Privacy policy
This is a translation for your convenience. The German version is legally binding.
The provider details are being added.
Draft: this text describes how Axomod actually processes data. It will be reviewed by a legal professional before paid plans launch.
1. Controller
The controller details are being added.
2. Overview
Axomod consists of a Discord bot and this website with a dashboard. We only process the data these features need. There is no tracking, no advertising and no analytics. Fonts are served from our own server, not by third parties.
3. Visiting the website
The website is delivered through the network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare processes technically necessary connection data such as your IP address to deliver the site and protect it from attacks. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in secure and reliable operation (Art. 6(1)(f) GDPR). The server itself is located in Germany.
4. Cookies
We only set one technically necessary session cookie, and only once you log in to the dashboard. It keeps you logged in for up to 7 days and only contains a random identifier. No consent is required for this (§ 25(2) TDDDG).
5. Logging in with Discord
You log in to the dashboard with Discord. We receive your Discord user ID, username, avatar and the list of your servers including your permissions. We only use this to show you the servers you are allowed to manage. It is stored in your session and deleted after 7 days at the latest. The legal basis is providing the dashboard (Art. 6(1)(b) GDPR).
6. Data the bot processes on Discord servers
The bot only processes data on servers it has been invited to, and only for the features enabled there:
- Settings: IDs of channels and roles, texts, times and thresholds set by server admins.
- Lineups, giveaways, tickets: Discord user IDs and display names of participants and their choice, such as “Coming” or entering a giveaway.
- Inventory and treasury: bookings with amount, purpose, display name and time.
- Server logs: if enabled, the bot posts joins, leaves and deleted or edited messages to a channel on that server. We do not store this content in our database.
- Ticket transcripts are posted as a file to the server's log channel and not stored by us.
- Twitch: the streamer names entered are checked with Twitch (Twitch Interactive, Inc., USA) to see whether they are live.
The data is kept until server admins delete it in the dashboard or request deletion from us. Backups are overwritten after 14 days. The legal basis is providing the bot features to the respective server (Art. 6(1)(b) and (f) GDPR).
7. Payments
Paid plans are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). You enter your payment details directly with Stripe, we never see them. We only store the Stripe customer ID, plan, status and end of the billing period. The legal basis is performing the contract (Art. 6(1)(b) GDPR) and statutory retention obligations (Art. 6(1)(c) GDPR).
8. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Contact the address above to exercise them. You can also lodge a complaint with a data protection supervisory authority.