This policy applies to all personal information collected, submitted, or otherwise processed on or through Raidbots' website, Raidbots' Discord community (including the Discord server and Discord bot), or via email communications with Raidbots LLC ("Raidbots", "we", "our"), and such other products and services as we may make available from time to time through any other devices and platforms (collectively, the "Services").
Raidbots collects as little of your personal information (also referenced as "personal data" in this policy) as possible, uses that information to provide the services of the site, and only shares that information with third parties that assist in performing those services (e.g. sending notification emails that you request). We do not sell your information to third parties or share your personal information with third parties for commercial purposes (e.g. selling lists of email addresses).
To create an account on Raidbots, you must provide the following information:
Email address
Username
Password
This information is stored for as long as you have an account with Raidbots. Email addresses are used for logging in to the website, resetting your password, sending notifications that you request, and customer support services.
We store the results of simulations you request and summaries of that information for up to 30 days (sim reports are stored for 28 days, archives generated from the "Request Raw Data Archive" tool are stored for up to 2 days).
If you have a user account for the Services, Raidbots uses both "necessary" cookies and "preference" cookies on the website to keep you logged in, and to provide you with the Services that you have requested. For example, Raidbots uses browser LocalStorage to keep track of various settings/preferences over time.
Our servers store some technical information like IP addresses, browser, or other device information for a limited time as part of access logs - these are used to prevent fraud and abuse. In the future, we may use the IP address for geolocation to determine things such as default WoW region. Logs are retained for up to 3 months, and are subsequently deleted.
If you connect your Raidbots account with your Discord account, we store the read-only token that allows us to link your accounts when using the Raidbots Discord bot. This token is used to handle requests to the Raidbots Discord bot and to apply any rewards (such as "Skip-the-Line" rewards) or preferences that you have set on your Raidbots account. This data is stored for as long your Raidbots account and Discord account are connected.
The Raidbots Discord bot stores aggregate usage information (messages received, simulations run, etc). As with any Discord bot, all chat messages that are visible to the bot are inspected to determine if a user is sending it a command. When appropriate commands are issued to the bot, it will respond with appropriate functionality (running a simulation and reporting the results, setting a preference, etc).
We may store anonymized statistics or messages for the purpose of improving the service.
The Raidbots Discord Bot adheres to the Discord Developer Terms of Service.
Raidbots collects and stores your country, state/territory, and Postal/ZIP code of your residence to determine if sales tax needs to be handled.
If you sign up for Raidbots Premium, we store API tokens from Stripe directly on Raidbots. Your credit card information is securely stored on Stripe's servers, not Raidbots. Raidbots does have access to this data - it is used to show you your current payment method as well as determine applicable taxes. These tokens are required for administrative purposes and may be stored for the duration that you maintain an account on the site.
If you connect your Raidbots account and Patreon account, we store the read-only token from Patreon for the duration necessary to provide the Services to you and to maintain your account. This token is used to determine your pledge status, pledge level, and Discord identity if you have connected to Discord on Patreon.
We use a third-party vendor to track basic site traffic and usage information (pages visited, buttons clicked, etc) for the purpose of operating the site and developing new features. Our third-party analytics vendor does not process any personal data.
We use the information we collect to run and improve the site and to provide customer support.
We only share personal information with external parties to provide you with Raidbots service functionality and related administrative functions, such as:
Sending transactional emails (password resets, etc)
Processing payments
We do not share or sell your personal information with third parties for commercial purposes.
We may disclose or transfer your information in connection with the sale, merger, bankruptcy, sale of assets or reorganization of our company.
Raidbots uses a variety of techniques and technologies to take reasonable steps to keep your information secure. All website access must occur using HTTPS, passwords are hashed using industry standard methods (currently bcrypt), and encryption is used for much of the data at rest.
You can access or change your data or delete your account and personal data on the Raidbots account page.
Deleted information may remain in backups for up to 90 days. Backups are only used for disaster recovery.
In order to provide our Services to you, Raidbots collects, stores, and uses your information outside of the European Union ("EU"). For those users who reside in the EU, Switzerland, or the U.K., and who are subject to the General Data Protection Regulation, or are subject to either the data protection laws implemented by member states of the EU under the General Data Protection Regulation or to the UK Data Protection Act of 2018, as amended and incorporated into UK law (collectively, the "GDPR"), you may be entitled to exercise additional rights as a data subject and request additional information regarding Raidbots's data processing practices relating to your personal data. Under the GDPR, you are a "Data Subject" and we are a "Data Controller" for any personal data that constitutes "personal data" under the GDPR that is processed under this policy.
If you are not a Data Subject, this section does not apply to you.
Lawful Grounds for Processing Personal Data of Data Subjects
We rely upon the following legal grounds to process personal data under the GDPR:
If you have consented to the processing of personal data for one or more specific purposes.
If the processing is necessary for the performance of an agreement with you (including for any pre-contractual obligations thereof), for our compliance with a legal obligation to which we are subject, to protect your vital interests or of another natural person, or otherwise for our legitimate interests.
Data Transfer Notice
We use servers located in the United States to process your personal data. By using our services, you acknowledge and agree that we are authorized to transfer your personal data for processing in the United States. Under the GDPR, the transfer of personal data to a country outside the EU may take place where the European Commission has determined that the country ensures an adequate level of protection. The transfer of your personal data to the United States in the absence of an adequacy decision by the European Commission is made because it is necessary for the performance of a contract with you, or with your explicit consent.
Raidbots endeavors to process the minimum amount of personal data necessary to provide you with the Services that you have requested. As such, without your consent to process your information outside of the EU, some of our Services may not function correctly, or we may not be able to provide you with our Services at all. You may withdraw consent at anytime by deleting your account in the Raidbots account page, or by contacting us at the e-mail address listed under "Individual Rights and Data Subject Requests".
Retention of personal data
We will keep your personal data as long as necessary to provide you with Services or to comply with applicable laws. Pursuant to the GDPR, we will permanently erase your personal data at such time there is no lawful basis or legal obligation for us to store or process the personal data.
You can delete your account and personal data by accessing your account on the Raidbots account page.
Individual Rights and Data Subject Requests
If you are a Data Subject and we process your personal data, you may exercise certain rights under the GDPR, which are described below. We will endeavor to respond to any requests within 30 days from receipt, but in some instances it may take longer. We will inform you within 30 days from receipt of your request if an extension is necessary and the reason for the delay.
We provide you with tools on the Raidbots account page to exercise your rights to access, transfer, rectify or erase your personal data. If you have any questions or need to make an individual request, you can contact us at privacy@raidbots.com. Please provide specific and detailed information about your request necessary for us to respond to and carry out your request.
You may object to processing: You may object to certain types of processing, including processing for direct marketing (i.e. if you no longer want to be contacted with potential opportunities).
You may request to be informed about our processing: You may request information about how we process your personal data and request additional information about how to exercise your rights under the GDPR.
You may obtain access to your personal data: You may obtain access to your personal data that we process.
You may request rectification: If you believe any personal data that we process is incorrect or incomplete, you may request that we correct it.
You may request deletion of your personal data: Under certain conditions, you may request that we remove or delete your personal data. For example, if there is no legitimate reason for us to continue processing it. In accordance with applicable law, we may retain certain personal data to keep a record of our compliance with your request.
You may restrict our processing of your personal data: You may request that we cease further processing of your personal data. If you make such a request, we may continue to store your personal data but will not make further use of it.
You may withdraw consent: If we are relying on consent as the lawful grounds on which we process your personal data, you may withdraw your consent for such processing at any time without affecting the lawfulness of processing based upon your consent before it is withdrawn.
In addition to the rights granted by applicable laws, you may submit a complaint about our processing of your personal data to your national data protection regulator.
Our Services are for users age 16 and over and we do not knowingly collect personal information from children under the age of 16. If you are a parent or guardian of a child under the age of 16 and believe he or she has disclosed personal information to us please contact us at privacy@raidbots.com.
If you have any questions regarding this privacy policy, please contact us at privacy@raidbots.com.
All changes to the privacy policy will be listed here.
October 1, 2024: Completed annual privacy policy review; no other changes were made.
October 10, 2023: Added more information for EU users, clarified retention durations for various categories, expanded the Privacy Policy to include email communications and the Raidbots Discord server, generalized Third-Party Analytics section
June 6, 2023: Updated "Third-Party Analytics" to indicate the switch to Plausible.io from Google Analytics
July 15, 2020: Updated "Stripe / Raidbots Premium" to add information collected about your residence.
November 4, 2019: Updated "Information We Collect" to indicate 30 day retention policy for simulation data.
July 14, 2018: Added information about Stripe and Raidbots Premium
May 10, 2018: Initial version published