This Privacy Policy outlines how Vortex Hub handles and protects your information when you interact with our services. It applies to our website, our Discord server and our bots. For the purposes of UK data protection law, we are the data controller of the information described below.
1. Information we collect
- Discord account information — your Discord user ID and username, collected when you join and verify with our server.
- Verification tokens — where you authorise our verification app, Discord issues us an access token and a refresh token, which we store together with the date you verified. We request only the minimum permissions needed to confirm your identity and to apply or restore your roles.
- Purchase information — confirmation of payment, the amount, the date, an order reference from Stripe, and the email address you provide at checkout. Card details are entered directly with Stripe and are never received or stored by us.
- Support correspondence — the contents of any support ticket you open, including attachments, and a transcript of that ticket saved when it is closed.
- Website usage — our site is static. We set no analytics or advertising cookies and do not track you across other sites. Our pages load fonts from Google Fonts, which shares your IP address with Google in order to serve them, and our hosting provider may retain standard server logs.
2. How we use your information
- To provide your membership — verifying you, applying and restoring your roles, and giving you access to the community. Lawful basis: performance of our contract with you.
- To process payments and maintain financial records. Lawful basis: performance of our contract, and legal obligation.
- To provide support and retain a record of what was agreed. Lawful basis: performance of our contract, and our legitimate interests.
- To enforce our rules, prevent misuse of our bots and address fraud. Lawful basis: our legitimate interests in protecting our members and our service.
- To send marketing, where you have asked to receive it. Lawful basis: your consent, which you may withdraw at any time.
3. How long we keep it
- Verification and role data — while you are a member, and deleted within a reasonable period after you leave or request removal.
- Discord tokens — only while needed to maintain your verification.
- Payment and order records — six years, as required for UK tax and accounting purposes.
- Support tickets and transcripts — up to two years.
4. Third-party services
Our services integrate with the Discord API and with Stripe, our payment processor, and our website is served by a hosting provider. Information exchanged with these services is subject to their own privacy policies. Some of them process information outside the UK, protected by the safeguards those providers have in place, such as the UK International Data Transfer Addendum or standard contractual clauses.
We do not sell your information, and we do not share it with advertisers or data brokers. We may disclose information where we are legally required to do so.
5. Data security
We take appropriate measures to protect your information and to prevent unauthorised access, alteration or disclosure. Access to member data is limited to the staff who need it, and credentials and tokens are kept out of our public code. No system is perfectly secure, and we cannot guarantee the security of information in transit to us — please do not send passwords or card details through Discord.
6. Children's privacy
Our services are not directed at individuals under the age of 13, and you must be 18 or over to purchase a membership. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete it.
7. Your rights
Under UK data protection law you have the right to access a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. To exercise any of these, contact us using the details on our contact page. We will respond within one month, free of charge.
Some information we may be required to retain despite a deletion request, such as payment records. We will tell you if that applies.
If you are unhappy with how we have handled your information, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
8. Changes to this Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes take effect immediately upon the revised policy being posted here, and we will update the date shown above.
This policy reflects our commitment to transparency and to the responsible handling of your information. We value your privacy and take care to ensure your data is protected and used appropriately.