Privacy Policy

1. About this policy

This policy explains what information Swivel ("we", "us") collects when you use the Swivel Discord bot, website, dashboard and Premium (the "Service"), how we use it, and the choices you have. By using the Service you agree to this policy and to our Terms of Service.

2. Information we collect

From your Discord account, when you log in to the dashboard: your Discord user ID, username, display name and avatar, and the list of servers you are in, with your permissions in each. We use the server list to show which servers you can manage.

Login records: when you first and last logged in to the dashboard. We don't store your IP address or your Discord login token.

Messages you send to Swivel: if you DM the bot, we keep the message for 90 days so our staff can answer support questions, then it's deleted automatically.

Roblox, if you choose to link it: your Roblox user ID, username and display name, and a history of accounts you have linked. We get these through Roblox's official login. We never see your Roblox password.

Server information, when Swivel is in a server:

• server settings and configuration made in the dashboard or with commands;
• moderation records, including cases, points, reasons, the members involved and the moderators who acted;
• activity logs for servers that turn logging on. Swivel posts these, which can include message content, edits, deletions, joins, leaves and role changes, in the log channel the server picks. We don't keep our own copy of the messages;
• messages that auto-mod checks. Swivel reads new and edited messages to apply the filters a server turns on, and doesn't store them;
• content members submit, such as application answers, giveaway entries, reminders and ban appeals. Applications record your Discord username and avatar with your answers;
• content server staff create, such as custom commands, auto responses, reaction roles, sticky messages and embeds.

Premium: which server has Premium, your plan and billing status, and Stripe customer and subscription IDs. Card details are handled by Stripe and never reach us.

Staff records: changes made in the dashboard and actions taken by Swivel staff, kept for accountability. Searches our staff make in the staff panel are deleted after 90 days.

What we don't do: we don't build profiles of people across servers, we don't link accounts by IP address, and we don't use anything we collect for advertising.

Cookies: one session cookie that keeps you logged in. We don't use advertising or third-party tracking cookies.

3. How we use it

We use this information to:

• run the Service and the features your server turns on;
• show you your servers and settings in the dashboard;
• verify Roblox accounts and give roles and nicknames;
• process Premium payments and manage subscriptions;
• keep the Service secure, prevent abuse, enforce our Terms, and run blacklists;
• answer support requests, fix problems and improve the Service;
• meet legal obligations and protect our rights and the rights of others.

Where a law requires a legal basis, we rely on providing the Service you asked for, our legitimate interests in running, securing and improving it, your consent where you give it (for example when linking Roblox), and legal obligations.

4. Who we share it with

We do not sell your information. We share it only:

• with the providers that run the Service for us: Discord, Roblox, Stripe, our hosting provider (Discloud), our database provider (MongoDB Atlas) and Cloudflare;
• with the staff of a server, through the features that server uses. For example, moderators can see cases and logs for their own server, never another server's;
• with Swivel's own staff, only as far as needed to give support, fix problems and enforce our Terms. Staff access is limited by role and every action is logged;
• when we believe it is needed to follow the law or a legal request, to enforce our Terms, or to protect the safety, rights or property of Swivel, our users or others;
• as part of a merger, sale, transfer or similar change involving Swivel.

5. How long we keep it

We keep information for as long as we need it for the purposes above. If Swivel is removed from a server, that server's settings and data are kept for 3 days in case it is added back, then deleted. A server's owner can also delete it at any time in Server settings. We keep a short record that Swivel joined or left a server. Messages sent to Swivel and staff searches are deleted after 90 days. We may keep moderation records, blacklist records and payment records for longer where we need them to prevent abuse, settle disputes or meet legal requirements. Copies can remain in backups for a limited time.

6. Your choices

• You can unlink Roblox at any time in Settings.
• Server owners can remove Swivel from their server and clear its settings.
• You can ask us for a copy of your information, or ask us to correct or delete it, in the support server. We'll respond as the law requires. We may keep information we need for the reasons in section 5, and we may need to confirm your identity first.

7. Security

We use reasonable measures to protect your information. No website, database or transmission over the internet is completely secure, so we can't guarantee the security of your information. You use the Service at your own risk.

8. Children

The Service is not meant for anyone below Discord's minimum age. If you believe a child under that age has given us information, contact us and we'll delete it.

9. International use

Our providers may store and process information in other countries, including countries with different data protection laws from yours. By using the Service you agree to this.

10. Changes to this policy

We may change this policy at any time by posting a new version on this page. Changes take effect when posted, and continuing to use the Service means you accept them.