Privacy Policy

1. Data Controller

The Service is operated by Qylo LLC, acting as data controller for the processing described in this Policy.

Registered office: 30 N GOULD ST, SOLE MBR, SHERIDAN, WY 82801 US

2. What We Process

We do not create local user accounts. We rely on Discord OAuth. We process:

Discord identifiers: user ID, server (guild) ID, channel ID, message ID.
Language preferences and aggregated usage statistics.
Ephemeral content: processed in memory only (not stored), except a temporary anonymous cache of repeated identical inputs (no link to a user).
Support tickets (deleted after resolution).
Payment data handled directly by Stripe (we receive status/metadata, never full card details).

3. Purposes & Legal Bases

We process personal data for the following purposes:

Provide the Service (Discord bot features). Legal basis: performance of the contract (use of the bot).
Payment / invoicing. Legal basis: contract and legal obligation (accounting).
Technical operation, security, abuse prevention. Legal basis: legitimate interest.
Service improvement. Legal basis: legitimate interest.
Website and product analytics (see section 4). Legal basis: consent in the EEA, the UK and Switzerland; legitimate interest elsewhere, where you can opt out at any time.
User requests (support / deletion). Legal basis: legitimate interest / legal obligation.

4. Cookies & Similar Technologies

Our website uses cookies and similar storage (such as local and session storage) in three groups:

Strictly necessary (always on): session cookie (Discord OAuth login), CSRF protection token, referral cookie, ryzz_consent (remembers your cookie choice for 6 months), ryzz_region (whether the stricter consent rules apply to your country, 30 days), NEXT_LOCALE (your language), __mp_opt_in_out_… (Mixpanel's record of whether analytics is on or off for you, 1 year) and, in local storage, ryzz_notice_seen (when you saw the cookie notice, so it is not shown on every visit, 6 months).
Analytics (with your consent where required): Google Analytics, loaded directly or through Google Tag Manager, to measure visits and sign-ups; Microsoft Clarity, for usage insights including session recordings and heatmaps; and Mixpanel, for product analytics (which pages and features are used and steps such as installing the bot or upgrading). When you are logged in, Mixpanel links this data to your Discord user ID and username. For marketing attribution we also use utm_journey (90 days): it remembers how you reached our website (for example the campaign link, ad or site that referred you, and the page you landed on) so that, when you log in with Discord, we can record which channels bring people to Ryzz. It is cleared at login, the same information is then kept with your account, and it is removed when you withdraw consent.
Error monitoring: Sentry collects technical error and performance data so we can keep the Service working. Legal basis: legitimate interest. Sentry session replay (a recording of the page with text and media masked) only runs with analytics consent.

In the EEA, the UK and Switzerland (or if we cannot tell where you are), analytics cookies and tracking only start after you click "Accept all". Everywhere else, analytics is on by default and you can opt out at any time. Without consent (before you accept in those countries, or anywhere after you decline, opt out or withdraw consent), Google Analytics and Microsoft Clarity may still receive limited data without cookies (for example that a page was viewed or a button was clicked).

Some product events, such as installing the bot, logging in or purchasing a subscription, are also sent from our servers to Google Analytics and Mixpanel. They are linked to your analytics identifiers (and, in Mixpanel, your Discord user ID) only if analytics is allowed for you as described above. Otherwise they stay in our own records or are sent without a personal identifier.

You can change your choice at any time with "Cookie settings": in the footer of our website pages or, in the dashboard and account pages, in the account menu (your profile picture at the top right). Withdrawing consent stops analytics cookies and tracking from then on (only the limited cookieless data described above may still be sent); you can also delete cookies in your browser settings.

5. Processors / Recipients

We use providers to operate the Service: Hosting / infrastructure, Payment (Stripe), Platform integration (Discord), AI APIs, Analytics (Google Analytics and Google Tag Manager by Google, Microsoft Clarity by Microsoft, Mixpanel) and Error monitoring (Sentry). Some of these providers process data in the United States. We do not sell your data.

6. Retention

Discord IDs & preferences: kept while you use the Service (deleted on request).
Technical logs: 12 months.
Ephemeral content: processed in RAM only, then discarded.
Payment / invoices: retained by Stripe and for legal accounting periods.
Support tickets: deleted after resolution.

7. Security

We apply reasonable measures: restricted staff access, TLS encryption in transit, provider‑level encryption at rest, monitoring and backups. No method of transmission or storage is 100% secure.

8. Your Rights

You may request access, rectification, deletion, restriction, portability, or object to processing by contacting us on our Discord server. We answer within one month and may verify your identity via your Discord account.

9. Changes

We may update this Policy. The latest version is posted on our website. Continued use after changes means you accept the updated Policy.