Privacy policy
Dispatch is a Discord ticket and forms bot. It lets the members of a Discord server open support requests and fill in forms, and lets the server’s staff handle them.
Who is responsible
The hosted Dispatch service is operated by Haxurus ("we"). Contact: [email protected].
The administrators of each Discord server decide whether to add Dispatch and how to configure it; we process the data to provide the service to them. If you are a member of a server that uses Dispatch, you can also contact that server’s administrators.
Data we process
From the Discord servers where the bot is installed:
- server, channel and role identifiers and names, and the server’s Dispatch configuration (categories, panels, forms, staff roles);
- for every ticket: the user who opened it, the staff members who claimed, handled or closed it, its category, status, priority, timestamps and the answers to the category’s questions;
- the messages of a ticket channel and of its private staff thread, only when a transcript is generated (at close or on request), so that the conversation can be archived;
- form answers, staff notes, close reasons, ratings and their optional comments, and blacklist reasons;
- technical records needed for anti-spam: ticket-opening attempts and their timestamps;
- for servers with a paid plan: the plan, the identifier of the Discord subscription and when it ends, as provided by Discord. Payments are handled entirely by Discord: we never receive card or payment details.
Dispatch does not read messages outside ticket channels and staff threads, and only notes the time of the last activity while a ticket is open.
When you sign in to the dashboard with Discord: your Discord user ID, username, avatar and the list of servers you belong to (scopes identify and guilds), plus a log of the changes you make in the panel with a one-way hash of your IP address.
Dispatch does not collect members’ online status or activities (games, music, custom status).
Technical data: our web server and Cloudflare, which protects and delivers the site, process IP addresses and request data to deliver pages and prevent abuse.
Why we process it
- to open, route and manage tickets and forms, and to post transcripts, logs and leaderboards to the channels chosen by the administrators;
- to let authorised people sign in to the dashboard and manage their servers;
- to keep the service secure, prevent abuse and enforce these terms.
Under the GDPR the legal basis is the legitimate interest of server administrators and of the operator in providing support to their communities and running a secure service (Art. 6(1)(f)), and the performance of the service requested by dashboard users (Art. 6(1)(b)).
How long we keep it
- Tickets, transcripts and staff notes: for the retention periods chosen by the server’s administrators in the dashboard, up to the maximum of the server’s plan; without a retention period they are kept for that maximum.
- Form answers: until the server’s administrators delete them from the dashboard, or while the bot is in the server.
- When the bot is removed from a server, all of that server’s data is deleted 30 days later, unless the bot is added again in the meantime.
- Dashboard sessions: 8 hours.
- Database backups: up to 14 days, encrypted.
How we protect it
Transcripts, form answers, staff notes, close reasons, rating comments, blacklist reasons and session data are encrypted at rest with AES-256-GCM. The bot asks for no Administrator permission, and the bot, the API and the website each have their own database permissions. The code is open source, so these measures can be verified on GitHub.
Sharing
We do not sell data and we do not use it for advertising or profiling. Data is shared only with the providers needed to run the service: Discord (the platform the bot works on, which also sells and bills the paid plans), Cloudflare (network delivery and protection) and our hosting provider. Transcripts and logs are posted only in the channels configured by each server’s administrators, and to the ticket’s author when the server enables it.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its processing and to receive a copy of it, by writing to [email protected]. You have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).
Dispatch is meant for Discord users who meet Discord’s minimum age requirements.
Changes
We will update this page when the way we process data changes, and the date at the top will change accordingly.