Legal
Privacy policy
Last updated 28 September 2026
Draft. This text describes how the service works and still needs review by a qualified lawyer and completion of the bracketed items before launch.
1. Who is responsible
[Operator name and address to be completed.] Contact: contact@botstacked.com.
2. What we process and why
- Account: email address, a one-way password hash (never the password itself), email verification and security settings. Purpose: providing and securing your account.
- Discord identity: your Discord user ID, username, display name and avatar, and the list of servers you can manage, obtained with your permission through Discord. Discord access tokens are stored encrypted. Purpose: showing and authorizing the servers you manage.
- Server configuration: the features, channels and options you choose for each server, including the name and language chosen for BotStacked there.
- Data the bots need: event sign-ups (Discord user IDs), LFG groups (member IDs and optional in-game tags), temporary voice room ownership, and music queues (track titles and page links). Purpose: running the features your server uses.
- top.gg votes: the Discord user ID and time of each vote for our bot. Purpose: unlocking vote rewards.
- Billing: handled by Stripe. We store the Stripe customer and subscription identifiers and the plan status, never card numbers.
- Security logs: IP addresses and request details used for rate limiting, abuse prevention and audit records.
4. Processors and recipients
Hosting (Vercel for the website; Oracle Cloud for the service), Stripe (payments), our email provider (account emails), Discord (the platform the bots run on), top.gg (vote notifications). If AI-assisted event formatting is enabled for a server, the event description text is sent to the configured AI provider for formatting.
5. Retention
[Retention periods to be completed, e.g. account data until deletion; security logs N days; billing records as required by tax law.]
6. Your rights
You can access, correct, export or delete your data, and object to or restrict processing, by contacting us. You may also complain to your data protection authority.