Privacy Policy

Controller and processing roles

Adrian Ziroth is the controller for personal data processed to operate the website, accounts, subscriptions, security, and customer support.

For ticket messages, attachments, form responses, and transcripts, the operator of the relevant Discord server normally determines the purposes and means of processing. In that context, NexCore SupportDesk generally processes data on behalf of the server operator. Data subjects may contact the server operator first or contact us for assistance.

Data we process

• Discord account and profile data, including Discord ID, username, display name, avatar, and OAuth authorization data.
• Server and configuration data such as guild, channel, role, category, message IDs, and permissions.
• Ticket data, including messages, form responses, attachments, transcripts, ratings, assigned support agents, and timestamps.
• NexCore dashboard account data, NexCore ID, selected plan, and settings.
• Technical data such as IP address, browser/device information, sign-in times, security logs, and error logs.
• Support communications and payment/billing metadata. We do not store full card details where an external payment provider is used.

Sources of data

We receive data directly from users, server operators and their team members, through Discord APIs and OAuth2, and—where used—from payment, hosting, email, and security providers.

Purposes and legal bases

Contract and pre-contractual steps

Providing the bot, dashboard, ticket features, accounts, and subscriptions (Art. 6(1)(b) GDPR).

Legitimate interests

IT security, abuse prevention, troubleshooting, stability, product improvement, and legal claims (Art. 6(1)(f) GDPR).

Legal obligations

Tax, commercial, disclosure, and other statutory duties (Art. 6(1)(c) GDPR).

Consent

Only where processing is expressly based on freely given consent, which may be withdrawn for the future (Art. 6(1)(a) GDPR).

Processing on instructions

Ticket data may be processed on behalf of the relevant Discord server operator and under its instructions.

Discord and server operators

Use of the service requires a Discord account. Discord processes data under its own terms and privacy notice. Server operators choose ticket fields, retention settings, roles, and integrations. They are responsible for informing their members and ensuring a lawful basis for operating the ticket system.

Recipients and service providers

We disclose data only where necessary to operate the service, where a legal basis applies, or where law requires it. Recipients may include Discord, hosting and infrastructure providers, email providers, payment providers, security/CDN providers, professional advisers, and public authorities.

Hosting/infrastructure

ALL-INKL.COM – Neue Medien Münnich

Email

ALL-INKL.COM – Neue Medien Münnich

Payments

Stripe (Stripe Payments Europe, Limited and affiliated Stripe entities, depending on service and location)

Payment processing through Stripe

For paid plans, we use Stripe Checkout, Stripe Elements, Stripe Billing, and the Stripe customer portal. Data processed may include name, email address, billing address, tax information, selected plan, amount, currency, payment status, invoice and subscription identifiers, and technical fraud-prevention data.

NexCore does not store complete card or bank-account details. Depending on the activity, Stripe may act as an independent controller and/or processor. The responsible Stripe entity can vary by location and service.

International transfers

Some providers—particularly Discord or internationally operating infrastructure and payment providers—may process data outside the European Economic Area. Where required, we rely on an adequacy decision, Standard Contractual Clauses, or another lawful safeguard and assess supplementary protections.

Retention and deletion

Security and error logs

up to 30 days; longer retention takes place only where necessary to investigate security incidents, prevent abuse, establish or defend legal claims, or comply with legal obligations

Account and profile data

for the duration of the user account; after account deletion, the data is removed from active systems within 30 days unless continued retention is required by law or necessary for the establishment, exercise or defence of legal claims

Tickets, attachments, and transcripts

according to the Discord server owner’s configuration and applicable plan; deleted when the server owner deletes it, the service relationship ends, or continued storage is no longer required

Billing records

invoices and accounting records are retained for 8 years and commercial or business correspondence for 6 years, calculated from the end of the relevant calendar year; longer retention applies only where required by law

Backups are overwritten on a rolling schedule. Immediate removal of a single record from every backup may not always be technically possible; deleted data is not restored to production use and disappears during the normal overwrite cycle.

Cookies and local storage

NexCore uses strictly necessary cookies and comparable storage for secure sessions, sign-in, abuse prevention, page navigation, and saving your cookie choice. These functions are required to provide the requested service.

Comfort storage—especially the persistent language choice—is used only if you enable the “Comfort & language” category. Existing comfort storage is removed when you reject it. Analytics, marketing, and automatically embedded external media are currently not used.

Your choice is stored for up to twelve months in “nexcore_cookie_consent_v2” and can be changed or withdrawn at any time through “Cookie settings”. Renewed consent will be requested before additional non-essential services are activated.

Security

We use appropriate technical and organizational measures, including access restrictions, encrypted transmission, security-event logging, permission controls, and regular updates. No online service can guarantee absolute security.

Your rights

• Access to your personal data.
• Correction of inaccurate or incomplete data.
• Deletion or restriction where the legal requirements are met.
• Data portability where legally applicable.
• Objection to processing based on legitimate interests.
• Withdrawal of consent for the future.
• A complaint to a competent data protection authority.

For ticket data, a request may concern the relevant Discord server operator. We assist server operators with valid data-subject requests.

Children and young people

The service is intended only for people who meet Discord’s applicable minimum age and any higher age required by law. Server operators are responsible for age-appropriate community rules and any necessary parental permissions.

Automated decisions

We do not make solely automated decisions that produce legal or similarly significant effects. Automated spam, security, or abuse checks may flag activity, and significant actions can be reviewed.

Changes and contact

We update this Privacy Policy when features, providers, or legal requirements change. Material changes will be communicated in an appropriate manner. Privacy questions and requests may be sent to privacy@usenexcore.com.