Privacy Policy

Account and Discord information: when you sign in with Discord, we receive your Discord user ID, username, avatar, and the guild (server) memberships you choose to share, together with any email address you authorize.

Community and guild data: the communities, guilds, members, events, rosters, applications, and records you create or manage on the platform.

Subscription and billing information: payments are processed by Polar; we receive transaction status and plan details but do not store full payment card numbers.

Technical and usage data: IP address, browser and device type, operating system, logs, pages visited, and usage analytics, collected through cookies and similar technologies.

We use personal information to provide and operate the Service, authenticate users via Discord, manage communities and events, process subscriptions and purchases, provide support, secure the platform against abuse, and comply with legal obligations.

We may also use aggregated or de-identified data for analytics and product improvement where permitted by law.

For users in the European Economic Area and the United Kingdom, we process personal information on the following lawful bases under the GDPR and UK GDPR: performance of a contract (providing the Service), our legitimate interests (security, fraud prevention, and product improvement), your consent (for optional cookies and marketing, where applicable), and compliance with legal obligations.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We use strictly necessary cookies to keep the Service secure, maintain sessions, and remember core preferences. Optional analytics and third-party services are only activated after you grant consent.

Detailed information about the cookies we use, their purposes, and how to manage them is available in our Cookie Policy. You can update your preferences at any time through the cookie manager.

We share personal information only as necessary: with service providers (such as Supabase for infrastructure, Polar for payments, and Discord for authentication); with other members of your community as part of the Service's features; and where required by law or to protect rights and safety.

We do not sell your personal information. Where we share data, we do so under contractual obligations requiring confidentiality and appropriate security.

Our primary data hosting is located in the European Economic Area. Some of our service providers may process data in other countries, including the United States.

Where personal information is transferred outside the EEA, the UK, or other jurisdictions with equivalent protection, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

We retain personal information only as long as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary by data type and account status. When data is no longer needed, we delete or anonymize it in accordance with our retention schedule.

We implement reasonable technical and organizational measures to protect personal information, including encryption in transit and at rest and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You also play a role in protecting your account by safeguarding your Discord credentials.

EEA and UK (GDPR / UK GDPR): you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing, and to lodge a complaint with your supervisory authority.

California (CCPA / CPRA): California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate data, to opt out of the 'sale' or 'sharing' of personal information (we do not sell personal information), and to non-discrimination for exercising these rights.

Türkiye (KVKK): under Law No. 6698, you have rights including access to your data, rectification, deletion, and objection to certain processing.

Brazil (LGPD): under the Lei Geral de Proteção de Dados, you have rights including confirmation, access, correction, anonymization, portability, and information about shared data.

Other jurisdictions (for example, PIPEDA in Canada and PIPL in China): you may have similar access, correction, and deletion rights. To exercise any of these rights, contact [email protected].

Guildify is intended for users aged 18 and over. We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

We honor the Global Privacy Control (GPC) signal where required by law, treating it as a request to opt out of the sale or sharing of personal information and of non-essential cookies.

Some browsers offer a 'Do Not Track' setting. Because there is no consistent industry standard, our Service currently responds primarily to consent choices made through our cookie manager and GPC.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service before they take effect.

Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

For privacy questions or to exercise your rights, contact [email protected]. If you are in the EEA or the UK, you may also lodge a complaint with your local data protection authority.