GuildPass
Legal

Privacy Policy

Effective date: December 1, 2025

GuildPass LLC ("GuildPass," "we," "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

1.1 For Creators

  • Email
  • Discord ID
  • Stripe account information (non-sensitive)
  • Server information (guild ID, roles, permissions)

1.2 For Members

  • Discord ID
  • Stripe customer ID (non-sensitive)
  • Subscription status
  • Assigned roles

We do not collect or store:

  • Credit card numbers
  • Discord passwords
  • Personal messages
  • Sensitive personal data

2. How We Use Information

We use data to:

  • Sync Discord roles based on Stripe subscription status
  • Provide the dashboard and analytics
  • Maintain API integrations
  • Ensure billing accuracy
  • Send service-related emails

3. Legal Basis for Processing (GDPR)

Our processing is based on:

  • Contract (performing the service)
  • Legitimate interest (operating a functional SaaS)
  • Consent (OAuth connections through Stripe and Discord)

4. Data Sharing

We share data only with:

  • Stripe (payment processing)
  • Discord (role management)
  • Infrastructure providers (AWS, Render, Neon, etc.)

We do not sell data. We do not share data for advertising.

5. Data Retention

We retain data only as long as needed for:

  • active subscriptions
  • legal compliance
  • fraud prevention

Creators may request data deletion at any time.

6. Data Security

GuildPass uses:

  • TLS encryption
  • key-scoped tokens
  • hashed/secure storage
  • restricted production access
  • server-side environment variables
  • least-privilege access

We follow Stripe and Discord security recommendations.

7. Your Rights

You may:

  • Access your data
  • Request deletion
  • Request correction
  • Request export (GDPR)
  • Opt out of emails

Email: support@guildpass.app

8. Children's Privacy

We do not provide services to children under 13. We do not knowingly collect data from minors.

9. CCPA Notice (California)

California users may:

  • Request details about categories of data collected
  • Request deletion
  • Request disclosure of third-party sharing

GuildPass does not sell data.

10. International Transfers

Data may be processed in the U.S. We use standard contractual clauses when required.

11. Updates

We may update this Privacy Policy periodically.