Legal
Privacy Policy
Last updated 27 November 2025
We treat member data like production infrastructure. Encryption at
rest, strict access controls, and minimal withholdings are our
starting point—not the finish line.
1. Introduction
Viscra ("we", "our", "us") is built and operated in the United
Kingdom. We follow the Data Protection Act 2018 and UK GDPR when
handling any personal information that flows through the bot,
dashboard, or in-game integrations.
This document explains what we collect, why we keep it, and how you
can control or erase it. If anything is unclear, reach out via our
support server and we will walk you through it.
2. Information We Collect
Only the data required to run automation, synchronisation, and
moderation workflows is retained.
A. Discord information
- User identity: User ID, username, avatar,
discriminator.
- Server context: Shared guilds, roles, and
permissions.
- Interactions: Commands, buttons, and modal
payloads sent to the bot.
- Support data: Ticket channel messages and
transcripts (support server only).
B. Roblox information
- Identity: Roblox ID and username via OAuth/GameLink
or public APIs.
- Group data: Membership state and rank within
linked Roblox groups.
- Assets: Badge or game pass references when
specific automations need them.
C. Service & in-game data
- XP & EP: Stat values synced from connected
experiences.
- Configuration: Bindings, logging channels,
promotion requirements.
- Auth keys: Encrypted white-label tokens
and bot keys for game APIs.
- Moderation: Warnings, kicks, bans issued
through Viscra.
3. How we use information
- Synchronisation: Keep Discord nicknames and roles
aligned with Roblox data.
- Progression: Track in-game XP/EP and trigger configured
promotions or demotions.
- Access control: Unlock channels or dashboards once
verification steps pass.
- Support & moderation: Power ticket panels, retain
transcripts, and log staff actions.
- Integrity & safety: Detect abuse, comply with platform
terms, and improve reliability.
4. Storage & security
Data lives in encrypted databases with strict network rules.
Credentials and bot keys are stored salted and encrypted.
Access control: Only the bot owner and on-call engineers
can access raw records for maintenance. Server owners only ever see data
relevant to their own guild, never OAuth tokens.
5. Sharing
We do not sell data. Sharing only occurs when necessary to operate
the service:
- Cloud providers: Database, file, and hosting vendors
under contractual agreements.
- Platform compliance: Discord/Roblox trust & safety
if they request supporting evidence.
- Legal: Subpoenas or lawful governmental requests.
6. Your controls
- Unlink anytime: Run
/unverify to break
the Roblox ↔ Discord connection instantly. - Data erasure: The same command wipes XP, medals,
and verification data across every Viscra server.
- Server removal: Removing the bot pauses future collection;
request a purge to clear historical config.
7. Changes
We update this policy as Viscra evolves. When we do, this page
changes and we post a notice inside the support server.