Privacy Policy

1. Responsibility and contact

The individual provider operating under ARX determines processing purposes for accounts, security, customer relations and its own payment records. Server administrators choose modules, channels and logs; ARX carries out those instructions. Legal roles depend on the particular processing. Contact server staff about server decisions/settings, or [email protected] about ARX’s data processing.

2. Data processed

• Discord ID, username/display name, avatar, server/channel/role IDs, membership/permission details, language and session information.
• Depending on enabled modules: message content and attachment information, violations/evidence, punishment points/appeals, ticket content/transcripts, member notes, administrator actions and configured logs.
• XP and invitation relationships, join events, music request/play history, optional profile information and birthday day/month. Not every category is processed on every server.
• Connected bot tokens/integration keys, support correspondence, security/access records and IP information where available.
• Discord/server information linked to purchases, payment-provider customer/transaction/subscription references, amount, currency and payment/refund status. Full card details are processed in the payment provider’s checkout, not stored in ARX’s payment ledger.

Do not assume ARX never stores messages: moderation, ticket and log features may retain content depending on configuration. Do not enter unnecessary sensitive information, passwords or others’ confidential information.

3. Purposes and legal bases

We process data for authentication/authorisation, service delivery, automation, support and troubleshooting. Applicable bases include contract formation/performance where the person is a contracting party; necessary and balanced legitimate interests for security/fraud prevention; legal obligations for accounting and lawful authority requests; and consent for genuinely optional processing requiring it. Server administrators must separately establish the appropriate basis for member data.

Without necessary identity/permission data, login or the relevant module may not work. Optional information is not required. Reading this policy or using the service is not blanket consent to all processing.

4. Recipients and integrations

Necessary data may be shared with Discord, authorised server staff at configured destinations, the payment provider handling your transaction, hosting/network/security/support infrastructure providers and authorities making lawful requests. Server administrators choose public channels and log destinations.

The payment provider may act as an independent controller for its payment processing. Review the privacy notice identified at checkout or in your receipt. Discord and selected integrations have their own policies. When AI is enabled, necessary prompts/channel context may be sent to the provider you select using your API key; review its data use/retention terms.

5. International processing

Discord, payment providers and selected external services may process data in different countries. Cross-border transfers depend on the service used. The transfer basis and safeguards required by applicable law must be established separately; using the service does not replace required safeguards or consent. Contact support for recipient, processing-location and transfer information.

6. Retention and deletion

No single period applies to all data. Account/configuration records support the service; server events, moderation evidence and tickets are retained with regard to the enabled feature’s purpose, administrator settings, disputes and necessary legal periods. They should be deleted or de-identified when no longer needed.

Purchase attempts in ARX’s payment ledger not linked to a verified payment are cleared after 30 days; IP information in that ledger is removed after 180 days. These periods do not apply to all infrastructure logs or financial records. Payment evidence, financial records and entitlements may be retained longer for accounting, fraud prevention and legal claims.

The dashboard deletion tool deletes supported personal ARX records or clears identity fields; a keyed one-way marker may remain to prevent automatic re-collection. It does not instantly erase all server data, payment records, backups or messages already published on Discord. Review its scope and request assistance for remaining records/backups.

7. Cookies and preferences

The arx_ui_locale language cookie lasts about one year; the arx_oauth_state login security cookie lasts 10 minutes. The arx_panel_session cookie defaults to 12 hours; configuration permits 1–168 hours and the session may expire earlier. Interface preferences may also be stored locally in your browser. These support language, security and session functions.

You may delete/block cookies in your browser; login and preferences may be affected. Third-party checkout services and external integrations have their own cookie disclosures.

8. Security and voice

Bot tokens and authorisation data using ARX’s encrypted credential mechanism are encrypted at rest. Authorised access and security measures are applied; absolute security cannot be guaranteed. Rotate compromised tokens/keys with the provider immediately.

Browser Voice can relay audio between Discord and an authorised browser when explicitly connected; the microphone is sent to Discord when enabled. This feature does not record/archive voice. Voice join/leave event logs differ from audio content and may depend on enabled settings.

9. Your rights

Depending on applicable law, you may have rights to information/access, correction, deletion, restriction, portability and objection. You may object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Ask relevant server staff for human review of automated moderation decisions.

Use the dashboard data controls or contact [email protected]. Reasonable identity verification may be required; never send tokens or passwords. Requests are handled within applicable legal deadlines. You retain rights to complain to Türkiye’s data protection authority (KVKK), your local data protection authority and other competent bodies.

10. Age and updates

The service is for users meeting Discord’s minimum age in their country. Contact us if you believe data of a person below that age is processed. This notice may change as practices change; material updates will be appropriately communicated. The date above identifies this version.