Privacy & Data Policy

1. CATEGORIES OF DATA COLLECTED

We operate under a strict Data Minimization Protocol. We do NOT collect personal real-world identifiers (such as legal names, home addresses, payment card details, or personal IP logs). The data collected is strictly limited to:

1.1 Discord Guild Data:

Discord Guild (Server) Unique Identifier (Guild ID).
Administrative configuration parameters set via slash commands (e.g., override permission flags).

1.2 Roblox Integration Data:

Target Roblox Group Unique Identifier (Group ID).
Encrypted Roblox Open Cloud API Key Payload.

1.3 Transactional Audit & Telemetry Logs:

Discord User ID of the command executor.
Target Roblox User ID (e.g., target of rank change, demotion, promotion, or join request).
Command execution timestamps.
Command action type descriptors (e.g., "promote", "set_rank", "requests_accept").
Optional moderator-supplied reason strings.

2. CREDENTIAL STORAGE & CRYPTOGRAPHIC ISOLATION

2.1 Encryption at Rest: All Roblox Open Cloud API keys supplied during the setup process are cryptographically encoded prior to persistent database serialization. Raw, plaintext API keys are NEVER written to disk or stored in unencrypted form.

2.2 Volatile Transient Processing (RAM): API keys are loaded and decrypted in volatile execution memory (RAM) strictly for the precise duration required to construct and transmit authorized HTTPS requests to Roblox Open Cloud endpoints. Immediately upon receiving the API response, the decrypted runtime object reference is destroyed and marked for immediate garbage collection.

3. PURPOSE OF DATA PROCESSING

We process collected data exclusively for the following operational purposes:

Authenticating and routing API transactions between your Discord Guild and your designated Roblox Group.
Verifying administrative permissions and preventing unauthorized access to group management commands.
Generating audit log feeds within designated Discord channels to track group administrative history.
Enforcing global blacklists and preventing automated system exploitation or abuse.

4. DATA SHARING & THIRD-PARTY DISCLOSURE

We do NOT sell, rent, trade, or monetize any collected user telemetry or configuration data under any circumstances.

Data is shared exclusively with necessary infrastructure providers strictly for service execution:

Roblox Corporation: API request payloads (containing decrypted API keys in HTTP headers) are transmitted directly to official Roblox API endpoints (apis.roblox.com / groups.roblox.com) to execute requested group actions.
Discord Inc.: Embed responses, command feedback, and audit log updates are transmitted through official Discord Webhook and Gateway channels.
Database & Hosting Infrastructure: Encrypted records are hosted on secure, isolated database servers protected by environment-isolated access controls.

5. DATA RETENTION & CRYPTOGRAPHIC ERASURE

5.1 Retention Duration: Guild configuration data (including stored encrypted API keys) is retained only for as long as the Application remains installed in your Discord Guild or until overwritten.

5.2 Data Erasure Procedures:

(a) Re-executing setup configuration and replacing configuration data immediately overwrites and purges the previous encrypted API key entry from the active database.

(b) Kicking or removing the Application from your Discord Guild invalidates host routing records and flags associated database records for permanent deletion.

(c) Guild Administrators may request an immediate manual purge of all stored guild telemetry by contacting the development team via official support channels.

6. SECURITY & COMPLIANCE

We implement multi-layered administrative, technical, and physical security measures designed to protect your data against unauthorized access, alteration, disclosure, or destruction. However, users acknowledge that no transmission method over the internet or electronic storage infrastructure is 100% secure, and Rankify cannot guarantee absolute, unhackable security against third-party zero-day exploits.

7. POLICY AMENDMENTS

We reserve the right to modify or update this Privacy Policy at any time. Any changes will become effective immediately upon updating the policy revision date. Continued usage of the Application after published updates constitutes acceptance of the revised Privacy Policy.