Privacy Policy
What we collect, why, and what we never do with it.
Last updated the private beta
What we collect
- From Discord, when you sign in: your user ID, username, display name, avatar and email address.
- The Discord servers you own, including their name, icon and approximate member count.
- What you do on DisVault: listings, conversations, offers, orders, reviews and support requests.
- Financial records: invoices, ledger entries, withdrawals and the payout address you enter.
- Technical records: a hashed form of your IP address, your browser user agent, and session timing.
We store a hash of your IP address rather than the address itself. It is used for rate limiting and abuse investigation, and cannot be reversed back into an address.
What we use it for
- Confirming you own the servers you list.
- Running orders, counting delivery, and settling payment.
- Sending notifications you have not turned off.
- Preventing fraud, abuse and duplicate payouts.
- Meeting our own record-keeping obligations for financial transactions.
What is public
Your profile at /@username shows your display name, handle, bio, the servers you have listed, and statistics calculated from completed orders. You can make your profile private in settings.
Your email address, Discord ID, balances, payout address, order history and support conversations are never shown on a public page.
Who we share it with
- Discord, when we act on your behalf to verify a server or create an order invite.
- Our payment provider, to create invoices and send payouts.
- Our email provider, to deliver notifications you have enabled.
- Law enforcement, where we are legally required to.
We do not sell your data, and we do not run advertising trackers.
How long we keep it
Account and profile data is kept while your account exists. Financial records are kept longer, because a ledger is the record of what everyone was owed and cannot be selectively erased without destroying its integrity.
After you close an eligible account, personal profile and Discord data is scheduled for anonymization after the retention period shown in your account settings.
Your choices
- Turn off email and Discord notifications in settings.
- Make your profile private in settings.
- Ask us for a copy of your data, or for your account to be closed.
- Revoke DisVault’s access from your Discord account settings at any time.
Contact
Privacy questions go to support@disvault.com, or through support.
This document is a private-beta draft and is being reviewed before general release. If anything here is unclear, ask us at support rather than assuming.