Skip to content

Privacy Policy

Last updated: July 2026

Data Controller

The data controller responsible for your personal data is eNcrypt, a sole proprietor based in New Zealand, operating Vantom. For any privacy inquiry, contact us on Discord: @eNcrypt (see our support page).

Categories of Personal Data We Collect

  • Discord account identifiers (user ID, username, discriminator, avatar) for authentication and service delivery
  • Guild (server) IDs and server configuration you provide
  • Moderation records, tickets, form submissions, and support interactions you create or are referenced in
  • AFK status and highlight/keyword subscriptions
  • Economy account balances and transaction history
  • Payment information (processed by Stripe; card details are not stored by us)
  • Aggregate usage statistics (message counts, command usage) for analytics
  • Message content — to enforce moderation and AutoMod rules, process moderation commands, power keyword highlights, tags, and custom commands, we process message content in the servers where you have installed the bot. Message content is processed in real time and is stored only in the records described below: moderation records (including the reason for a moderation action) and closed ticket transcripts, which persist message bodies for 1 year and are deleted with the ticket.
  • Level/XP progression, invite-attribution records, and moderation records where you are the subject (not just the moderator)

Purposes of Processing

  • To provide and maintain the bot and dashboard service
  • To enforce server moderation rules and AutoMod settings configured by server administrators
  • To process payments through Stripe
  • To improve the service based on aggregate analytics
  • To secure the service (e.g. two-factor authentication)
  • To comply with legal obligations

Retention Periods

  • Moderation logs: 2 years (TTL-deleted automatically)
  • Tickets and transcripts: 1 year
  • Audit logs: 1 year
  • Economy transactions: 1 year
  • Analytics activity snapshots: 90 days
  • Stripe event log: 90 days
  • Guild data: retained until the bot is removed from the server or until you request deletion
  • Account data: retained until account deletion is requested

Sub-processors

  • Discord — authentication and service delivery
  • Stripe — payment processing
  • Sentry — error monitoring and crash diagnostics (server-side errors are always reported; browser-side diagnostics only after you accept the consent banner)
  • Our hosting provider — application servers and our MongoDB and Redis data stores, located in New Zealand

International Data Transfers

Personal data is processed in New Zealand and, where our sub-processors (Discord and Stripe) are located outside New Zealand (for example in the United States), we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards recognized under applicable data protection law.

Sale of Personal Information

We do not sell or share personal information for money or anything else of value, as those terms are used in the California Consumer Privacy Act (CCPA/CPRA), and we do not sell data of consumers known to be under 16.

Age and Consent

Under GDPR Article 8, where the processing is based on consent and the data subject is a child, the service may only be offered to children aged 16 or older, or with verifiable parental consent for those under 16. By using Vantom you confirm you meet this requirement.

Your Rights as a Data Subject

Subject to applicable law — including the New Zealand Privacy Act 2020 and, where relevant, the EU GDPR — you have the right to access, rectify, erase, and port your personal data. You can exercise these rights directly from your account page:

  • Access & portability: export your data as JSON from the account page
  • Erasure: permanently delete your account and associated personal data from the account page
  • Rectification: update your information via the dashboard or by contacting support

Cookies

We use encrypted, http-only cookies to keep you signed in to the dashboard and to remember small display preferences such as your theme choice. These are strictly necessary or preference-only, carry no tracking, and you can clear them at any time (clearing the session cookie signs you out).

With your consent, we also load privacy-respecting error analytics (Sentry) in the browser to diagnose crashes. This analytics cookie is set only after you accept it via the consent banner, and you can decline it without losing any service functionality. We do not use advertising or third-party advertising/tracking cookies.

Contact

For privacy inquiries or to exercise your data-subject rights, contact us on Discord: @eNcrypt or visit our support page. Organizations processing EU personal data may also request our Data Processing Addendum (DPA).