Privacy
What data Echow processes, why, with whom, for how long, and how to exercise your rights.
Last updated:
- Website analytics work without cookies.
- Echow never sees your card number: payments go through Stripe.
- You can ask to access, correct or delete your data. You get an answer within 30 days.
Who is responsible
The controller is [publisher name], [postal address].
For any question about your data, write to [contact email address].
This page covers the Echow website, dashboard and bot. It follows the Swiss Federal Act on Data Protection (FADP) and, for people in the European Union, the General Data Protection Regulation (GDPR).
The data we process
The data depends on how you use Echow.
Website visitors
- aggregated visit statistics, such as page views, measured without cookies;
- technical errors: when a page crashes, a report shows the page, the browser and the error message.
To understand how the website is used and fix errors. [Legal basis: legitimate interest, to be confirmed].
Dashboard admins
- your Discord ID, username and avatar, received when you sign in with Discord;
- the list of servers you manage;
- the settings you save for those servers.
To sign you in, show your servers and save their settings. [Legal basis: performance of the contract, to be confirmed].
Server members
- joins and departures: Discord ID and date (Welcome and Goodbye module);
- date of birth, only if the member adds it [with or without the year, to be specified] (Birthday module);
- PvP screenshots sent by members, and the results extracted from them (PvP leaderboard module);
- the Ankama profile the member links [list of information, to be specified] (Ankama profile module).
To run the modules turned on for the server. This data is only processed if the corresponding module is active. [Legal basis per module, to be confirmed].
Payments
- Payment details are entered and processed by Stripe. Echow never sees your card number.
- Echow receives from Stripe the customer ID, the chosen plan, the subscription status and payment dates [and the billing email address, to be confirmed].
To manage your subscription and keep the accounts. [Legal basis: performance of the contract and legal obligation, to be confirmed].
Who it is shared with
Echow uses the following providers. Each one only receives the data it needs for its role.
| Provider | Role | Location |
|---|---|---|
| Discord | Bot platform and dashboard sign-in | United States |
| Stripe | Subscription payments | [to be specified] |
| [AI provider] | Reading PvP screenshots to extract the results [image retention and use for training, to be specified] | [to be specified] |
| [analytics tool] | Visit statistics, without cookies | [to be specified] |
| [error tracking tool] | Technical error reports | [to be specified] |
| Infomaniak | Hosting Echow and its data | Switzerland |
When data is transferred outside Switzerland or the European Union, the transfer relies on recognized safeguards, such as standard contractual clauses.
How long it is kept
| Data | Period |
|---|---|
| Visit statistics | [duration] |
| Error reports | [duration] |
| Dashboard account and settings | As long as you use Echow, then [duration] after your last sign-in |
| Joins and departures | [duration] |
| Date of birth | Until the member removes it or the module is turned off |
| PvP screenshots | [deleted after reading, or duration] |
| PvP results | As long as the leaderboard exists |
| Ankama profile | Until the member unlinks it |
| Payment data | 10 years, as required by Swiss accounting law |
Backups
Data is also copied into backups, kept for [duration]. Deleted data disappears from backups by the end of that period at the latest.
When Echow is removed from a server, the data linked to that server is deleted after [duration].
Your rights
You can ask at any time for:
- access to your data;
- its correction;
- its deletion.
If you are in the European Union, you can also ask for processing to be restricted, object to it, or receive your data in a reusable format.
How to do it
- Write to [contact email address] with your request.
- Include your Discord ID so we can find your data. We may ask you to confirm that the account is yours.
- You get an answer within 30 days.
If you think your rights are not being respected, you can contact the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, the data protection authority of your country.
Updates
This page may change, for example if a provider changes. The date of the last update is shown at the top of the page. If there is a significant change, you are notified [on the dashboard or by email].