Privacy Policy

Last updated: February 23, 2026

1. Introduction

Welcome to Role Upgrade ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, Discord bot, and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you sign in via Discord OAuth, we receive your Discord user ID, username, avatar, and email address from Discord.
  • Payment Information: When you make purchases or set up seller accounts, payment details are processed by our third-party payment processors (Stripe and PayPal). We do not store full credit card numbers on our servers.
  • Seller Information: If you register as a seller, we collect information necessary to facilitate payouts, including your Stripe Connect or PayPal account details.
  • Communications: If you contact us for support, we may retain the content of those communications.

2.2 Information Collected Automatically

  • Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and actions taken.
  • Device & Browser Data: IP address, browser type, operating system, and device identifiers.
  • Cookies & Similar Technologies: We use essential cookies for authentication and session management. We do not use third-party advertising cookies.

2.3 Information From Third Parties

  • Discord: We receive data from the Discord API, including guild (server) information, member lists, and role data necessary for managing subscriptions and role assignments.
  • Payment Processors: Stripe and PayPal provide us with transaction status, subscription events, and limited account information.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage subscriptions
  • Assign and manage Discord roles based on subscription status
  • Send transactional emails (receipts, subscription updates, renewal reminders)
  • Provide customer support
  • Detect and prevent fraud, abuse, and security incidents
  • Generate aggregated analytics for sellers (subscription metrics, revenue data)
  • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

  • Sellers: Sellers on our platform can see limited information about their customers, including Discord usernames, subscription status, and purchase history within their server.
  • Payment Processors: Stripe and PayPal process payments on our behalf and receive necessary transaction data.
  • Service Providers: We use third-party providers for email delivery (Resend), error monitoring (Sentry), and infrastructure hosting. These providers only access data necessary to perform their functions.
  • Legal Requirements: We may disclose information if required by law, regulation, or legal process, or if we believe disclosure is necessary to protect our rights, safety, or the safety of others.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or fraud prevention purposes.

Transaction records and audit logs may be retained for up to 7 years to comply with financial regulations and dispute resolution requirements.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/HTTPS)
  • API keys stored as SHA-256 hashes
  • Role-based access control for team members
  • Webhook signature verification (HMAC-SHA256)
  • Regular security reviews

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your personal data.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to certain processing of your personal data.

To exercise any of these rights, please contact us at [email protected].

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

The Service is not intended for individuals under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

10. Discord Disclaimer

Role Upgrade is not affiliated with, endorsed by, or sponsored by Discord Inc. "Discord" and the Discord logo are registered trademarks of Discord Inc. Our use of the Discord API is governed by the Discord Developer Terms of Service. We access Discord data solely through authorized API endpoints with permissions granted by server administrators and users via OAuth consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: