1. Data We Collect
When you use TicketByte, we collect only what is strictly necessary to provide the service:
Discord User ID
Identifies ticket creators and staff members. Required for all ticket operations.
Username & Avatar
Displayed in the dashboard and ticket transcripts. Fetched via Discord OAuth2.
Guild (Server) IDs
Identifies which server a ticket or configuration belongs to.
Ticket Content
Messages within ticket channels — only stored when transcripts are enabled by your server admin.
OAuth2 Tokens
Stored securely to allow dashboard login. Never exposed to other users or third parties.
Server Settings
Configuration you set via /setup or the dashboard (prefix, channels, roles, etc.).
Analytics Data
Aggregate counts of tickets opened/closed and commands used per day, per server.
We do NOT collect email addresses.
TicketByte authenticates users via Discord OAuth2 only. We never ask for, store, or process your email address. We do not send marketing emails, digest emails, or any unsolicited communications.
2. How We Use Your Data
- To create, track, and manage support tickets on your Discord server.
- To generate ticket transcripts and analytics for server administrators.
- To authenticate users logging into the web dashboard via Discord OAuth2.
- To enforce server configuration settings (e.g., blacklists, ticket limits).
- To improve the bot and diagnose bugs.
We do not use your data for advertising, do not sell it to third parties, and do not send emails of any kind.
3. Data Storage & Security
All data is stored in a MongoDB database. We use industry-standard security practices including:
- HTTPS for all web traffic.
- Session tokens stored as httpOnly, secure cookies.
- OAuth2 access tokens are stored in the database, not in browser storage.
- Database access is restricted to the application server only.
4. Data Sharing
We do not sell, trade, or share your personal data with third parties, except:
- Discord Inc. — We use the Discord API to authenticate users and send messages. Discord's own Privacy Policy applies to your Discord account.
- Legal requirements — We may disclose data if required by law.
5. Data Retention
We retain data for as long as your server uses TicketByte. When you remove the bot from your server, you can request full data deletion by contacting us in our support server. Ticket transcripts are retained for up to 90 days by default.
6. Your Rights
You have the right to:
- Access — Request a copy of the data we hold about you.
- Deletion — Request deletion of your data at any time.
- Correction — Request correction of inaccurate data.
- Portability — Request your data in a machine-readable format.
To exercise any of these rights, please contact us through our support server.
7. Cookies
TicketByte uses a single session cookie to keep you logged in to the dashboard. This cookie does not track you across other websites and is deleted when you log out or it expires (after 7 days). We do not use advertising cookies or third-party trackers.