Privacy Policy

This Privacy Policy explains how Void Labs ("we", "us", or "our") collects, uses, stores, and protects information when you use the Void Logger Discord bot and our web dashboard (collectively, the "Service"). We are committed to complying with applicable data protection laws, including the GDPR.

Our Legal Role: When you log into our web dashboard and manage your account or subscription, Void Labs acts as a Data Controller. When our bot logs activities on a Discord server, we act strictly as a Data Processor on behalf of that server's Administrator (who is the Controller).

1. Information We Collect

We strictly collect only the data necessary to provide and improve the Service. We do not unnecessarily hoard data.

1.1 Discord Server & User Data

• Server Data: Discord Guild (Server) IDs, Channel IDs, and Role IDs required to configure logging channels and manage dashboard permissions.
• User Identifiers: Discord User IDs, usernames, and avatars to attribute logged actions (e.g., who deleted a message, who joined the server).

1.2 Message Content & Media

• Messages: We temporarily store the text content of messages that are sent, edited, or deleted, solely to generate the logs for server administrators.
• Media: We cache attachments and embedded media linked to logged events, so they remain viewable in logs even if deleted from Discord.

1.3 Dashboard, Analytics & Billing Data

• Authentication: OAuth2 tokens granted by Discord to authenticate you on our dashboard securely.
• Billing Information: We collect your email address when you interact with our checkout system. This is strictly required for our integration with our payment processor (Polar.sh) to link your Discord server to your subscription, manage billing, and send receipts.
• Usage Data: IP addresses, browser types, and navigation paths on our dashboard to monitor security and analyze usage trends.

2. How We Use Your Information & Legal Basis

Under the GDPR, we rely on the following legal bases to process your data:

• Performance of a Contract (Dashboard Users): Verifying your identity via Discord OAuth2 and managing your subscriptions (handled securely via our payment provider).
• Legitimate Interest (Server Logs): Acting as a Processor, we log Discord server events based on the legitimate interest of the Server Administrator to moderate, secure, and manage their community.
• Legitimate Interest (Security & Analytics): Identifying bugs, crashes, and performance issues to improve the Service.

We never sell your data, use it for advertising, or train AI models on your private messages.

3. Third-Party Subprocessors & Data Transfers

To provide a robust Service, we share strictly necessary data with trusted third-party subprocessors:

• Cloud Hosting: We use secure cloud infrastructure providers to host our databases and process logs.
• Discord API: The core platform we integrate with. We are bound by Discord's Developer Terms of Service.
• Polar.sh: Our Merchant of Record and payment processor. We share your email address with Polar to process your subscription securely.
• Sentry: Used for real-time error tracking and crash reporting.
• PostHog: Used for privacy-friendly product analytics.

International Transfers: Some of our subprocessors (e.g., Polar, Sentry, PostHog) are located in the United States. We ensure that any data transferred outside the European Economic Area (EEA) is protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

4. Data Retention & Deletion

We adhere to strict data retention policies based on your server's active subscription tier and the type of data.

Once the retention period is reached, the data is permanently and automatically purged from our databases.

Cancellation & Downgrades: If your server's subscription is downgraded or cancelled (including via a refund), any log data that exceeds the new tier's retention limit (e.g., older than 12 hours) will be queued for immediate permanent deletion. Kicking the bot from your server also triggers immediate deletion of all associated logs and configurations.

5. Data Security

All sensitive data processed by the Service is encrypted in transit using modern TLS protocols. Data at rest, including cached media and logs, is stored in encrypted databases with strict network isolation. Access to production databases is heavily restricted to key personnel of Void Labs for maintenance purposes only.

6. Your Rights (GDPR & CCPA)

Depending on your location and your relationship with us, you possess specific rights regarding your personal data:

Dashboard Users (We are the Controller)

• Right to Access: You can request a copy of your dashboard/billing data.
• Right to Erasure: You can request the deletion of your personal account data from our systems.

Discord Server Members (We are the Processor)

Because Void Logger operates on servers managed by third-party administrators, we act solely as a "Data Processor" for server logs. If you want your messages deleted from a server's logs before the automatic retention purge, you must contact that server's administrators directly, as they are the Data Controller.

California Residents (CCPA)

Under the CCPA, you have the right to know what personal information we collect, the right to delete it, and the right to non-discrimination. We do not sell or share your personal information for cross-context behavioral advertising.

7. Contact Us

For privacy inquiries, data deletion requests, or questions regarding this policy, please email us at legal@voidlogger.xyz or contact us via our Support Discord Server.