EU Data Protection
We comply with all GDPR requirements for EU citizens and residents.
Data Security
Your data is encrypted and stored securely with industry-standard protection.
Transparency
We're transparent about what data we collect and how we use it.
Your Rights
You have full control over your personal data at all times.
Data We Collect
Under GDPR, we are transparent about what personal data we collect:
Discord Profile Information
- Discord User ID (required for authentication)
- Username and discriminator
- Avatar URL
- Email address (if you grant permission)
Server Data
- Server IDs where you have admin permissions
- Server names and basic information
- Server configuration settings you create
Usage Data
- Bot commands executed (for analytics and improvements)
- Dashboard interactions
- Error logs and diagnostic information
Legal Basis for Processing
We process your data based on the following legal grounds:
Consent
By using Discord OAuth and authorizing our bot, you consent to data collection necessary for service functionality.
Contractual Necessity
We need certain data to provide our bot services and dashboard functionality.
Legitimate Interests
We process data to improve our services, prevent abuse, and ensure platform security.
Your GDPR Rights
Under GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct any inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Limit how we use your personal data.
Right to Portability
Receive your data in a machine-readable format.
Right to Object
Object to processing of your personal data.
Data Retention
We retain your data only as long as necessary:
- Active accounts: Data retained while your account is active and for 90 days after last activity.
- Server data: Configuration data retained while the bot is in your server.
- Logs: System logs retained for 30 days for security and debugging purposes.
- Account deletion: All data permanently deleted within 30 days of account deletion request.
Data Sharing & Third Parties
We do not sell your personal data. We only share data with:
- Discord Inc.: Required for bot functionality (Discord API)
- Hosting providers: For server infrastructure (data stored in EU)
- Payment processors: Only for premium subscriptions (Stripe)
- Analytics services: Anonymized usage data only
International Data Transfers
Our primary servers are located in Helsinki, Finland (EU). If data is transferred outside the EU, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the EU Commission
- Other approved transfer mechanisms
Exercising Your Rights
To exercise any of your GDPR rights or if you have questions about our data practices:
Data Protection Contact
Email: privacy@modora.gg
Response Time: We respond to all requests within 30 days as required by GDPR.
Self-Service Options
You can also manage your data directly:
- View and export your data from the Privacy Settings
- Delete your account from the Privacy Settings
Right to Complain
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority.
For EU residents, you can find your local data protection authority at: European Data Protection Board