Privacy Policy

What this policy covers

This policy explains how Sessions by easyPOS collects, uses, stores, and shares information when you use the Sessions website, dashboard, APIs, and in-game board integration.

Information we collect

• Account information: provider identifiers, usernames, display names, profile information, and encrypted OAuth tokens needed to connect Roblox or Discord.
• Workspace information: Roblox group details, roles, selected group members, schedules, templates, assignments, attendance, server presence, and audit records.
• Billing information: Stripe customer and subscription identifiers, plan status, workspace quantity, trial state, and payment events. Stripe handles card payment details; Sessions does not store full card numbers.
• Technical information: session cookies, request IDs, security logs, rate-limit records, device or browser details made available by the platform, and error or operational data.

How we use information

We use information to:

• Authenticate accounts and enforce workspace permissions.
• Provide scheduling, member, attendance, quota, and board features.
• Process subscriptions, trials, quantities, and billing events.
• Send configured Discord announcements and operational notifications.
• Prevent abuse, secure the service, troubleshoot failures, and improve reliability.
• Meet legal, accounting, and fraud-prevention obligations.

How information is shared

We share information only as needed to operate Sessions. This includes sharing relevant data with Roblox and Discord when you connect those providers, Stripe for billing, infrastructure and database providers for hosting, and authorities when legally required. Workspace owners and authorized workspace members may also see workspace content according to the permissions configured by the workspace owner.

Cookies and sessions

Sessions uses an httpOnly authentication cookie to keep you signed in and may use local storage for workspace and display preferences. We also use server-side session records, security controls, and request logs to protect accounts and operate the service.

Retention and deletion

We retain information for as long as needed to provide the service, maintain security, meet legal or billing obligations, and resolve disputes. Workspace owners can request workspace deletion through the available account controls. Some billing, audit, security, and legally required records may remain for a limited period after deletion.

Security

We use access controls, encrypted connections where supported, encrypted provider token storage, rate limiting, audit logging, and operational monitoring. No online service can guarantee absolute security, so protect your account credentials and report suspected unauthorized activity promptly.

Third-party services

Roblox, Discord, Stripe, hosting providers, and other integrations process information under their own privacy policies. Sessions is not responsible for the privacy practices of those independent services.

Your choices

You can disconnect provider accounts where the product supports it, manage workspace access through workspace settings, cancel billing through billing settings, and request access or deletion of personal information through the Sessions support contact.

Children

Sessions is not directed to children who cannot lawfully use the connected Roblox or Discord services. Do not use Sessions if you are not permitted to accept its Terms or the terms of the services you connect.

Policy updates and contact

We may update this policy when the service or legal requirements change. We will post the updated policy here with a new effective date. Privacy questions can be sent through the support contact provided by easyPOS or the Sessions website.