Privacy Policy

ClubTier ("we", "us") provides software that verifies Discord community members by email and manages their Discord roles based on their subscription status. This policy explains what personal data we handle, why, and what rights you have.

For questions about this policy or to exercise any right described here, contact privacy@clubtier.com.

This distinction matters, because it determines who is responsible for what under the GDPR.

Customers — the businesses and community owners who sign up for ClubTier. For their account data we are the data controller.

Members — the people who verify themselves in a customer's Discord server. For their data we act as a data processor on that customer's instructions. The customer is the controller and decides what is collected and why. If you are a member and want your data removed, contact the community you joined; we will assist them.

From customers: your email address, your name and avatar as provided by Discord when you sign in, your Discord user ID, and the configuration you create — connected servers, managed roles and verification questions.

From members: the email address they submit, their Discord user ID and username, and the answers to whichever questions the customer chose to ask — commonly first name, last name and phone number. We also store subscription status imported from the customer's CRM or payment provider.

Automatically: an activity log of verifications and role changes, and standard server logs. We do not use advertising or analytics trackers, and we do not sell personal data to anyone.

ClubTier does not request permission to read Discord messages and cannot see the content of your conversations.

To provide the service — verifying an email address, granting and removing Discord roles, and showing the customer their member list. Legal basis: performance of a contract.

To keep the service secure — rate limiting, abuse prevention, and the activity log that records who was granted access and why. Legal basis: legitimate interests.

To contact you — service messages such as verification codes and account notices. Legal basis: performance of a contract.

All personal data is stored in the European Union on encrypted, managed PostgreSQL. Verification codes are never stored in readable form — we keep only a cryptographic hash, so nobody, including us, can recover a code from the database.

We use a small number of providers, each only for the purpose listed:

• Supabase — database and authentication (EU region)
• Vercel — hosting for the website and dashboard
• Railway — hosting for the Discord bot
• Resend — sending verification emails (EU region)
• Discord — the platform the service operates on, governed by its own privacy policy

Where a customer connects GoHighLevel or Stripe, data flows between ClubTier and that service on the customer's instruction and under their agreement with that provider.

Activity logs are deleted automatically after 90 days.

Verification records are deleted once used or expired.

Member and lead records are kept while the customer's account is active, and deleted when the customer deletes them or closes their account.

Customer accounts are deleted within 30 days of a closure request, except where we must retain records for accounting or legal reasons.

If you are in the EU or UK you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive a portable copy. Customers can export all lead data as CSV from the dashboard at any time.

We respond to requests within 30 days. If you believe we have handled your data improperly you may complain to your national data protection authority — in Greece, the Hellenic Data Protection Authority.

We set one essential cookie to keep you signed in to the dashboard. There are no advertising, profiling or third-party tracking cookies, which is why you are not asked to accept any.

If we change this policy materially we will notify account holders by email before the change takes effect. The date at the top always reflects the current version.