Privacy Policy

1. Introduction

This Privacy Policy explains how Orasty collects, uses, and protects information when you use our website, Panel, Dashboard, bots, and related services. Orasty is initially offered in the United States, Canada, and the United Kingdom.

2. Information we collect

Depending on the features you use, Orasty collects:

Discord information - your Discord user ID, username, avatar, and banner, obtained when you sign in with Discord;
Roblox information - your Roblox user ID, username, and avatar, if you choose to connect a Roblox account;
Server and moderation data - servers you create or join, roles, permissions, shift and duty records, and punishment logs (verbal warnings, warnings, kicks, bans, and custom log types) that staff create in the Panel;
Staff infractions and leave - infractions staff give each other (type, reason, whether it can be appealed, who issued it, and whether a Discord message and role changes went through), and leave of absence requests (dates, reason, decision and any note);
Discord server data - when a server manager adds the Orasty bot: the Discord server's ID and name, the names and IDs of its roles and text channels, and Discord user IDs, usernames and nicknames of members the bot acts on (see Section 6);
Verification records - which of your Discord and Roblox accounts are linked, and which servers you verified in, when, and how;
Images and customised messages - banners and footer images that server managers upload (or paste from Discord) for bot messages, and the text of the messages they customise;
Usage and diagnostic data - time spent using Orasty, and bugs or errors encountered, used to help us fix and improve the service; and
Security and payment logs - where applicable (see Section 7).

3. How we use information

Create and maintain your Orasty account;
Authenticate and verify your identity;
Connect your Discord and Roblox accounts;
Provide Orasty's features and services;
Maintain server and staff-management functionality;
Prevent unauthorized access;
Detect and investigate abuse, fraud, or security incidents;
Maintain and improve Orasty;
Process payments where applicable;
Communicate important service-related information; and
Comply with applicable legal obligations.

We do not sell your personal information.

4. Legal basis and applicable law

We process personal information under legal bases recognized by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including consent, contractual necessity (providing the service you asked for), and legitimate interests such as security and fraud prevention. Where Canada's Anti-Spam Legislation (CASL) applies to a message we send you, we will comply with it, including honoring unsubscribe requests. Where you are located outside Canada, the applicable privacy laws of your own country (including the United States and United Kingdom) may also apply and, where they grant you additional rights, those rights are available to you as well.

5. Information sharing

We do not sell personal information. Information may be processed by service providers (such as hosting and infrastructure providers) when necessary to operate, secure, or maintain Orasty, and may be disclosed where required by law. When you use Discord or Roblox features, the information needed for that feature is exchanged with Discord and Roblox, which have their own privacy policies. Server managers and staff of a server you join can see what Orasty shows them about you in that server (for example your username, roles, shifts, logs and infractions).

6. The Orasty Discord bot and your Discord server

When a server manager adds the Orasty bot to a Discord server, the bot works with the following. Orasty never reads what people write in messages: it does not use Discord's Message Content intent.

Commands you run - when you use a command such as /ssu, /infract, /loarequest, /afk or /verify, Orasty receives your Discord user ID, the server and channel, and the options you typed. Commands check your Orasty account and permissions, never your Discord roles alone.
AFK - if you use /afk, Orasty stores your reason, when you went AFK, your nickname before the change, and, for each person who mentions you, their Discord user ID, the channel and message ID (so the welcome-back message can link to it) and the time. To do this Orasty only sees which people a message mentions, not its text. This is deleted when you come back, and automatically after 30 days at the latest.
Verification - if you verify, Orasty links your Discord account to the Roblox account you connected, gives and removes the roles the server chose, and may change your nickname to the format the server chose (using your Discord and Roblox usernames and display names). A one-time verification link is stored only as a hash and expires after 15 minutes. Verified accounts stay linked until you unlink Roblox or delete your account.
Roles and nicknames - for infractions and verification, Orasty adds or removes Discord roles the server manager chose, and records which roles it changed so they can be undone if an infraction is revoked.
Direct messages - Orasty may send you a DM about you: an Infraction Notice, the decision on your leave request, or a verification confirmation. If your DMs are closed, nothing else is tried.
Banners and footers - images a manager adds to bot messages are stored on Orasty's servers and shown to everyone who sees that message. Replaced images are deleted after a short grace period, and all of a server's images are deleted when the server is deleted.

The managers of a Discord server decide which of these features are on. The Discord server's owner can remove the bot at any time, and Orasty then stops acting there.

7. Data retention

Your information is stored securely for as long as your Orasty account exists.
If you delete your Orasty account, we remove your information, but may retain it for up to one week after deletion where necessary for legal purposes.
AFK status is removed when you return, and in any case after 30 days. Expired verification links are deleted within a day. Infractions and leave requests stay with the server they belong to until the server or your account is deleted. When a server is deleted, its data and uploaded images are deleted with it.
We may keep certain security logs - such as payment records and security/audit logs - for up to 90 days for legal purposes and security investigations, even after account deletion.

8. Data security

We use reasonable safeguards to protect information from unauthorized access, alteration, or disclosure. However, no online service can guarantee complete security.

9. Your choices and rights

You may unlink your Roblox account or update your profile information at any time from Account Settings. You may contact us to ask about information associated with your account or to request deletion, subject to the retention periods described in Section 7. Depending on where you live, you may have additional rights under applicable provincial, state, or national privacy law.

10. Intellectual property

Orasty's own branding, design, and code are protected under the Copyright Act and the Trademarks Act (Canada) and equivalent laws elsewhere. Nothing in this policy grants you rights to Orasty's intellectual property beyond what's needed to use the service as intended.

11. Children's privacy

Orasty requires users to be over the age of 13. We do not knowingly collect information from anyone under 13; see our Terms of Service for how we handle age concerns.

12. Changes to this policy

We may update this Privacy Policy from time to time, especially during this beta period. Continued use of Orasty after changes take effect means you accept the updated policy.

13. Contact

Questions about this Privacy Policy can go to our official support server or [email protected].