Privacy Policy

How ScriptVault collects, uses, and stores your information.

Draft — Alpha Operating Policy

This document is an operating draft for ScriptVault's public alpha. It has not been reviewed by a legal professional and does not constitute legal advice. It will be updated before broader public release.

1. Overview

This Privacy Policy describes how ScriptVault ("the bot", "we", "us") collects, uses, stores, and handles information when you or your Discord server uses the ScriptVault Discord bot.

ScriptVault is a Discord bot that helps servers build and manage their own private, server-owned GPC script libraries. Each server's library is isolated from all other servers.

2. Alpha Status

ScriptVault is in Controlled Public Alpha. Data collection practices may evolve. Retention periods are not yet fully defined. This Privacy Policy is an operating draft and has not been reviewed by an attorney. It will be updated before broader public release.

3. What ScriptVault Is

ScriptVault is a Discord bot. It operates within the Discord platform. ScriptVault is not:

  • A website that you log into with a separate account
  • A standalone service outside Discord
  • A global script marketplace
  • A cross-server platform

ScriptVault does not sell user data.

4. Information We Collect

Discord IDs

  • Guild ID: The numeric ID of every Discord server that uses ScriptVault.
  • User ID: Discord user IDs of members who upload, download, favorite, report, rate, or create collections.
  • Channel ID: IDs of channels configured for announcements and reports.
  • Role ID: IDs of roles configured as Library Manager or Upload Manager.

Script Metadata

  • Title, description, game category, feature tags, and other fields entered at upload.
  • Upload timestamp, approval status, approval history, and uploader user ID.
  • Download count and download timestamps.
  • Rating values.

Script Files

  • Uploaded .gpc files stored on the bot's host server, scoped per guild.
  • SHA-256 hash and normalized hash used for duplicate detection.
  • Approval records (who approved, when).

Member Activity

  • Download history (user ID + script ID + timestamp).
  • Favorite records (user ID + script ID).
  • Search history (query text + user ID + timestamp).
  • Collections and collection membership.
  • Reports submitted (reporter user ID + subject script + reason).
  • Ratings submitted (user ID + script ID + score).

Library Configuration

  • Guild configuration settings (library name, approval mode, channel and role IDs, plan/entitlement).
  • Import batch records.

Internal Logs

Standard application logs (errors, warnings) may include guild IDs, user IDs, and command context. Logs are used for debugging and are not shared publicly.

5. Guild Isolation Principle

All data collected by ScriptVault is scoped to the guild in which the interaction occurs. Data from Server A is never accessible to members, owners, or administrators of Server B. This is enforced at the database query level.

6. How We Use Information

  • To operate the ScriptVault bot and fulfill command requests.
  • To enforce plan limits and validate entitlements.
  • To track duplicate file uploads.
  • To populate analytics visible to guild administrators.
  • To support staff workflows (approval queues, report queues).
  • To debug errors and improve the service.

We do not use your data for advertising or sell it to third parties.

7. Staff Access

Viridex Systems staff may access guild data for debugging, incident response, or policy enforcement. Access is logged and limited to authorized personnel. Staff do not browse guild libraries for personal interest.

8. Third Parties

  • Discord: ScriptVault operates within Discord's platform. Discord's own Privacy Policy governs the data Discord collects. We receive only the data Discord sends us through the bot API.
  • MongoDB: Database used to store ScriptVault data. Data is stored in a database accessible only to Viridex Systems infrastructure.

No other third parties receive your data during the alpha period.

9. Data Retention

During the alpha period, formal data retention periods have not been fully defined. Library data is retained for as long as the guild has an active library. We will define formal retention policies before broader public release.

10. Data Deletion and Export

Server owners and administrators can request deletion of their guild's library data. Individual users can request deletion of their activity records. See the Data Request Policy for how to submit a request.

Library metadata can be self-exported at any time using /library export.

11. Security

ScriptVault uses reasonable technical measures to protect stored data. We do not claim that the system is fully secure. During the alpha period, not all security hardening is complete. Report security concerns through the ScriptVault Hub.

12. Children

ScriptVault does not knowingly collect information from users under 13 (or the applicable minimum age in their jurisdiction). ScriptVault operates on Discord, which has its own age requirements.

13. Policy Changes

This policy will change before broader public release. Material changes will be announced in the ScriptVault Hub. Continued use after changes constitutes acceptance of the updated policy.

14. Contact

For privacy questions or data requests, visit the Data Request Policy page or contact us through the ScriptVault Hub.

Effective date: [to be set before public listing]