Privacy Policy

1. Data we collect

When you sign in with Discord and use the Service we process:

• Discord account data: user ID, username, display name, avatar and email address, and the list of servers you are in with your permissions there (OAuth scopes identify, email, guilds).
• Discord sign-in tokens, stored encrypted, so we can show your servers in the dashboard.
• Server data: the settings you configure, channels and roles you select, moderation cases, tickets, levels, logs and audit records.
• Message content the bot reads in real time to run the features you enable, such as automod, levels and logs. Message content is only stored when a feature you enabled needs it, such as message logs or ticket transcripts.
• Images you upload, such as welcome card backgrounds, and bot tokens you add, stored encrypted.
• Billing data: your Stripe customer ID, the server a subscription is for, and its status and period. Card details are entered on Stripe's page and never reach our servers.
• Technical data: IP address, browser and request logs kept by our hosting providers for security and troubleshooting.
• Usage analytics (PostHog): pages you visit and buttons you click in the dashboard, recordings of dashboard sessions with every typed value masked, errors, and survey answers, linked to your Discord user ID once you sign in. Cookies for this are only set if you accept them; if you decline, visits are counted without cookies. The bot also records which commands are used and when tickets are opened, claimed or closed, with the Discord user and server IDs and no message content.

2. Why we use it

We do not sell your personal data and we do not use it for advertising.

• To provide the Service you asked for: sign in, the dashboard and the bot features (performance of a contract).
• To process Premium payments and keep records required by tax and accounting law (contract and legal obligation).
• To keep the Service secure, prevent abuse and fix problems (legitimate interests).
• To understand how the dashboard and bot are used and improve them (your consent for analytics cookies; legitimate interests for cookieless counts and bot usage).
• To answer your support requests (contract and legitimate interests).

3. Who we share it with

We only share data with providers that help us run the Service, under contracts that protect it:

• Discord (the platform the bot and sign-in run on).
• Supabase (database, authentication and file storage, hosted in the EU, Frankfurt).
• Vercel (hosting of the website and dashboard).
• PostHog (product analytics, session recordings, error tracking and surveys, hosted in the United States).
• Stripe (payment processing; Stripe acts as an independent controller for payment data).
• Our server hosting provider, which runs the bot.

4. International transfers

Some providers process data outside your country, including in the United States. Where required we rely on safeguards such as the European Commission's Standard Contractual Clauses.

5. How long we keep it

• Account data: while you use the Service, and deleted on request.
• Server data: while the bot is in the server; deleted on request by a server manager.
• Billing records: as long as tax and accounting law requires (often up to 10 years).
• Technical logs: for a short period, normally no longer than 30 days.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent. Email [CONTACT EMAIL] to use these rights. You can also complain to your data protection authority.

You can disconnect the app at any time in Discord under User Settings > Authorized Apps.

7. Security

We use encryption in transit, encrypted storage of tokens, access controls and least-privilege keys to protect your data. No system is perfectly secure; we will notify you and the authorities of a breach where the law requires it.

8. Children

The Service is not meant for children under 13, or under the minimum age to use Discord in their country. We do not knowingly collect their data.

9. Cookies

We use cookies that are strictly necessary, and analytics cookies only if you accept them. See our Cookie Policy.

10. Changes

We may update this policy and will show the new date at the top of this page. For important changes we will tell you in the dashboard.