud feature.
Usage and analytics data – We collect product events (installation, launch, consent, scan, repair, game selection, tool use, login, purchase, membership view, settings, update, uninstall‑retention interactions) with product_line=fixbuff, user‑level status, event timestamps, success/failure status, and relevant feature or game identifiers. We derive an ISO country code from the request IP address for analytics; we do not include the raw IP address in the analytics payload. Network infrastructure processes IP addresses transiently only to deliver and secure the Services.
Purchase and subscription data – We receive order identifier, product/plan, country, currency, price, discount, transaction/refund status, payment‑method type, subscription status, renewal/cancellation dates, entitlement period, and fraud/dispute indicators. Stripe and financial institutions process full payment credentials; FixBuff does not receive or store full card numbers or security codes.
Support and feedback data – If you submit a request, we collect the message, contact details, account and order references, screenshots, attachments, and diagnostic logs you choose to provide, plus our communications with you. Please remove unnecessary sensitive information before submission.
Website and cookie data – Our website processes IP address, browser/device type, pages viewed, referrer, locale, cookie preferences, and security logs. Strictly necessary cookies support security, routing, locale, and preferences. Non‑essential analytics or advertising cookies, if introduced, are described in a cookie notice and used only with consent where required.
Information from others – We may receive information from identity providers, Stripe and payment methods, fraud‑prevention providers, distributors, support vendors, and public authorities, limited to what is necessary for the purposes described below.
3. Why We Use Personal Data
We process personal data for the following purposes and on the following legal bases:
To provide the Services (authentication, entitlement enforcement, repairs, purchases, subscription management, updates, support) – this processing is necessary for the performance of our contract with you.
To secure accounts, prevent fraud and abuse, maintain service reliability, analyse feature performance, improve repair coverage, defend legal claims, and administer our business – this processing is based on our legitimate interests, which we have balanced against your rights and expectations.
For optional permissions, non‑essential cookies, optional diagnostic uploads, and marketing communications – we rely on your consent. You may withdraw consent at any time.
To comply with tax, accounting, consumer protection, payment compliance, sanctions, fraud prevention, security incident response, and valid legal requests – this processing is necessary for compliance with our legal obligations.
To protect life or physical safety, or to perform a task recognised by law – this is based on vital or public interest.
Note: Nothing in this Policy limits any consumer right that cannot be lawfully restricted in your country or state, as reflected in our Terms of Service.
4. Local Processing and Diagnostic Boundaries
FixBuff is designed so that supported system and game scans are performed on your device. The client compares local state against repair rules and applies authorised changes without sending the underlying files to us, except as explicitly described in this Policy.
Before any diagnostic log, screenshot, crash dump, file, or detailed system configuration is uploaded, the product identifies what will be sent, why it is needed, and whether the upload is optional. Logs may contain usernames, file paths, process names, or other personal data; we minimise and redact such data where feasible.
We do not scan personal documents, private messages, browsing history, or unrelated applications. If a future FixBuff feature requires materially different access, we will update this Policy and provide a just‑in‑time notice or consent control where required.
5. How We Disclose Personal Data
We disclose personal data only in the following circumstances:
Identity providers – Google, Discord, and VK may receive information about the sign‑in request and your interaction with their service, under their own privacy notices.
Payments – Stripe and participating banks, card networks, wallets, or local payment methods process transaction, device, and fraud‑prevention data. Stripe acts as our processor for certain merchant‑directed processing and as an independent controller for activities it determines.
Service providers – We may use vendors for account infrastructure, hosting, content delivery, security, analytics, customer support, email, localization, and software distribution. They process data only for contracted purposes, subject to confidentiality and data‑protection obligations.
Affiliates – We may share data within our corporate group where necessary to operate, support, secure, and improve FixBuff, using access controls and purpose limitations.
Legal and safety disclosures – We may disclose information to comply with law or valid legal process, protect users and the public, investigate fraud or security incidents, enforce agreements, or establish/defend legal claims.
Business transfers – In connection with a merger, financing, acquisition, reorganisation, insolvency, or sale of assets, subject to confidentiality and applicable notice requirements.
We do not sell personal data and do not share it for cross‑context behavioural advertising. If this changes, we will update this Policy and provide legally required opt‑out mechanisms, including recognition of applicable preference signals.
Aggregated and de‑identified data may be used and disclosed; we do not attempt to re‑identify it except to test our de‑identification methods or as permitted by law.
6. Third‑Party Services
Current integrations include:
Google Sign‑In – https://policies.google.com/privacy
Discord – https://discord.com/privacy
Stripe – https://stripe.com/privacy
Their practices, retention, and international transfers are governed by their own notices. We maintain an up‑to‑date vendor list; material new categories are disclosed before or when they begin processing personal data, as required by law.
7. International Data Transfers
Your data may be processed in countries other than where you live, including the United States. Those countries may have different data‑protection laws. Where we transfer personal data from jurisdictions with data protection laws to other countries, we implement appropriate safeguards, including but not limited to standard contractual clauses or other lawful mechanisms. You may request information about applicable safeguards using the contact details below.
8. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy, including providing the Services, maintaining security, resolving disputes, and meeting legal, tax, accounting, and reporting duties.
Account and entitlement records are retained while your account is active and for a limited period after deletion to complete deletion, prevent fraud, or resolve claims.
Purchase and tax records are retained for the period required by applicable financial laws.
Support records are retained while the issue is active and for a limited follow‑up and dispute period.
Analytics and security logs are kept under an approved retention schedule, then deleted, aggregated, or de‑identified.
Backup copies may persist for a limited rolling period and are isolated from ordinary use. When deletion is required, we delete or de‑identify data unless retention is legally required or necessary for legal claims. Specific retention periods are documented in our internal retention schedule.
9. Security
We use reasonable technical and organisational measures appropriate to risk, including encryption in transit, access controls, least‑privilege permissions, logging, secure development, vulnerability management, vendor review, backups, and incident‑response procedures.
No system is completely secure. You are responsible for protecting your third‑party sign‑in account, installing authentic FixBuff updates, and notifying us if you suspect unauthorised activity. If a personal‑data breach occurs, we investigate and notify affected individuals and authorities where required by law.
10. Your Privacy Rights
Depending on the applicable law in your jurisdiction, you may have some or all of the following rights: to access, know, correct, delete, restrict, or object to processing; to receive a portable copy; to withdraw consent; to opt out of sale, targeted advertising, or certain profiling; to appeal a denied request; and to lodge a complaint with your local data‑protection authority.
To exercise a privacy right, request account or personal‑data deletion, or appeal a privacy decision, email support@fixbuff.com. We will respond within the time period required by applicable law. We will verify your identity and authority while minimising additional data. You may use an authorised agent where law allows.
Some rights are not absolute. We may retain data required for security, fraud prevention, legal compliance, payment records, or legal claims, and will explain a denial where required. You may appeal a decision through support@fixbuff.com.
11. Marketing, Cookies, and Choices
Service messages about purchases, security, policy changes, and critical updates are not marketing. Promotional email or other direct marketing is sent only where permitted; you can unsubscribe through the message or your settings.
You can manage optional cookies through the website consent tool where available. Blocking strictly necessary cookies may prevent login, security, locale, or preference features. The website does not activate non‑essential analytics or advertising technologies before consent in regions where prior consent is required.
FixBuff does not currently use personal data for solely automated decisions that produce legal or similarly significant effects. If this changes, we will provide required information and rights.
12. Children
FixBuff is not directed to children under 16, and paid plans are intended for adults or users with valid parental authorisation under local law. We do not knowingly collect personal data from children below the applicable digital‑consent age without legally required parental consent.
If you believe a child provided personal data improperly, contact us. We will investigate and delete or otherwise handle the data as required by law.
13. Changes to This Policy
We may update this Policy as our Services, vendors, or legal obligations change. We will post the updated version and revise the date above. For material changes, we will provide additional notice in the application, website, account, or by email and request consent where law requires it.
If you do not accept a change that requires consent, you may decline the optional processing or stop using the affected feature. Guest features may remain available where technically and legally possible.
14. Contact Us
Data controller: Junyun Limited (Hong Kong CR No. 3067338; BRN 73180916)
Registered address: 19H MAXGRAND PLAZA, NO. 3 TAI YAU STREET, SAN PO KONG, KOWLOON, HONG KONG
Privacy requests: support@fixbuff.com
Website: https://fixbuff.com