Privacy Policy

1. Controller & contact

Veiltra operates the Service and is the controller of personal data processed for account, billing, and operations purposes unless a payment processor or Discord acts as an independent controller for their own platforms. Privacy requests: open a ticket in the Veiltra Discord or use in-dashboard support channels.

2. Scope

This policy applies to visitors, trial users, paid members, affiliates, and anyone who interacts with our Discord bots, website, or admin-linked tools. It does not cover Activision, Discord, payment networks, or third-party sites linked from our Service.

3. Information we collect

• Identity & account — Discord user ID, username, avatar URL, discriminator/global name, linked email if provided by Discord or checkout, role tags, and internal user ID.
• Subscription & billing metadata — plan tier, status, renewals, cancellations, invoices, payment provider customer/subscription IDs, limited payment method brand/last4 if returned by the processor. We do not store full card numbers or CVV.
• Service usage — region selection, queue joins/leaves, job/mode (e.g. 2box/3box), session timestamps, worker assignment events, party-code usage signals, favourites, and dashboard actions.
• Support & moderation — tickets, messages you send us, abuse scores, suspension reasons, admin audit notes, and Discord moderation actions tied to your membership.
• Referrals & affiliates — invite codes, click attribution, conversion events, commission accruals, and payout status.
• Technical & security — IP address, user agent, device/browser type, approximate location derived from IP, cookies/local storage tokens, logs, and rate-limit or fraud signals.
• Lobby guidance (optional) — voluntary lobby ratings or survey responses you submit, which may be aggregated or shown without identifying you where feasible.

4. How we collect it

• Directly from you (forms, Discord, checkout, support).
• Automatically via the website, APIs, bots, and workers (logs, cookies, telemetry).
• From Discord when you authorize OAuth or join our server.
• From payment processors (Whop/Stripe/etc., as configured) about subscription lifecycle events.

5. Purposes & legal bases

We process personal data to:

• Provide the Service — authenticate you, sync Discord roles, run queues/bots, operate the dashboard (contract / legitimate interests).
• Bill and account — charge, renew, cancel, reconcile payments, prevent chargeback fraud (contract / legal obligation / legitimate interests).
• Secure and moderate — detect abuse, sharing, spam, attacks, and enforce Terms (legitimate interests / contract).
• Support & improve — answer tickets, fix outages, analyze feature usage in aggregate (legitimate interests).
• Communicate — service notices, role changes, security alerts; marketing only where permitted (consent or legitimate interests, with opt-out where required).
• Comply with law — tax, accounting, lawful requests (legal obligation).

6. Sharing & processors

We do not sell personal information. We share data only as needed with:

• Hosting, database, logging, and CDN providers.
• Payment and subscription processors.
• Discord (for OAuth, roles, and server delivery of the product).
• Analytics or error-tracking tools if enabled.
• Professional advisers (legal, accounting) under confidentiality.
• Authorities when legally required, or to protect rights, safety, and the Service.
• A successor entity in a merger, acquisition, or asset sale, subject to this policy or notice.

Processors are instructed to process data only for our documented purposes and to apply appropriate security.

7. International transfers

Servers and vendors may be located outside your country. Where required, we use appropriate safeguards (such as contractual clauses or vendor certifications). By using the Service you understand data may be processed in the United States or other countries where our providers operate.

8. Retention

• Account & Discord linkage — while membership is active and a reasonable period after.
• Billing records — as required for tax, accounting, and dispute windows (often 7+ years where applicable).
• Operational logs (searches, queues, jobs) — typically 30–180 days unless needed longer for abuse, security, or disputes.
• Support tickets & audit trails — as needed for quality, safety, and legal defense.
• Aggregated/anonymized analytics — retained longer without identifying you.

9. Security

We use access controls, encrypted transport (HTTPS), least-privilege admin roles, and monitoring. No method of transmission or storage is 100% secure. You must keep Discord account credentials and recovery methods secure; we are not responsible for compromise of your Discord or payment accounts.

10. Cookies & similar tech

• Essential — session/auth tokens, security, load balancing.
• Preferences — UI settings if stored locally.
• Analytics — optional measurement of traffic and funnels (disabled or consented where law requires).

You can clear cookies/local storage in your browser; some features (login) may stop working.

11. Your rights

Depending on your location (e.g. EEA/UK GDPR, certain US state laws), you may have rights to access, correct, delete, restrict, or port personal data, object to certain processing, and withdraw consent. We may need to verify identity (typically via Discord) before fulfilling requests. Some data must be retained for legal, security, or billing reasons. You may lodge a complaint with a supervisory authority where applicable.

12. Children

The Service is not directed to children under 13 (or the higher age of digital consent in your region). We do not knowingly collect data from children. If you believe a minor used the Service, contact us to delete related data where required.

13. Automated decisions

We may use rules-based scoring (e.g. abuse or queue priority) to protect the Service. This does not create legal or similarly significant effects solely by automated means without human review available through support for contested suspensions.

14. Third-party game & platform data

Gameplay happens inside Call of Duty / platform accounts you control. We do not receive your full game telemetry from Activision. Lobby ratings are member-provided and may be inaccurate. Matchmaking remains the game’s responsibility.

15. Changes

We may update this policy by posting a new version with a revised “Last updated” date. Material changes may also be announced in Discord. Continued use after the effective date constitutes acceptance where permitted by law.

16. Contact

Privacy inquiries and data requests: Veiltra Discord support. Include your Discord username/ID and a clear description of the request.