What we collect, why we have it, who else sees it, and how to get it changed or deleted.
Enviglo is run by Enviglo Labs Pty Ltd, a company registered in Australia. This policy explains what we do with personal information and applies to enviglo.com and everything on it.
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. If anything here is unclear, email support@enviglo.com and ask.
We try to hold as little as we can get away with. In practice that is:
We never see your card number. Payments go through Stripe, which takes the card details itself and tells us only what we need to show you and keep our books: the card’s brand, its last four digits, the country it was issued in, and the receipt. We do not use advertising trackers or sell anything about you to anyone.
Enviglo replaces myPod, and we imported myPod's records so that creators kept their stores and buyers kept what they had paid for. If you used myPod, an Enviglo account may exist for you that you never created yourself. It holds what myPod held: your Discord and Roblox IDs, the link between them, your stores and products, and your purchase history.
Those accounts have a placeholder email address and cannot be signed into until you sign in with the Discord or Roblox account they were built from. If you would rather it did not exist, email us and we will delete it.
We use other companies to run Enviglo. They only get what they need to do their part:
Some of these store data outside Australia, mainly in the United States. By using Enviglo you agree to that. We take reasonable steps to ensure they handle it appropriately, but overseas providers are not bound by the Australian Privacy Principles in the way we are.
We will also disclose information where the law requires it, or where it is necessary to investigate a serious safety or fraud problem.
Some things are public by design: your profile and username, stores you own, products you publish, reviews you write and posts in the community. Your email address is never public. Sales counts, followers and the store owner can each be hidden from a store's settings.
Assume anything you post publicly can be seen, copied and archived by anyone.
Roblox has a lot of young users, and some of them are creators. If you are under 18, please use Enviglo with the involvement of a parent or guardian, and do not give us more than you need to.
We do not knowingly build profiles of children or use anyone's information for targeted advertising. If you are a parent or guardian and want an account and its data removed, email support@enviglo.com and we will do it.
Everything travels over HTTPS. An Enviglo password is stored only as a salted hash that can't be turned back into the password, and your Discord and Roblox passwords never reach us. API keys are stored hashed, so nobody — including us — can read them back. Access tokens for connected services are encrypted at rest. Files you buy are served through short-lived, single-use links rather than public URLs.
No system is perfectly secure. If we ever have a breach likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the law requires.
Most of what we hold is editable from your settings or your store's dashboard. You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account — email support@enviglo.com and we will respond within 30 days.
Deleting an account removes your profile and personal information. Some records survive in a form that is no longer about you: the fact a sale happened, for example, because the creator on the other side of it has their own records and obligations.
If you think we have mishandled your information, tell us first and we will try to sort it out. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner.
If we change this, the date at the top changes with it. If a change materially affects you we will tell you in the app or by email rather than quietly editing the page.