Data Collection & Protection
Cartcord functions as a software platform for sellers. To operate digital stores, coordinate checkouts, auto-deliver files, and map server roles, we process specific Discord and checkout datasets. This policy outlines exactly what we store and how we keep it safe.
1. Datasets We Process
Discord Identity
- Discord User ID
- Username & avatar URL
- Primary email address
- Server ownership state
Store Config
- Server settings
- Products & stock counts
- Coupon codes
- Role associations
Commerce Records
- Order receipts & IDs
- Payment statuses
- Refund logs
- Delivery traces
Usage Signals
- Dashboard audit events
- Slash command invocations
- Error logs
- Performance timings
2. Security Controls & Safekeeping
Encrypted Secrets
PayPal Client IDs and Secrets are fully encrypted before database insertion.
Least Privilege
Server-scoped data is isolated by user role and Discord administrator permissions.
Audit Telemetry
All deliveries, configurations, and refunds log user actions to avoid fraud.
No Data Sales
We do not sell or rent customer identifiers to any marketing platforms.
OAuth Authentication
Sellers log in securely via Discord OAuth. We never handle passwords.
Active Monitoring
Real-time threat and API health scanning to detect anomalous behaviors.
3. User Data Rights
Export Data
Request a downloadable copy of all store products, orders, and logs associated with your account.
Correct Data
Modify incorrect profile information, Discord role mappings, or PayPal connection settings via the dashboard.
Delete Account
Request complete deletion of your account and bot configurations, subject to regulatory retention rules.
Restrict Scope
Request temporary access freezes on your server metrics during ongoing billing or payment disputes.
Retention & Data Erasure Policy
We store account credentials, API tokens, configuration details, and orders only as long as necessary to facilitate delivery logs, process active seller subscriptions, audit server roles, and fulfill financial or fraud compliance audits. Once retention TTL passes, credentials and identifiers are hard-deleted.