Contents
1. Information we collect
- Account information — your email, name, and authentication identifiers (managed through our auth provider, Supabase).
- Discord bot tokens — the bot tokens you add so we can post on your behalf. These are encrypted at rest with AES-256-GCM and are never shown back to you in full or shared.
- Configuration & content — bots, servers, channels, templates, schedules, moderation rules, and the messages you post.
- Usage & delivery data — message delivery logs, success/failure status, analytics, audit logs, and quota usage.
- Billing information — subscription status and plan. We do not store full card details; payments are handled by Stripe, which stores your payment data under its own privacy policy.
- Technical data — IP address, browser/device information, and security/operational logs.
2. How we use it
- To provide, operate, and secure the Service (e.g. authenticating you, posting your scheduled messages, enforcing plan limits and moderation).
- To process payments and manage your subscription.
- To provide analytics, delivery logs, and support.
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To comply with legal obligations and enforce our Terms and Acceptable Use Policy.
We do not sell your personal information, and we do not use your message content for advertising.
3. Legal bases (GDPR)
Where the GDPR applies, we process personal data on the bases of: performance of a contract (to deliver the Service you signed up for), legitimate interests (security, fraud prevention, improving the Service), consent (where required, e.g. certain cookies or marketing), and legal obligation.
4. How we store & protect it
- Sensitive secrets (Discord bot tokens, webhook signing secrets) are encrypted at rest using AES-256-GCM, with encryption keys held separately from the database.
- Data is hosted with our infrastructure providers (database and auth via Supabase; application hosting via Railway). Access is restricted and traffic is encrypted in transit (HTTPS).
- No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take reasonable technical and organizational measures to protect your data.
5. Sharing & processors
We share data only with service providers ("processors") that help us run the Service, under appropriate agreements:
- Discord — your bot connects to Discord's API to post your messages.
- Stripe — payment processing and subscription management.
- Supabase — authentication and database hosting.
- Railway — application hosting.
We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice where required).
6. Data retention
We keep your data for as long as your account is active. Delivery and activity logs are retained according to your plan's log-retention window (for example, 7 to 90 days, or longer on higher tiers). When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records for legal, accounting, or security reasons.
7. Your rights
Depending on your location, you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. We provide self-service tools in the dashboard to export all your data and to permanently delete your account and associated data. To exercise other rights, contact support@myadsense.xyz. You may also have the right to lodge a complaint with your local data-protection authority.
8. Cookies
We use strictly necessary cookies and similar technologies to keep you signed in and to operate the Service securely. We may use limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling necessary cookies may prevent the Service from working.
9. Children's privacy
The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
10. International transfers
Your data may be processed in countries other than your own, including where our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.
11. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide reasonable notice.
12. Contact
For privacy questions or requests, contact us at support@myadsense.xyz. Data controller: Byte Development (Victoria, Australia).