What we collect, why we have it, who else sees it, and how to get it changed or deleted.
Enviglo is run by Enviglo Labs Pty Ltd, a company registered in Australia. This policy explains what we do with personal information and applies to enviglo.com and everything on it.
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If anything here is unclear, email support@enviglo.com and ask.
We try to hold as little as we can get away with. In practice that is:
We never see your card number. Payments go through Stripe, which takes the card details itself and tells us only what we need to show you and keep our books: the card’s brand, its last four digits, the country it was issued in, and the receipt. We do not use advertising trackers or sell anything about you to anyone.
Enviglo replaces myPod, and we imported myPod's records so that creators kept their stores and buyers kept what they had paid for. If you used myPod, an Enviglo account may exist for you that you never created yourself. It holds what myPod held: your Discord and Roblox IDs, the link between them, your stores and products, and your purchase history.
Those accounts hold no email address of yours and cannot be signed into until you sign in with the Discord or Roblox account they were built from. If you would rather it did not exist, email us and we will delete it.
A store can also give you a product before you have joined Enviglo, naming you by your Roblox ID, Discord ID or email address. We keep that product for you, with the ID or address the store gave, until you sign in with that Roblox or Discord account or that address, verified, and it becomes yours. The store never sees the email address back. If you would rather we did not keep it, email us and we will delete it.
A store moving from Parcel can bring its customers with it. When the store's owner asks, our import bot joins their Discord server and reads the purchase and give messages Parcel's bot posted there. It keeps only what those messages say about each purchase: the product's name, the buyer's Roblox and Discord usernames and IDs, how and when it was bought. It reads no one else's messages beyond passing over them, and keeps none of them. Using the store's Parcel hub ID, or the hub's secret key if the owner lets us (kept encrypted, only used to read what customers own, and deleted when the import ends), we then ask Parcel whether each buyer still owns what they bought, and give the products they do own to them on Enviglo. The bot leaves the server when the owner finishes, and the store can undo the import. To find customers those messages missed, we may also check with Parcel whether members of the store's Roblox group own the store's products there. For that we send Parcel only the Roblox account's ID, and nothing is kept or shown unless Parcel says you own something from that store. If you would rather not have been included, message the store or email us and we will remove it.
A store moving from Vault can bring its customers with it too. With an API key the store's owner gives us for their vault, we read the vault's products and purchase history: for each purchase, the product, the buyer's Roblox and Discord usernames and IDs, and when it was bought. We then ask Vault which of the store's products each buyer owns today, by their Roblox account (or Discord account, when that's all there is), and give the products they do own to them on Enviglo. The key is kept encrypted, only used to read, and deleted when the import ends, and the store can undo the import. To find customers the purchase history doesn't have, we may also ask Vault about members of the store's Roblox group. For that we send Vault only the Roblox account's ID, and nothing is kept or shown unless Vault says you own something from that store. If you would rather not have been included, message the store or email us and we will remove it.
We use other companies to run Enviglo. They only get what they need to do their part:
/ask, the account details it looks up to answer: your username, whether your Roblox account is linked, and your licenses. For a product sent for review, it gets the product’s page, pictures and scripts and a summary of its store’s record on Enviglo, so our team knows where to look; people make the decision. Never your email or payment details (privacy policy).Some of these store data outside Australia, mainly in the United States. By using Enviglo you agree to that. We take reasonable steps to ensure they handle it appropriately, but overseas providers are not bound by the Australian Privacy Principles in the way we are.
We will also disclose information where the law requires it, or where it is necessary to investigate a serious safety or fraud problem.
Some things are public by design: your profile and username, stores you own, products you publish, reviews you write and posts in the community. Your email address is never public. Sales counts, followers and the store owner can each be hidden from a store's settings.
Assume anything you post publicly can be seen, copied and archived by anyone.
Roblox has a lot of young users, and some of them are creators. If you are under 18, please use Enviglo with the involvement of a parent or guardian, and do not give us more than you need to.
We do not knowingly build profiles of children or use anyone's information for targeted advertising. If you are a parent or guardian and want an account and its data removed, email support@enviglo.com and we will do it.
Everything travels over HTTPS. An Enviglo password is stored only as a salted hash that can't be turned back into the password, and your Discord and Roblox passwords never reach us. API keys are stored hashed, so nobody, including us, can read them back. Access tokens for connected services are encrypted at rest. Files you buy are served through short-lived, single-use links rather than public URLs.
No system is perfectly secure. If we ever have a breach likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
Most of what we hold is editable from your settings or your store's dashboard. You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Email support@enviglo.com and we will respond within 30 days.
Deleting an account removes your profile and personal information. Some records survive in a form that is no longer about you: the fact a sale happened, for example, because the creator on the other side of it has their own records and obligations.
If you think we have mishandled your information, tell us first and we will try to sort it out. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner.
If we change this, the date at the top changes with it. If a change materially affects you we will tell you in the app or by email rather than quietly editing the page.