Discord User IDs — to identify you within the Service and associate your configuration with your account;
Discord Server (Guild) IDs — to associate bot configuration with a specific server;
Discord Channel IDs — to deliver notifications to the correct channel;
Command usage metadata — such as timestamps of commands, for service stability and abuse prevention.
Keywords or phrases — used to match and trigger notifications;
URLs or web resources — used to monitor changes and generate alerts;
Other notification preferences — such as filters, thresholds, and delivery options.
Performance of a contract — to provide the Service you have requested;
Legitimate interests — to operate, maintain, and improve the Service, prevent abuse, and ensure security;
Legal obligation — where processing is required to comply with applicable law;
Consent — where you have explicitly consented to specific processing activities (you may withdraw consent at any time).
Deliver and personalise the NotifyMe Service;
Process payments and manage subscriptions;
Detect, investigate, and prevent fraudulent or abusive activity;
Respond to user support requests;
Improve the Service and develop new features;
Comply with legal obligations.
Active account data is retained for the duration of your use of the Service;
Configuration data (keywords, URLs, preferences) is deleted upon your request or when you remove the bot from your server;
Billing records are retained as required by Portuguese and EU tax and accounting law (typically 10 years);
Log data for security and abuse prevention is typically retained for 90 days.
Stripe — for payment processing (see Section 2.3);
Discord — your interactions with the bot are subject to Discord's Privacy Policy;
Infrastructure providers — hosting and database providers operating within the EU or under adequate data protection safeguards;
Law enforcement or regulatory bodies — where required by applicable law or legal process.
Right of access — to request a copy of the personal data we hold about you;
Right to rectification — to request correction of inaccurate or incomplete data;
Right to erasure ("right to be forgotten") — to request deletion of your data, subject to legal obligations;
Right to restriction of processing — to request that we limit how we process your data;
Right to data portability — to receive your data in a structured, machine-readable format;
Right to object — to object to processing based on legitimate interests;
Rights related to automated decision-making — we do not make solely automated decisions with significant legal effects.
