Data Processing Agreement

Ticket King processes minimal data to provide Discord ticket bot functionality. Important points regarding our data processing:

• No Storage of User Credentials: We do not collect or store Discord user credentials on our website or servers.
• Server Configuration Only: The only data stored relates to server configuration settings which are input by server administrators.
• Ephemeral Message Storage: In designated support channels, Ticket King may process and temporarily store user message content and associated metadata (message IDs, user IDs/avatars, timestamps) solely to generate and deliver ticket transcripts.

The limited data we process may include:

• Discord server IDs
• Channel IDs for designated support channels
• Role IDs
• Custom ticket configurations
• Custom message templates
• Webhook URLs (if provided by server administrators)
• Ephemeral message content and metadata (message IDs, user IDs/avatars, timestamps)

Configuration data is stored while the Ticket King bot remains installed. Upon removal, it is retained for 30 days before permanent deletion, unless you request immediate deletion. Ephemeral message content and metadata are retained only for the lifetime of the ticket plus a brief archival period not exceeding 30 days after ticket closure, unless a user requests earlier deletion.

Users may request deletion of their ticket transcripts and associated metadata at any time. We comply with deletion requests promptly and confirm removal upon completion.

Server administrators have full control over their configuration data and can modify or delete this information at any time through our dashboard or by contacting us.

We implement encryption, access controls, and regular security assessments to ensure the security of configuration data and ephemeral content.

Ticket King may use third-party service providers, such as hosting providers, under strict agreements to implement appropriate technical and organizational measures.

When processing occurs outside the European Economic Area (EEA), we ensure protection through standard contractual clauses or adequacy decisions.

In the unlikely event of a data breach, we will notify affected parties without undue delay. Given the limited nature of data, notifications to authorities are generally not required.

Our processing activities are low-risk and focused on minimal data; a formal DPIA is not required under applicable regulations.

We assist server administrators in fulfilling their own data protection obligations by providing necessary information and support.

If you have any questions, please contact us at [email protected].