Privacy Policy, Terms of Service & Data Notice
Master Operating Policy: ModMate operates as a multi-tenant Discord moderation, ticketing, verification, and community administration software platform. All Discord servers, communities, member portals, and staff dashboards operating under ModMate infrastructure are governed by this unified legal agreement. By accessing any ModMate bot, member portal, verification portal, or dashboard, you agree to these terms.
Platform Architecture & Data Governance
ModMate provides automated community infrastructure to independent Discord servers ("Communities"). To ensure maximum legal clarity under global data privacy regulations (including EU/UK GDPR):
- ModMate as Data Processor / Service Provider: ModMate develops, hosts, and provides the software tools, database storage, bot runtime, and dashboard user interfaces. ModMate acts strictly as a software platform and Data Processor on behalf of Community Administrators.
- Community Administrators as Data Controllers: The owner, administrators, and designated staff of each individual Discord community act as independent Data Controllers regarding the specific member interactions, support tickets, custom application questions, and moderation actions taken within their respective servers.
- Strict Multi-Tenant Data Isolation: All community configuration, moderation records, verification logs, and OAuth credentials are systematically partitioned into isolated tenant storage realms. No community has access to another community's records or private credentials.
Information We Process
To provide automated community verification, support ticketing, anti-raid protection, and moderation workflows, the Service processes the following categories of data:
| Category | Data Elements | Purpose & Legal Basis |
|---|---|---|
| Discord Identity Data | Discord User ID, username, global display name, avatar hash, account creation date, and guild role memberships. | Identity verification, community member authentication, and role-based access control. (Art. 6(1)(b) GDPR) |
| Encrypted OAuth2 Credentials | OAuth access tokens, refresh tokens, and authorized scopes (identify, guilds.join). |
Enabling automated member verification, anti-raid rejoining, and role restoration. Tokens are stored encrypted at rest. (Art. 6(1)(a) & (b) GDPR) |
| Ticketing & Inquiries | Support tickets, messages, uploaded attachment metadata, member reports, and staff complaints. | Facilitating community customer support and internal dispute resolution. (Art. 6(1)(f) GDPR) |
| Moderation & Enforcement Records | Infraction records (warnings, mutes, kicks, bans), infraction reasons, moderator identifiers, and audit trails. | Community safety, rule enforcement, anti-evasion, and operational accountability. (Art. 6(1)(f) GDPR) |
| Security & Audit Logs | Login events, IP addresses for security auditing, User-Agent strings, and dashboard action history. | Protecting accounts against compromise, investigating unauthorized actions, and platform defense. (Art. 6(1)(f) GDPR) |
Zero Data Brokering: ModMate does not sell, lease, rent, or trade user data or OAuth tokens to advertisers, data aggregators, or external commercial third parties under any circumstances.
Subscriptions, Payments & Strict No-Refund Policy
Certain premium features, including multi-server role synchronization, enhanced category limits, priority processing queues, and advanced rejoin automation, are offered via paid subscription plans ("ModMate Premium").
- Payment Processing: All payments, billing details, and invoicing are handled securely through our payment provider, Stripe Inc. ModMate does not directly store or handle raw credit card numbers or banking secrets.
- STRICT DIGITAL NO-REFUND POLICY: All purchases, subscription fees, upgrades, and renewal charges for ModMate Premium are strictly final and non-refundable. Because ModMate Premium provisions immediate server access, dedicated processing capacity, and live computational resources upon checkout completion, we do not provide refunds, partial credits, or pro-rated refunds under any circumstances.
- Express Waiver of Withdrawal Rights: If you are a resident of the European Union, United Kingdom, or any jurisdiction granting statutory consumer withdrawal / cooling-off periods (such as the EU Consumer Rights Directive), you expressly acknowledge, agree, and request that the digital service commences immediately upon purchase, and you hereby explicitly waive any statutory 14-day right of withdrawal.
- Subscription Cancellation: You may cancel future automatic renewals at any time via the Stripe Customer Portal accessible in your server's billing settings. Upon cancellation, your subscription remains fully functional until the end of the current prepaid billing period, at which point it automatically downgrades to the Free Tier without further charges.
- Chargebacks & Dispute Policy: Initiating an unauthorized chargeback or payment dispute without prior good-faith communication with ModMate administration results in immediate revocation of Premium access across all associated guilds and may lead to platform-wide blacklisting.
Community Protections, Limitation of Liability & Indemnification
To protect both ModMate and the diverse communities utilizing our software, the following legal protections govern all platform usage:
- Independent Third-Party Application: ModMate is an independent software tool and is not affiliated with, endorsed by, or sponsored by Discord Inc. All users and community administrators are solely responsible for ensuring that their server policies, automated actions, and member rules comply with the Discord Terms of Service and Community Guidelines.
- Service Provided "AS IS": ModMate is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express, implied, statutory, or otherwise. ModMate makes no guarantees regarding uptime, bot latency, continuous Discord API availability, or immunity from Discord rate-limits.
- Limitation of Liability: To the fullest extent permitted by applicable law, in no event shall ModMate, its founders, operators, or contributors be held liable for any direct, indirect, incidental, punitive, special, or consequential damages. This includes, without limitation, damages for loss of server members, channel or role misconfigurations, Discord platform bans or terminations, unauthorized access, server raid damage, or disputes between community members and staff.
- Community Administrator Indemnification: Community administrators, server owners, and licensees agree to defend, indemnify, and hold harmless ModMate and its operators from and against any and all claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) their server management or configuration; (b) any breach of Discord Terms of Service; (c) disciplinary or moderation actions taken against their community members; or (d) any third-party claims brought against their community.
Cookie Policy & Storage Transparency
ModMate maintains a minimal, zero-tracking cookie footprint:
-
Strictly Necessary Session Cookie: When authenticating via Discord OAuth2, the Service sets an encrypted first-party session cookie (
connect.sid). This cookie is strictly necessary to maintain your authenticated login session across requests. -
Security Flags: All authentication cookies are transmitted exclusively over TLS (HTTPS) with
HttpOnly,SameSite=Lax, andSecureattributes enabled. - No Advertising or Tracking Pixels: We do not employ third-party advertising cookies, cross-site beacons, marketing trackers, or external behavioral analytics.
Data Retention & Security Measures
- OAuth Token Encryption & Invalidation: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM. Tokens are automatically refreshed via background schedulers and revoked upon user account deletion or explicit authorization removal in Discord.
- Moderation & Enforcement Records: Infraction logs and active bans are retained indefinitely or until server administrator revocation to enforce community safety and prevent repeat violations.
- Audit Logs & Session Data: Security login logs and audit trails operate on automated FIFO (First-In, First-Out) rotation to prevent unnecessary perpetual storage.
Individual Privacy Rights (GDPR, UK GDPR & CCPA)
Users hold legal rights regarding their personal data, including the rights of access, rectification, portability, and erasure ("Right to be Forgotten"). Because Community Administrators act as Data Controllers for moderation and guild records:
- To request deletion of support ticket transcripts, applications, or role data within a specific server, members should contact the respective Community Administration through the Member Portal.
- To request platform-wide erasure of ModMate account data, or to report platform concerns, inquiries may be submitted via support ticket or via our official Discord support channel.
- Note on Security Exceptions: Active moderation infraction records (such as active bans) are retained under our overriding legitimate interest in community safety, fraud prevention, and platform integrity (Art. 17(3)(b) & (e) GDPR).
Children's Privacy & Age Requirements
ModMate is strictly not intended for or directed toward individuals under 13 years of age (or 16 years of age in territories where local law imposes higher digital consent thresholds), in strict alignment with Discord Terms of Service and COPPA. If we discover that personal data of a minor under the minimum legal age has been submitted without verified parental authorization, such information is immediately expunged.
Changes & Amendments
ModMate reserves the right to amend, update, or revise this unified Privacy Policy and Terms of Service as necessary to reflect infrastructure changes, legal rulings, or regulatory guidance. Notice of material updates will be posted on this page with an updated "Effective Date". Continued use of any ModMate service constitutes ongoing acceptance of these terms.