Privacy Policy

1. Data controller

KalunBot is the controller responsible for processing your personal data. Contact: soporte@kalunbot.com.

2. Data we collect

• Email (when you register)
• Encrypted password (never in plain text)
• Payment data (processed by Stripe — we do not store it)
• Technical information on bot usage (logs, license key, activation dates)
• For VIP subscribers only: Discord ID and public username, collected when you link your account via the official Discord OAuth. They are used solely to assign you the VIP role on our server. If you unlink Discord or cancel your subscription, we delete this data within 30 days.

3. Purpose

• Providing the service (authentication, licenses, support)
• Processing payments and sending invoices
• Operational communications (service changes, technical support)
• Email marketing (only if you give your explicit consent)

4. Legal basis

Performance of the contract (subscription) and your consent (marketing).

5. Third parties with whom we share data

• Stripe — payment processing (PCI-DSS compliant)
• Resend — sending transactional emails
• Railway — hosting of our backend infrastructure
• Discord — only for VIP subscribers, to assign the role on the server (official OAuth2 linking)

6. Your rights (GDPR)

You have the right to access, rectify, erase, object to, and port your data. To exercise them: soporte@kalunbot.com. You may also file a complaint with the AEPD (Spanish Data Protection Agency).

7. Retention

We retain your data for as long as you keep your account active and for the period legally required after its cancellation.

8. Security

We apply technical and organizational measures to protect your data: encryption in transit (TLS), password encryption (bcrypt), signed JWT tokens, and restricted access to the infrastructure.