Beta Privacy Notice

Information stored

• Discord identity ID, display name, and—when provided—verified email.
• Campaign memberships, roles, bans, notification preferences, and audit events.
• Transactional-email delivery status and retry history. Email bodies are not included in campaign exports.
• Campaign content you submit, including journals, notes, characters, sessions, and uploaded media.
• Usage and estimated cost records for optional AI features.

What Discord does not provide

Normal Discord sign-in does not provide TavernDesk with your birth date, age, age band, identity documents, or Discord age-assurance status.

How information is used

Information is used to operate the service, authorize access, deliver essential membership notices, prevent abuse, provide exports, and enforce usage limits. TavernDesk does not sell personal information or use campaign content for advertising.

Email delivery

Verified email addresses may receive account and campaign-membership notices through the configured transactional-email provider. Member managers may disable access-request alerts for themselves; essential notices about a person’s own account or membership remain enabled during the beta.

Platform operations

A separately authorized platform owner can view service totals, integration health, email-delivery status, and platform audit events. Provider credentials are encrypted before database storage, never returned to the browser after submission, and excluded from campaign exports.

Private campaign content

Access is enforced per campaign and per record. Private material is not intended for routine platform review. Safety investigations should be narrow and based on reports or specific evidence.

AI providers

When a member deliberately uses an AI feature, the supplied prompt, script, or image instructions may be sent to the configured generation provider. Ordinary campaign tools do not require AI.

Exports and deletion

Administrators can create portable campaign exports. Formal account deletion, campaign recovery, retention schedules, and guardian-linked requests must be completed before commercial launch.