Privacy Policy

1. Overview

This Privacy Policy explains how Vanta Bot ("we") collects, uses, and protects information when you use our Discord bot, website, and dashboard (collectively, "the Service"). We are committed to minimising data collection and being transparent about what we store.

2. Data We Collect

• Discord identity: your Discord user ID, username, and avatar, obtained via Discord OAuth2 when you sign in.
• Server metadata: IDs, names, and icons of Discord servers you manage, used to render the dashboard.
• Configuration data: settings you configure for each module (ticket panels, giveaways, automod rules, etc.).
• Operational data: moderation cases, ticket records, transcripts, application responses, leveling XP, and similar records generated by using the Bot.
• Billing data: subscription status and Stripe customer identifiers (we do not store full card numbers — Stripe handles payment details).
• Technical logs: limited error and health logs used to maintain the Service.

3. How We Use Data

• To authenticate you and display your servers in the dashboard.
• To operate the modules you enable (e.g. open tickets, run giveaways, enforce automod).
• To process premium subscriptions and billing.
• To diagnose issues, prevent abuse, and comply with legal obligations.

4. Legal Bases (GDPR/UK GDPR)

We process data on the bases of contractual necessity (to run the modules you configured), legitimate interests (security and abuse prevention), and consent (OAuth login). You can withdraw consent by removing the Bot and requesting deletion.

5. Data Retention

We retain configuration data for as long as the Bot is installed in a server. Ticket transcripts, logs, and moderation records are retained according to your plan’s retention settings. On removal of the Bot or upon request, we will delete associated configuration within a reasonable period, except where retention is required by law.

6. Data Sharing

We do not sell your data. We share data only with: (a) Discord, as necessary to operate the Bot; (b) Stripe, to process payments; (c) our hosting and database providers; and (d) authorities where required by law. All processors are engaged under appropriate data processing agreements.

7. Security

All data is stored in a PostgreSQL database with row-level security. Secrets are kept server-side and never exposed to the browser. Access is logged. No system is perfectly secure, but we apply industry-standard safeguards.

8. Your Rights

• Access, correct, or delete your personal data.
• Object to or restrict certain processing.
• Withdraw consent and remove the Bot from your server.
• Lodge a complaint with your data protection authority.

9. Children

The Service is not directed to children under 13 (or the minimum age for Discord in your jurisdiction). We do not knowingly collect data from them.

10. Changes

We may update this policy from time to time. Material changes will be communicated through the Service. Continued use constitutes acceptance.

11. Contact

Privacy questions can be sent to support@vantabot.app.