1. What we collect
| Data | Source | Why |
|---|---|---|
| Discord ID, username, avatar, email | Discord sign-in (OAuth) | Account identity, premium entitlement, contact |
| Subscription status, payment references | Tebex webhooks | Deliver what you paid for (we never receive card details) |
| AI prompts and usage counts | Your use of the AI Designer | Provide the feature, enforce daily limits, prevent abuse |
| Moderation records (bans, admin actions) | Staff actions | Keep the service safe |
| Basic technical logs (sign-ins, feature events) | Your use of the site | Security, abuse prevention, support |
We do not sell your data, run third-party advertising, or use tracking cookies. The only cookies we set are the session cookies needed to keep you signed in.
2. Where it goes
- Supabase hosts our database (subscriptions, usage counts, moderation records).
- Tebex processes payments under their own privacy policy.
- OpenAI processes AI prompts/images to generate designs under their own privacy policy; we don't control their retention.
- Discord: we log operational events (sign-ins, payment events, AI usage including prompts, admin actions) to a private, staff-only Discord channel for security and support purposes.
- Designs you create are stored in your browser, not on our servers, unless a future feature explicitly offers cloud saving.
3. Retention
- Account and subscription records are kept while your account is active and as needed for accounting/legal purposes.
- Operational logs are retained in our staff channel and database and pruned periodically.
- Ban records are kept as long as needed to enforce them.
4. Your rights
Depending on where you live, you may have rights to access, correct, or delete your personal data. To exercise them — including full account deletion — contact us at support@getmodul.app or via https://discord.gg/bZbnH6EAgZ from the Discord account in question. We will respond within 30 days. Note that deleting your data ends any active subscription benefits and that some payment records must be retained where the law requires.
5. Children
The service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child is using the service, contact us and we will remove the account.
6. Changes
We may update this policy; material changes will be announced on the site or Discord with a new effective date.