ModMail Privacy Policy
Edited: August 7, 2024
Foreword
This policy was created as required by the EU’s General Data Protection Regulation (GDPR). You can find more about the GDPR on GDPR.eu.
This document details the data collected by Quilt through the Modmail discord bot, how it is used and how to exercise your rights related to your data.
Data Collected
Discord Bot
We collect the content of messages sent to the ModMail bot, both from the sender communicating through Direct Messages, and for staff members using channels linked to ModMail tickets. We also collect the following information from both parties:
- Discord ID
- Discord Username
- Discord Avatar URL
This data is collected to preserve historical records and conduct moderation. The data is persisted across leaving the guild and is essential to the operation of the service.
Web Interface
The web interface doesn’t store any personal data.
The web interface uses cookies to keep you logged in while you use it, which is essential to its functionality. Cookies are stored in your browser and can be deleted at any time.
Data Retention
Data is retained indefinitely. We do not delete any data unless you request it.
Data Governance
Database access is limited to the minimum of Quilt staff required to operate the service. We do not share any data with third parties. We do not sell any data.
Data is stored in the EU with the following processors:
The web interface is proxied through Cloudflare for security and performance. If you use the web interface, data about your connection will be processed in accordance with Cloudflare’s privacy policy in order to faciliate your connection and operate their service.
BackBlaze and Cloudflare are compliant with the DoC’s Data Privacy Framework.
Data is encrypted in transit.
Your Rights
Every user is entitled to the following:
Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
There is no charge for exercising your rights, except in cases where your request is unfounded or excessive. If you make a request, we have one month to respond to you. We may ask you to verify your identity before processing your request.
If you would like to exercise your rights, contact us at [email protected] or by sending a message to the ModMail Discord Bot.
Contact
If you have any questions about this privacy policy, send an email to [email protected], or send a message to the ModMail Discord Bot.