1. Who we are
1.1 This Privacy Policy explains how TicketGenius, a company registered in the Republic of Cyprus (TicketGenius, we, us), processes personal data when you use the TicketGenius Discord bot, the website at https://ticketgenius.vercel.app and the associated dashboard (together, the Service).
1.2 Unless stated otherwise in section 3, we are the controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (GDPR). You can contact us about any data protection matter at hello@ticketgenius.ai.
1.3 We have not appointed a data protection officer, as we are not required to do so. Please direct all data protection enquiries to the address above.
2. What data we process and why
2.1 Logging in to the dashboard
When you log in to the dashboard with Discord, we receive from Discord your Discord user ID, username, avatar and the list of servers you are a member of or manage, as permitted by the authorisation you grant. We use this data to identify you, to show you the servers you can configure and to check your permissions.
Legal basis: performance of the contract with you under our Terms of Service (Art. 6(1)(b) GDPR).
2.2 Operating the bot on a server
When the bot is added to a server, we process server data such as the server ID and name, channel and role IDs, and the configuration set in the dashboard. When tickets are created, we process ticket data such as the Discord user IDs and usernames of participants, ticket messages, attachments, timestamps and transcripts.
Legal basis: performance of the contract with the server owner (Art. 6(1)(b) GDPR) and, for server members who are not parties to that contract, our legitimate interest and that of the server owner in providing a functioning support system on the server (Art. 6(1)(f) GDPR).
2.3 Website and technical data
When you visit the website or dashboard, our hosting provider automatically processes technical data such as your IP address, browser type and version, the pages requested, and the date and time of access. This is necessary to deliver the website, ensure its security and stability, and detect and prevent misuse.
Legal basis: our legitimate interest in the secure and stable operation of the Service (Art. 6(1)(f) GDPR).
Optional web analytics: If you allow it, Vercel Web Analytics records aggregated page views and technical information such as the page visited and browser type without analytics cookies. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time using Privacy settings.
2.4 Contacting us and reports
When you contact us by email or report content, we process your email address, the content of your message and any data you provide, in order to answer your request or handle your report.
Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR), the performance of the contract where your request relates to it (Art. 6(1)(b) GDPR), and compliance with legal obligations where we must handle reports of illegal content (Art. 6(1)(c) GDPR).
2.5 No automated decision-making
We do not use your data for decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. We do not sell your data or use it for advertising.
3. Role of server owners
3.1 Server owners and administrators decide whether to use the Service on their server, which channels it operates in and who can view tickets and transcripts.
3.2 To the extent we process ticket data on behalf of a server owner, we act as a processor under Art. 28 GDPR and process that data only to provide the Service. The server owner is then responsible as controller for its own use of the data, including access by its staff to tickets and transcripts. Server members who wish to exercise their rights regarding ticket data may contact the server owner or us; we will assist where needed.
4. Cookies
4.1 We use cookies that are strictly necessary to keep you logged in to the dashboard, protect your session and remember your privacy choice. These cookies do not require your consent.
4.2 We do not use cookies for analytics, tracking or advertising. Your choice about optional analytics is stored in a necessary preference cookie for up to six months across TicketGenius subdomains. You can change it using Privacy settings. You can delete or block cookies in your browser settings, but you may then be unable to log in to the dashboard.
5. Recipients
5.1 We share personal data only where necessary to provide the Service, in particular with the following categories of recipients:
Discord Inc., which operates the platform the bot runs on and provides the login. Discord processes your data under its own privacy policy as an independent controller.
Hosting and infrastructure providers, such as Vercel Inc. for the website and dashboard and Neon for the database, which process data on our behalf as processors under Art. 28 GDPR.
Authorities and courts, where we are legally required to disclose data.
5.2 We may share aggregated or anonymised information that does not identify you, for example usage statistics.
6. International transfers
Some of our providers are located in, or may access data from, countries outside the European Economic Area, in particular the United States. Where no adequacy decision under Art. 45 GDPR applies, including certification under the EU-U.S. Data Privacy Framework, we rely on the standard contractual clauses adopted by the European Commission (Art. 46(2)(c) GDPR). You can request a copy of the relevant safeguards at hello@ticketgenius.ai.
7. Retention
7.1 We keep personal data only as long as necessary for the purposes described above:
Ticket data and transcripts are kept as long as the bot is used on the server, unless they are deleted earlier by the server owner or administrators.
Server configuration is kept as long as the bot is used on the server.
Account data from the Discord login is kept as long as you use the dashboard.
Technical log data is kept only as long as necessary for the security and stability of the Service.
Emails and reports are kept as long as necessary to handle the request and any follow-up.
7.2 When data is no longer needed for these purposes, we delete or anonymise it, unless we are required by law to retain it. You can request erasure of your data at any time (section 9).
8. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted transmission (TLS) and restricted access to our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights
9.1 Under the GDPR you have the right to:
obtain access to your personal data (Art. 15);
have inaccurate data rectified (Art. 16);
have your data erased (Art. 17);
restrict the processing of your data (Art. 18);
receive your data in a structured, commonly used and machine-readable format and have it transmitted to another controller (Art. 20);
object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21).
9.2 To exercise your rights, contact us at hello@ticketgenius.ai. We may ask you to verify your identity, for example by confirming your Discord account. We will respond within one month, which may be extended where permitted by law.
9.3 You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is the Commissioner for Personal Data Protection of the Republic of Cyprus.
10. Children
The Service is not directed at children. We do not knowingly process personal data of persons who do not meet the minimum age required by Discord in their country. If you believe that a child has provided us with personal data, please contact us at hello@ticketgenius.ai and we will delete it.
11. Third-party websites
The Service may contain links to websites operated by third parties, including Discord. This Privacy Policy does not apply to them. Please read the privacy policies of those websites.
12. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to the Service or to the law. We will inform you of material changes at least 30 days before they take effect, for example via the website, the dashboard or our Discord support server. The current version is always available on our website.
13. Contact
TicketGenius
Republic of Cyprus
Email: hello@ticketgenius.ai