Legal

Privacy Policy

What Baobab AC collects from your account and from your RedM server, what it is used for, and how that data is protected.

Last Updated: August 13, 20267 sections

Information We Collect

We collect information you provide directly to us, such as your Discord profile information (ID, username, avatar) when you register via OAuth2, as well as your email address if provided for transactional purposes.

Application Data & Telemetry

To provide the core functionality of Baobab AC, we collect server-side telemetry from your RedM server: in-game events, player connections, detected anomalies and script execution patterns. For the players on your server, that includes the identifiers their game client presents on connection - Steam hex, Rockstar licence, hardware tokens (HWID) and, where your framework exposes it, the linked Discord account - because those are exactly what makes a ban hold and what ties a banned player to the account he comes back with. We collect nothing else about them: no real name, no postal address, no payment data, and no game images. What the black box records is sampled telemetry, never video.

Use of Information

We use the information we collect to operate, maintain, and improve our services; to communicate with you regarding your account or our service; and to enforce our Terms of Service. In-game identifiers and cheating anomalies may be shared securely across the Baobab AC ecosystem to proactively protect other communities using our service from known malicious actors.

How Long We Keep It

Detailed event history is kept for 90 days on the Starter plan and without a time limit on the Pro and Network plans, exactly as stated on the pricing page. Bans, sanctions and the alt / HWID links that support them are kept for as long as your account exists on the platform: an anticheat that forgets them stops catching ban evasion, which is the reason it is bought. A public black box share link expires on its own and can be revoked at any time from the panel. You can ask us to delete a specific record, and we will unless keeping it is what the sanction rests on.

Service Providers

Two third parties process data on our behalf, and only these two. Discord handles authentication: signing in gives us the profile fields listed in section 1, and it is also the channel that delivers alerts and support messages when you enable them. Stripe handles payment: card details are entered on Stripe pages and never reach our servers, which only receive the identifier of the completed payment and the plan it bought. Nothing is sold, and nothing is used for advertising.

Security

We implement industry-standard security measures to protect your information and the data transmitted from your servers to our backend. However, no internet transmission or electronic storage is 100% secure, so we cannot guarantee absolute security.

Contact Us

If you have any questions about this Privacy Policy, please contact us via our official Discord server.

The other documents

These three documents are read together: each one covers a different part of the same subscription.

A question about this document?

If anything here is unclear, ask us before subscribing rather than after.

Contact us