SUPREO
Back to home

Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how SUPREO (“we”, “us”) collects, uses, and protects personal data when you use our Discord bot and web dashboard (the “Service”). We act as the data controller for this processing. We are committed to handling your data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data we collect

  • Account data — when you sign in with Discord, we receive your Discord user ID, username, display name, avatar, and email address, to create and secure your dashboard session.
  • Server configuration — the settings you configure for Discord servers you manage (ticket panels, categories, roles, tags, blocked users, and related options).
  • Ticket data — to operate tickets, we store ticket messages and their author identifiers and timestamps, attachment links, satisfaction ratings, internal staff notes, and records of who opened and closed each ticket.
  • Moderation data — when a server uses the honeypot or the scam-picture filter: the account caught, what it posted and the action taken. Pictures posted in a server are checked automatically against known scams and are not stored; for a picture identified as a likely scam, or as a possible one held for review, we keep a fingerprint (a short code from which the picture cannot be rebuilt) and, for review, a small thumbnail for up to 14 days.
  • Billing data — paid plans are processed by our payment provider, Polar. We store a customer identifier, subscription identifier, plan, status, and renewal date. We never receive or store your payment-card details.
  • Whitelabel bot — if you use the Whitelabel Bot add-on, your bot token is stored in encrypted form and used only to run your bot.
  • Technical data — limited logs necessary to operate and secure the Service.

2. How we use your data

  • to provide and operate the ticket Service and the dashboard;
  • to process subscriptions and manage your plan;
  • to secure the Service, prevent abuse, and troubleshoot;
  • to respond to your support requests;
  • to comply with legal obligations.

3. Legal bases

We process personal data on the following GDPR legal bases: performance of a contract (to provide the Service you request); our legitimate interests (to keep the Service secure and functioning); compliance with a legal obligation; and, where relevant, your consent (which you may withdraw at any time).

4. Sharing & sub-processors

We do not sell your personal data. We share data only with providers that help us run the Service:

  • Discord — the platform the Service runs on;
  • Polar — payment processing for paid plans;
  • MongoDB Atlas — database hosting;
  • our server hosting provider, for operating the Service.

These providers process data on our behalf under appropriate agreements. We may also disclose data where required by law.

5. International transfers

We aim to process data within the European Union. Where a provider processes data outside the EU, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect it.

6. Data retention

We keep personal data for as long as needed to provide the Service — for example, while your account is active and while the bot is present on your servers. Ticket records are retained so that history and logs remain available to you. When you remove the bot or ask us to delete your data, we delete or anonymize it within a reasonable period, except where we must retain it to meet a legal obligation.

7. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased;
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw consent where processing is based on it.

You can download your data and delete your account yourself from the Account page of the dashboard (Privacy & data). Deleting your account removes your account, sign-ins and Discord connection; closed tickets and audit entries are kept for the servers they belong to, with your name, avatar and Discord ID removed. For anything else, contact us at contact@supreo.xyz. You also have the right to lodge a complaint with your local data-protection authority — in France, the CNIL.

8. Security

We use technical and organizational measures to protect your data, including encryption of sensitive credentials such as Whitelabel bot tokens and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your data against unauthorized access.

9. Children

The Service is not directed to children below Discord’s minimum age requirement, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide reasonable notice.

11. Contact

For any privacy question or request, contact us at contact@supreo.xyz.