Privacy

Privacy Notice

This page explains how CoreRP Systems processes data when operating the website, dashboard, and Discord bots.

Who we are

Discord data: Discord ID, username, avatar, server/guild ID, roles, and permissions in the server.
Server data: server name, icon, bot settings, module settings, action logs, and technical metadata needed to operate the service.
Content submitted to the service: for example settings, panel text, ticket forms, answers, and support communications.
Payment and license data: plan, product, order or subscription status, amount, currency, billing period dates, Polar customer/order/subscription ID, and server/guild ID. We do not store card numbers or CVC.
Website technical data: IP address, cookies needed for login and security, browser type, and basic server logs.
Product usage data: limited pseudonymous analytics about use of the dashboard and service features, such as session and interaction events, setup and purchase progress, feature performance, plan, and server size. This analytics does not include message content or command inputs.

Contract performance: login, dashboard operation, bots, purchased features, plans, and access control.
Legal obligations: accounting, tax, refund, dispute, security, and statutory obligations where applicable.
Legitimate interests: service security, abuse prevention, bug fixing, basic logging, and protecting rights.
Consent: only where we explicitly ask for it. You may withdraw consent at any time.

We use Polar Software Inc. as payment provider/Merchant of Record.
Polar processes checkout, payment, taxes, invoices, subscriptions, customer portal access, refunds, and payment disputes under its own terms and privacy policy.
We receive only the data needed to activate and manage the plan, such as payment status, product, amount, currency, order ID, subscription ID, and billing metadata.

We share data only with providers needed to operate the service, such as hosting, database, authentication, Discord, and Polar.
We do not sell data to third parties.
Transfers outside the EU/UK are protected by appropriate contractual or legal mechanisms where needed.

Server configurations are kept while you use the service or until deleted.
Operational and security logs are kept only as long as needed for security, incident handling, and reliability.
Payment, license, and billing data is kept as needed to provide the service and then as required for accounting, tax, refund, dispute, or legal obligations.

Depending on applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing.
Where processing is based on consent, you may withdraw consent.
Send requests to privacy@corerp.systems. We may ask for reasonable identity or server-authority verification.
You may complain to your local data protection authority.

We use HTTPS, access controls, server-side secrets, and reasonable technical safeguards.
The service is intended for Discord server administrators and follows Discord age requirements.
If you believe a minor is using the service in violation of those rules, contact us.