Privacy Policy

1. Who We Are

dcshot is operated by Datahold s.r.o., Na Folimance 2155/15, 120 00 Praha 2, Czech Republic (IČO 23533803). We are the data controller for the personal data described in this policy. Contact: support@dcshot.com.

2. Data We Collect

When you use dcshot, we collect:

• Discord profile data via OAuth — your Discord user ID, username, avatar, the list of Discord servers you can manage, and the email address associated with your Discord account. The email is used to pre-fill payment checkout and deliver payment receipts, and is shared with Stripe for that purpose. We receive this from Discord; we don't ask for your Discord password.
• Server member data — when a server admin connects a Discord server to dcshot, we sync its member list through Discord's API (privileged Guild Members intent): Discord user ID, username/nickname, and role assignments. We use this solely to map Discord roles to dcshot permissions. We never read or store messages. Members removed from the Discord server are deleted at the next sync, and all member data is permanently deleted within 14 days after a tenant is deleted.
• Account & role data — which tenants you belong to in dcshot, what role you have, and your assigned permissions.
• Billing data — credit purchases (amount, date, payment provider ID). Card details are processed by Stripe and never touch our servers.
• Service activity — audit log entries (who did what), bot activations, voice channel assignments. We do not record voice audio; voice is relayed in real time and discarded.
• Technical data — IP address, browser type, and basic logs for security and abuse prevention.

3. How We Use Your Data — and On What Legal Basis

• To provide the Service — authenticate you, route voice audio, manage bots, sync server members, process payments — performance of a contract (GDPR Art. 6(1)(b))
• To enforce permissions, keep audit logs, and prevent abuse — legitimate interest in the security and integrity of the Service (Art. 6(1)(f))
• To send transactional notifications (e.g., payment receipts) — performance of a contract (Art. 6(1)(b))
• To comply with legal obligations (tax, accounting, lawful requests) — legal obligation (Art. 6(1)(c))

4. Third-Party Services

We rely on the following processors:

• Discord — authentication and voice channel access
• Stripe — payment processing (card details, fraud detection)
• Google Cloud / Firebase — hosting, database, authentication infrastructure
• Microsoft Azure — voice relay servers

Each of these has their own privacy policy. We share only what is needed to operate the Service.

International transfers. Our voice relay servers run in the EU (Microsoft Azure, Germany). Some processors (Discord, Stripe, Google, Microsoft) may process data in the United States; each of them is certified under the EU-U.S. Data Privacy Framework, and where the DPF does not apply, transfers rely on the European Commission's Standard Contractual Clauses (SCCs).

5. Data Retention

We keep your account data while your tenant is active. Deleted tenants are permanently purged within 14 days, including all member data synced from Discord. Audit logs are kept for at least 12 months for security and accountability. Billing records are kept for as long as accounting and tax law requires (typically 10 years in the Czech Republic). You can request earlier deletion subject to legal retention obligations.

6. Your Rights (GDPR)

If you are in the EU/EEA or another jurisdiction with similar rights, you can request to:

• Access the personal data we hold about you
• Receive an export of your data in a portable format
• Correct inaccurate data
• Delete your account and associated data (subject to legal retention)
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@dcshot.com.

7. Cookies and Local Storage

We use essential browser storage (localStorage, sessionStorage) to keep you signed in and to remember your theme preference. We do not use third-party advertising or tracking cookies.

8. Security

We use industry-standard measures to protect your data — encryption in transit, strict access controls, and limited internal access. No system is perfectly secure, however. If you notice a security issue, please report it at support@dcshot.com.

9. Children

dcshot is not intended for children under 13 (or your local minimum age for digital consent). We do not knowingly collect data from such users.

10. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be communicated through the Service.

11. Contact

For privacy questions, data requests, or to reach our data protection contact, message us at support@dcshot.com.