Privacy Policy

The following Privacy Policy, along with the Terms of Service (accessible at https://marvo.gg/terms), constitute a legally binding agreement (collectively referred to as "Agreement") between you ("User", "you" or "your") and Marvo ("we", "us", or "our").

This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you access and use our Discord bot, its website, dashboard, and other related services (collectively referred to as "Service" or "Platform"). It is important to review this Privacy Policy carefully to understand your rights, obligations, and how we handle your information.

Preamble

At Marvo, we are committed to safeguarding the privacy of our users and complying with all applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) in the European Union. We adhere to strict standards for the collection, use, disclosure, and protection of personal information to ensure that our users' privacy rights are respected at all times.

We only request personal information when it is essential to deliver our services effectively. Rest assured, all personal information is collected lawfully and with your explicit consent and awareness. Prior to using our Service, we encourage you to thoroughly review and agree to the terms outlined in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you shall not use the Service.

By using the Service, you consent to the collection and processing of your personal information as outlined in the Privacy Policy and Terms of Service. For more detailed information about our terms, please refer to our Terms of Service at https://marvo.gg/terms.

Furthermore, we want to reassure you that we do not participate in the sharing or selling of your personal information for advertising or marketing purposes. Additionally, we refrain from disclosing your personally identifying information to any third parties, except when required by law. Your privacy and confidentiality remain our utmost priority.

If you have any questions, concerns, or inquiries regarding our Privacy Policy, the handling of your personal information, or if you would like to exercise your data rights (such as requesting access to, updating, or deleting your data), please feel free to contact us at [email protected].

1. Data We Process

During the operation of the Service, we process personal and non-personal data temporarily to provide core functionality, maintain security, prevent abuse, and improve the Service. Processed data is typically ephemeral and deleted once processing is complete, unless it is also stored as described in Section 2 (Data We Store).

While we strive to describe all categories of processed data, certain information may be processed automatically as part of the normal operation of the Service.

1.1. User-Provided Data

We process personal and non-personal data you provide directly, such as information entered in forms or commands. This may include, but is not limited to usernames, email addresses, settings, and other data you submit to use the Service.

1.2. User-Uploaded Content

We may process content that you upload or submit through the Service, such as images and other files. This content is processed to provide the requested functionality, such as displaying uploaded images or enabling features, and may be stored as described in Section 2 (Data We Store).

1.3. Automatically Collected Data

We process data that is automatically collected while you use the Service, such as IP addresses, device identifiers, browser fingerprints, connection data, and usage data. This data is used to maintain security, prevent abuse, and improve the Service.

1.4. Discord Data

We process information received from Discord, including, but not limited to IDs, usernames, avatars, timestamps, and similar metadata necessary for the functionality of our Platform.

2. Data We Store

We store certain information information that you or Discord provide to us in order to deliver and maintain the Service. This information is necessary to operate our Discord bot, its website, dashboard, and other related services. We may use the data in order to improve the Service in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

2.1. Discord Identifiers and Metadata

We store identifiers and related metadata from Discord that are necessary to provide features and link your Discord account or server to your settings and preferences. This includes user IDs, server IDs, role IDs, channel IDs and message IDs.

We do not collect, process or store message content in any way at this time. We also do not store passwords, private messages, or other sensitive content from Discord.

2.2. Discord Account Information

If you use the website or dashboard and authenticate via Discord, we store:

• Your Discord username

• Your Discord avatar

These are used exclusively to personalize your dashboard experience and are not shared with third parties except as required to operate the Service.

2.3. Contact Information

If you provide an email address (e.g., for newsletters or account communication), we store this data for communication purposes. Emails are stored securely and used solely for service‑related correspondence or updates, with your explicit consent. You may unsubscribe from marketing communications at any time.

2.4. User-Uploaded Content

We may store content that you upload or submit through the Service, such as images or other files.

This content is stored only as necessary to provide the requested functionality, such as displaying uploaded images or enabling features.

We do not access, analyze, or use user-uploaded content for purposes unrelated to the operation of the Service.

Uploaded content may be stored using third party infrastructure providers as described in Section 6 (Data Sharing and Third Parties).

2.5. Device and Browser Information

In some cases, we may collect and store certain technical data to maintain the security and integrity of the Service, including:

• IP addresses

• Browser fingerprints

• User agents

We may store this information temporarily to prevent abuse, enable security features, and protect other users. Retention is limited to the period necessary for these purposes.

Rest assured, we use industry-standard encryption and hashing to ensure that your data stays safe. To learn more about how we protect your data, please read Section 9 (Data Security).

3. How We Use Data

We use the data we collect and process to operate, maintain, and improve the Service, as well as to provide a safe and personalized experience for our users. This includes, but is not limited to, the following purposes:

• Providing the Service

  Delivering the features you request, including bot functionality and dashboard access.

• Communication and Support

  Contacting users when necessary and providing assistance or resolving issues.

• Security and Abuse Prevention

  Protecting the Service, detecting and preventing fraud or other abusive behavior, and maintaining the integrity of our Platform.

• Improvement and Analytics

  Monitoring, analyzing, and improving the Service’s functionality, performance, and user experience.

• Personalization

  Tailoring features and content to enhance your experience with the Service.

• Legal Compliance

  In rare cases, processing data as required to comply with legal obligations or enforce our Terms of Service.

4. Legal Basis for Processing

We process personal data in accordance with the General Data Protection Regulation (GDPR) based on one or more of the following legal grounds:

• Performance of a Contract

  We process personal data where it is necessary to provide the Service requested by you. This includes operating the Discord bot, managing server configurations, and enabling access to the website and dashboard.

• Legitimate Interest

  We process personal data where it is necessary for our legitimate interests, provided that such interests are not overridden by your rights and freedoms. This includes maintaining the security of the Service, preventing abuse or fraudulent activity, and improving the functionality and performance of the Service.

• Consent

  We process personal data based on your consent where required by law. This includes activities such as sending marketing communications or newsletters. You have the right to withdraw your consent at any time.

• Legal Obligations

  We may process personal data where it is necessary to comply with a legal obligation, such as responding to lawful requests by public authorities or fulfilling regulatory requirements.

5. Data Storage and Retention

We have implemented procedures to securely delete or anonymize collected and stored data once it is no longer necessary for its intended purposes or required by law. These procedures ensure that data is effectively removed from our systems and cannot be recovered or accessed thereafter.

5.1. Retention by Data Category

• Discord Identifiers and Metadata

  Retained until a deletion request is made by the server owner. This allows the bot to maintain server configurations as long as the server uses the Service.

• Discord Account Information

  Usernames and avatars are automatically deleted one month after inactivity on our website or dashboard, or after a deletion request is made by the user.

• Contact Information

  Emails and other contact details are retained until you unsubscribe from our newsletter or request deletion.

• User-Uploaded Content

  Uploaded files are retained only for as long as they are necessary to provide the associated functionality. This includes cases where the content is linked to server configurations or other features across the Platform.

  Such content is regularly deleted when it is no longer needed (for example, when the associated server data is removed) or upon a valid deletion request by a user or server owner.

• Device and Browser Information

  IP addresses, browser fingerprints, and user agents are retained only for the period necessary to prevent abuse, maintain security features, and protect other users. You can request deletion of this information at any time.

5.2. Legal Obligations

In certain cases, we may be required to retain specific information for a longer period to comply with legal obligations, audits, or dispute resolution. Where this occurs, retention will be limited strictly to what is necessary under the applicable law.

5.3. Deletion Requests

As a user or a server owner, you have the right to request deletion of your personal or server data at any time by contacting us at [email protected]. To learn more about your rights under GDPR, please read Section 8 (Your Rights).

6. Data Sharing and Third Parties

6.1. Discord

Our Service relies on the Discord platform to function. When you use our Platform, certain data is exchanged between our Service and Discord via its API. This may include, but is not limited to:

• Various identifiers such as Discord user IDs, server IDs, role IDs, channel IDs and message IDs

• Account information such as usernames and avatars when using Discord authentication

• Commands, interactions, and other actions performed through the bot

This data exchange is necessary to provide core functionality, such as executing commands, managing server configuration, and other interactions.

Please note that Discord operates as an independent platform and processes your data in accordance with its own privacy policy. We do not control how Discord collects, uses, or stores your data outside of our Service.

For more information, please refer to Discord's Privacy Policy located at https://discord.com/privacy.

6.2. Service Providers

• Infrastucture and Hosting

  We use providers such as Hetzner and Amazon Web Services to host our servers, store uploaded files, and deliver content. These providers may process technical data such as IP addresses as part of delivering their services.

• Analytics and Monitoring

  We use analytics and monitoring tools such as Google Analytics, PostHog, and Sentry to understand how our Service is used and to identify and fix issues. These tools may process usage data, device information, and technical identifiers.

• Email Communication

  We use services such as Google Workspace, Amazon Web Services and Brevo to send and receive emails, including support and service-related communications.

• Security and Abuse Prevention

  We use hCaptcha to protect our Service from abuse and automated access. This may involve processing IP addresses, device-related information and behavioral data.

6.3. Legal Requirements

In very rare cases, we may disclose personal data where required to do so by law or where we believe such action is necessary to:

• Comply with a legal obligation

• Respond to valid requests by public authorities (e.g., law enforcement or regulatory bodies)

• Protect and defend our rights or property

• Prevent or investigate potential misuse of the Service

• Protect the safety of users or the public

Any disclosure will be limited to what is strictly necessary and in accordance with applicable laws. Where legally permitted, we will attempt to notify affected users before disclosing their data.

7. International Data Transfer

Some of the third party service providers we use are located outside the European Economic Area (EEA). As a result, personal data may be transferred to and processed in countries outside the EEA.

Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws. This includes the use of Standard Contractual Clauses approved by the European Commission or reliance on adequacy decisions where applicable.

If you would like more information about these safeguards, you may contact us at [email protected].

8. Your Rights

As a user of our services, you have certain rights regarding the privacy and security of your data under the General Data Protection Regulation (GDPR).

8.1. List of Rights

• Right to Access

  You have the right to request access to the personal data we hold about you. Upon request, we will inform you whether we process your personal data and provide details about the data we hold and how it is used.

• Right to Rectification

  You have the right to request that we correct or update any inaccurate or incomplete personal data we hold about you.

• Right to Erasure ("Right to be Forgotten")

  You have the right to request the deletion of your personal data under certain circumstances. Please note that we may retain certain information where required to comply with legal obligations or for legitimate business purposes.

• Right to Restriction of Processing

  You have the right to request that we restrict the processing of your personal data under certain conditions, for example if you contest the accuracy of the data.

• Right to Data Portability

  You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to have that data transferred to another service provider where technically feasible.

• Right to Object

  You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, unless we have compelling legitimate grounds to continue processing.

• Right to Withdraw Consent

  Where we rely on your consent to process personal data (such as for marketing), you have the right to withdraw your consent at any time.

• Right to Lodge a Complaint

  You have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been violated.

8.2. Exercising Your Rights

If you would like to exercise these rights, please feel free to contact us at [email protected].

9. Data Security

We are deeply committed to safeguarding the security and integrity of your data.

All data transmission between your device and our servers is fully encrypted using industry-standard protocols such as TLS/SSL, ensuring that your information remains confidential and protected from interception by unauthorized parties. Critical or sensitive data stored on our servers is encrypted at rest using robust encryption algorithms to provide an extra layer of security.

In the event of a data breach or security incident, we have established protocols and procedures to promptly respond to and mitigate the impact of such events. We continuously monitor our systems for any potential vulnerabilities, suspicious activities or unauthorized access attempts.

We are committed to maintaining transparency and promptly notifying affected users and relevant authorities, including Discord, in accordance with applicable laws and regulations in case of such an event.

If you would like to report a security incident or have any concerns or inquiries regarding the security of your data, please feel free to contact us at [email protected].

10. Cookie Policy

We use cookies to enhance your experience and ensure the functionality of our Platform. Cookies are small text files stored on your device when you visit our website.

By using the Service, you give consent to the use of cookies necessary for core functionality. These cookies are essential for providing you access to our services and enabling key features.

10.1. Types of Cookies

• Authentication Cookies (Mandatory)

  These cookies are necessary to provide access to the Service and maintain secure sessions, such as storing user tokens for login purposes.

• Third Party Cookies (Mandatory)

  Third-party services may set cookies to optimize website performance, enhance security, or provide content delivery. These cookies are subject to the privacy policies of the respective third-party providers.

• Analytics Cookies (Optional)

  We may use analytics cookies from third-party services to understand website usage and improve the Service. You have the right to withdraw your consent at any time.

10.2. Updates to the Cookie Policy

We reserve the right to update this policy to ensure legal compliance or enhance the Service. Before implementing any changes, a 7-day notice will be provided, and the notice will be posted on our official support Discord server located at https://discord.gg/marvo.

11. Children's Privacy

Our Service is not intended for individuals under the age of 13, and we do not knowingly collect, process, or store personal data from children under 13.

If we become aware that personal data from a user under the age of 13 has been collected or stored without appropriate authorization, we will take immediate steps to delete such information from our systems.

If you believe that a child under the age of 13 has provided personal data to us, please contact us at [email protected] so that we can investigate and take appropriate action.

12. Contact and Useful Resources

For your convenience, here are some useful links to all resources relevant to the Agreement:

• Marvo's Terms of Service: https://marvo.gg/terms

• Marvo's Privacy Policy: https://marvo.gg/privacy

• Discord's Terms of Service: https://discord.com/terms

• Discord's Privacy Policy: https://discord.com/privacy

• Discord's Community Guidelines: https://discord.com/guidelines

If you have any questions, concerns, or inquiries, please feel free to reach out to us:

• Official Support Email: [email protected]

• Official Support Server: https://discord.gg/marvo