Privacy policy

1. Who processes the data

The controller of personal data is the owner of the bebb.be service (the bebb.be website, the app.bebb.be dashboard and the Discord integrations). Contact for data matters: support@bebb.be.

2. What data we process

Only what is needed to run the service:

• sign-in: your email address; when you sign in with Discord — your Discord ID, username and verified email address (the "identify" and "email" scopes). We do not read your messages and do not receive the list of your servers;
• profile: the name we should call you and confirmation that you are 18 or older (we do not publish your age);
• security: IP address and time of sign-ins, the dashboard activity log, one-time sign-in codes (only their hashes are stored, valid for 10 minutes);
• services: the files, settings and content of the servers and websites you host, and backups;
• payment (after launch): invoice status and amount; payment details are processed by the provider NOWPayments and we do not receive them;
• Discord integrations and bot: user, server, channel and role identifiers and the content you yourself send to the bot in commands or forms.

3. Why we do it

To create and protect your account, provide and bill the services, prevent abuse, comply with the law and answer your requests. We do not sell personal data and do not use it for advertising.

4. Cookies and third parties

We only use necessary cookies and browser storage: the session, request-forgery protection, and your theme and language choice. There are no advertising or analytics trackers on the website or in the dashboard, and fonts and scripts are served from our own servers.

5. Who we share data with

Only those without whom the service cannot work:

• the infrastructure provider (OVH server hosting);
• Discord — for Discord sign-in and the bot;
• a transactional email provider — for sign-in codes and notifications;
• the payment provider NOWPayments — for payments;
• public authorities — only on a lawful request.

6. Retention

Account and service data are kept while you use the service. Sign-in codes expire after 10 minutes. Web server access logs (IP, time, requested address) are kept for up to 14 days. After an account is deleted its data is deleted, except data the law requires us to keep (for example accounting records) and backups that rotate within a limited time.

7. Security

We deliberately prefer passwordless sign-in: there are no passwords, so there is nothing to steal from the database. Every server runs in an isolated container, access to the infrastructure is restricted and connections are protected by TLS. No system is absolutely secure; we will notify you of incidents affecting your data as the law requires.

8. Your rights

You may request access to your data, correction, deletion, restriction of processing, portability, and object to processing. Write to support@bebb.be from the address linked to your account — we will reply within a reasonable time, no later than 30 days. You also have the right to complain to the Ukrainian Parliament Commissioner for Human Rights. You can revoke Discord access in Discord: Settings → Authorized Apps.

9. Children

The service is intended for people aged 18 and over. If we learn that an account was created by a minor we will delete it.

10. Changes to this policy

We may update this policy. The date of the current version is shown at the top; we will notify you of material changes in the dashboard or by email.