Privacy Policy

1. Who is responsible

Vouchly is run by:

Red_thz · revsync09@gmail.com · Support server

Write to this address for any question about your data, including the requests in section 8.

2. Data the bot stores in a server

When a server adds Vouchly, we store what the bot needs to work there:

• Server details: server ID, name, icon, the owner’s user ID and the member count.
• Settings: the channel and role IDs, texts, emojis and options the server’s staff choose in the dashboard, plus card templates and fonts they upload.
• Vouches: the user IDs of the customer and the staff member, the star rating, the written review, the category, an optional proof screenshot the customer attaches, timestamps, the IDs of the posted message and channel, and who approved or hid it.
• Requests and reports: who asked whom for a vouch, and for reports the reporting user’s ID and the reason they give.
• Moderation: blacklist entries (user ID, reason, who added it) and reward role rules.
• Audit log: which dashboard user changed which setting or vouch, and when.

When a vouch card is drawn, the bot loads the current username and avatar of the people involved from Discord and puts them into the image. The image is posted in the server; we do not keep separate copies of names or avatars.

3. Data from signing in to the dashboard

You sign in with Discord. We ask only for the identify and guilds permissions, which give us your user ID, username, display name, avatar and the list of servers you are in. We use the server list only to show you the servers you may manage.

These details and the Discord access token are kept in an encrypted cookie on your device, not in our database. The cookie expires after 7 days at the latest, or when you sign out. If a server gives you dashboard access through a team role, the server stores your user ID or role ID with that permission.

4. What we do not collect

• No message content: the bot cannot read chat messages.
• No member lists or online status: Vouchly uses no privileged gateway intents.
• No email addresses or passwords, no payment data.
• No advertising, no analytics or tracking cookies, no selling of data.

5. Why we use the data

• To provide the service a server asked for: collecting, approving and posting vouches and running the dashboard (Art. 6(1)(b) GDPR).
• The server’s interest in showing honest reviews, and our interest in keeping Vouchly safe: blacklists, reports, limits against fake vouches and the audit log (Art. 6(1)(f) GDPR).

6. Who can see it

• Posted vouch cards are visible to everyone who can read the vouch channel in that server.
• If a server turns on its public trust page, anyone with the link can see the server’s rating and its latest vouches: stars, review text, date, the helper’s name and only the first letter of the customer’s name.
• In the dashboard, data of a server is only shown to its owner, its administrators and the people they give access to.
• We use service providers who process data for us: Supabase (database and file storage), Cloudflare (dashboard hosting) and Northflank (bot hosting). Discord itself receives everything the bot posts. Some providers may process data outside your country; where that requires safeguards, they are covered by the providers’ data processing terms.

7. How long we keep it

• Server data is kept while Vouchly is in the server. Staff can hide, reject or remove vouches at any time.
• If Vouchly is removed from a server, its data is kept for 90 days so it can be restored after a re-invite, and is then deleted automatically, including uploaded files and proof screenshots.
• The sign-in cookie lasts 7 days at most.
• Backups a server’s staff download from the dashboard are files on their own devices; they are responsible for them.

8. Your rights

You can ask us which data we have about you, and have it corrected or deleted. You can also object to how we use it and ask for a copy. Send your Discord user ID with your request to the address in section 1. Vouches belong to the server where they were written, so you can also ask that server’s staff to remove a vouch directly.

You also have the right to complain to a data protection authority.

9. Age

Vouchly is for people who meet Discord’s minimum age in their country.

10. Changes

When we change this policy, we update the date at the top. For significant changes we will give notice in the dashboard.