Privacy Policy

Last updated: July 12, 2026.

1. Who processes the data

The team responsible for Hayley Clark decides how data is processed to operate the bot and website and acts as controller where applicable. For some features configured by server administrators, responsibilities may vary according to each party's purposes and decisions.

Privacy questions and data-subject requests may be submitted through the official Hayley Clark server.

2. Data we may process

2.1. Discord account and authentication

• Discord account ID, username, avatar, and email address;
• the server list available through OAuth authorization, used to verify participation in the official server and provide related features;
• access and refresh tokens stored in the authenticated session to maintain login and access authorized resources.

You may revoke Hayley Clark's authorization in Discord's authorized-app settings.

2.2. Bot use and server settings

• user, server, channel, role, ticket, and transaction IDs;
• command, moderation, automation, economy, and Premium settings;
• activity statistics, progression, XP, balances, inventory, rewards, and history required to prevent abuse;
• message or interaction content when an enabled feature depends on it, such as commands, XP, moderation, support, or automation.

2.3. Website, security, and support

• IP address for certain operations, along with date, time, and technical usage logs;
• a strictly necessary login-session cookie configured for a maximum of seven days;
• information voluntarily provided in profiles, reports, requests, and support interactions;
• ticket transcripts that may contain messages and attachments submitted during support.

2.4. Purchases and payments

• order and payment identifiers, plan, amount, currency, status, duration, coupon, and payment type;
• Discord ID and email when required to create and associate an order.

Complete payment-method details, such as a full card number, are not stored directly by Hayley Clark; processing is performed by the payment provider.

3. Why we use this data

Data is processed to:

• authenticate users and maintain sessions;
• execute commands and provide requested features;
• save settings, profiles, progress, economy data, and Premium benefits;
• process, confirm, reconcile, and support purchases;
• provide support and retain transcripts required for service;
• detect spam, fraud, abuse, multiple accounts, incidents, and Terms violations;
• correct failures, maintain security, and comply with legal obligations.

4. Legal bases

Depending on the context and applicable law, processing may rely on performance of the Terms of Service or purchase-related steps, compliance with legal or regulatory obligations, regular exercise of rights, legitimate interests in operating and protecting the Services, or consent where required. When relying on legitimate interests, we consider necessity and the data subject's rights and expectations.

5. Who may receive the data

We share only what is necessary for the purposes described, including with:

• Discord: authentication, bot operation, servers, roles, interactions, and platform APIs;
• Mercado Pago: payment creation, processing, confirmation, and possible refunds;
• infrastructure providers: bot and website hosting, databases, transcript storage, and network services;
• public authorities or third parties: when necessary to comply with law or a valid order, protect rights, or investigate fraud and incidents.

Some providers may process data outside Brazil. In those cases, we seek reputable services and mechanisms compatible with applicable law. We do not sell personal data.

6. Retention and deletion

We retain data only as long as necessary to provide the Services, fulfill this Policy's purposes, prevent fraud, resolve disputes, and comply with legal obligations. The website session is configured for a maximum of seven days but may end earlier through logout, expiration, or revocation.

Account, economy, moderation, transaction, order, and ticket records may be kept while the account or feature is active and afterward for periods required for security, exercise of rights, and legal compliance. Where appropriate, data will be deleted or anonymized once its purpose ends. Backups may remain for a limited additional period until securely overwritten.

7. Security

We use reasonable technical and administrative measures to reduce unauthorized access, alteration, disclosure, or destruction, including access restrictions and protection of communications and credentials. No internet-connected service is immune to incidents. If a relevant incident occurs, we will take measures and make notifications required by law.

Hayley Clark never asks for your Discord password or personal token. Do not send passwords, tokens, complete card details, or other secrets through tickets or support.

8. Data-subject rights

Within the limits of Brazil's General Data Protection Law (LGPD), you may request:

• confirmation of processing and access to data;
• correction of incomplete, inaccurate, or outdated information;
• anonymization, blocking, or deletion of unnecessary or unlawfully processed data;
• information about sharing and, where applicable, portability;
• deletion of consent-based data, withdrawal of consent, and information about its consequences;
• objection to unlawful processing and review of decisions made solely by automated means, where applicable.

To protect you and others, we may request reasonable information to verify identity and connection to the data. Requests may be limited where retention is required for law, security, fraud prevention, or exercise of rights. You may also complain to Brazil's National Data Protection Authority or consumer-protection agencies.

9. Children and adolescents

The Services may be used only by people who meet Discord's and applicable law's minimum age. Where necessary, processing children's or adolescents' data will involve their legal guardian and observe their best interests. Contact us if you believe data was processed improperly.

10. Cookies and similar technologies

The website uses a strictly necessary session cookie for authentication, security, and navigation continuity. In this version, we do not identify first-party behavioral-advertising cookies or sale of profiles. If new technologies are added, this Policy will be updated and consent requested where required.

11. Third-party services and links

Discord, Mercado Pago, and linked websites have their own policies and responsibilities. We recommend reading them. This Policy does not control processing performed directly by third parties outside Hayley Clark's Services.

12. Changes to this Policy

This Policy may be updated for legal, technical, or operational changes. The date above will be updated and reasonable efforts made to communicate material changes before they take effect. The latest version will remain available here.

13. Contact

For questions, complaints, or exercise of rights, use the official Hayley Clark server and state that your request concerns privacy. Do not publish personal data in open channels.

© 2026 Hayley Clark — All rights reserved.