Privacy Policy

Last updated: 14 June 2026

1. Introduction

Phantom Studios ("we", "us", "our") operates the Phantom Discord bot and web dashboard. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

We collect and store the minimum data necessary to provide the Service:

• Discord User ID — used to identify your account across sessions
• Roblox Username and User ID — stored when you link your Roblox account
• Discord Server ID and Configuration — your server's Phantom settings (group ID, role mappings, audit log channels, etc.)
• Roblox Open Cloud API Key — stored encrypted, used only to apply rank changes in your Roblox group
• Subscription Status — whether your server has an active Premium or Enterprise subscription, managed via Stripe

3. Data We Do Not Collect

• We do not read, store, or log message content from your Discord server
• We do not collect passwords, email addresses, or payment card details (payments handled by Stripe)
• We do not track browsing behaviour or use advertising trackers

4. How We Use Your Data

Data collected is used solely to provide the Service:

• Linking your Discord account to your Roblox account
• Syncing Discord roles based on your Roblox group rank
• Applying rank changes via the dashboard or auto-rank system
• Displaying linked member information in the dashboard
• Processing and managing your subscription

5. Data Sharing

We do not sell, rent, or share your data with third parties except:

• Stripe — for payment processing. Stripe's privacy policy applies to payment data
• Discord — OAuth2 is used for dashboard login. Discord's privacy policy applies
• Roblox — the Open Cloud API is called to read/write group data. Roblox's privacy policy applies
• Legal requirements — if required by law or to protect our rights

6. Data Retention

We retain your data for as long as you use the Service. When you remove Phantom from your server, server configuration data is no longer actively used. You may request deletion of your data at any time by contacting us.

7. Security

We take reasonable steps to protect your data, including encrypted storage of API keys and secure HTTPS connections. No system is 100% secure — please contact us immediately if you suspect a breach.

8. Your Rights

Under Australian Privacy Law and GDPR (where applicable), you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing

To exercise these rights, open a ticket in our support server.

9. Children's Privacy

Phantom is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the Phantom Studios Discord server. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

Questions about this Privacy Policy? Join our support server or open a ticket.