Privacy Policy

1. Who we are

Wisp is run by [your full name or business name], who is the "controller" of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). For anything about your data, contact us at [your contact email] or in our Discord server.

2. What we collect

If you have an account (people who use the dashboard):

• From Discord, when you sign up or log in: your Discord user ID, name, avatar, email address (if it's verified) and the list of servers you're in, with your permissions there.
• When you agreed to our terms, and whether you want product news.
• Your login sessions (a random ID in a cookie, kept for up to 30 days).
• Changes you make on the dashboard, which are kept in that server's activity log.
• Billing: whether you're subscribed, and Stripe's IDs for you and your subscription. Your card details go to Stripe, never to us.

About servers that use the bot: the server's ID, name and icon, its settings, its trial and subscription status, and daily counts (messages, joins, commands) for the stats on the dashboard.

About members of those servers, depending on which features the server's managers switch on:

• Moderation cases: the member's ID and name, the moderator, the action and the reason.
• Levels: the member's ID, name, avatar and XP.
• Birthdays (day and month only), reminders, suggestions, poll votes, giveaway entries, ticket details (who opened it and the topic) and starboard records.

3. Messages

The bot reads messages in channels it can see, as they're sent, so it can do what the server has set up: auto-moderation, levels, custom commands, counting, sticky messages, and so on. We don't store message content. There are two exceptions, and neither keeps a copy on our side. If a server turns on logs, deleted and edited messages are posted to that server's own log channel. When a ticket closes, its transcript is posted to the server's chosen channel and sent to the member who opened it.

4. Why we use it (our lawful bases)

• To provide the Service you've asked for (your account, the dashboard, your subscription): this is needed for our contract with you.
• To run the features a server has switched on, for that server's members: our legitimate interest, and the server's, in running and moderating a community. We use only what's needed.
• To keep the Service secure and prevent abuse (for example, stopping the free trial being used again): our legitimate interests.
• To keep financial records: a legal obligation.
• Product news emails: only if you've chosen to get them (your consent), which you can turn off at any time on your account page.

5. Who we share it with

We don't sell your data or share it for advertising. We only share it with the services we need to run Wisp:

• Discord, which the bot and logins run through;
• Stripe, which handles payments;
• our hosting provider, whose servers store the data;
• Google Fonts, which supplies the website's font (your browser fetches it from Google, which sees your IP address).

We may also share data if the law requires it, or to protect people's safety. Discord and Stripe may process data in the United States. Where data leaves the UK, it's protected by the safeguards UK law requires, such as the UK Extension to the EU-US Data Privacy Framework or standard contractual clauses.

6. How long we keep it

• Your account: until you delete it. Login sessions expire after 30 days.
• A server's settings and records: while the bot is in that server, then deleted automatically 90 days after it's removed. We keep only the server's ID and trial status, so the free trial can't be used twice.
• Billing records: 6 years, because UK tax law requires it.
• Members' records (cases, levels and so on): until the server's managers remove them, the bot leaves the server (see above), or the member asks us to delete them.

7. Your rights

You have the right to: see the data we hold about you (you can download it from your account page), correct it, delete it (you can delete your account from your account page), restrict or object to how we use it, move it to another service, and withdraw consent where we rely on it. Server members without an account can contact us for any of these. We'll reply within one month.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use only the cookies the website needs to work: one that keeps you logged in, and short-lived ones that protect the login process. We don't use advertising or tracking cookies, and there are no analytics trackers on the site.

9. Children

The Service is for people aged 13 and over, as Discord is. We don't knowingly collect data from children under 13. If you think we have, contact us and we'll delete it.

10. Security

We protect your data with encrypted connections, sessions stored only as one-way hashes, checks that only a server's managers can see or change its settings, and limited access to our servers. No system is perfectly secure, but we take care, and we'll tell you and the ICO about any serious breach as the law requires.

11. Changes to this policy

If we change this policy in a way that matters, we'll tell you on the website or by email, and ask you to agree again where needed.