Privacy Policy

Effective August 11, 2026. This page describes the primary categories of information Submitt uses to operate the service.

Account information

Submitt stores information received through Discord OAuth such as Discord user ID, username, avatar and email when Discord provides it. OAuth tokens are stored encrypted by the application.

Community and workflow data

Submitt stores licensed Discord server identifiers, configuration, ticket/application records, audit events, transcripts when enabled, health diagnostics and workflow settings needed to provide the product.

Billing

Stripe processes subscription checkout and payment details. Submitt stores Stripe customer/subscription identifiers and synchronized entitlement status; payment card data is not stored in the Submitt database.

Retention and deletion

Server owners can configure operational retention periods, export server data and use the authenticated purge controls available in the dashboard. Some billing/account records may need to remain for legitimate operational or legal purposes.

Security

Submitt uses access controls, encrypted OAuth secrets, webhook signature validation, rate limits and audit logging as part of its application security model.

Contact

Use the Support page for privacy-related questions. The final published policy should be reviewed against the operator’s actual jurisdiction, subprocessors and retention requirements before launch.