Privacy Policy

Your privacy matters to us. Vesper is designed to be a security-first tool — and that philosophy extends to how we handle your data. We collect only what we need to function, and we are transparent about every aspect of that collection.

Vesper collects the minimum data necessary to provide moderation and security services. Below is a complete breakdown of the data categories we process:

All data collected by Vesper is used exclusively for the following purposes:

• Delivering and operating the moderation and security features you have enabled.
• Maintaining audit logs accessible to server administrators with appropriate permissions.
• Detecting and responding to abuse, raids, or policy violations within your server.
• Improving the reliability, performance, and feature set of Vesper through anonymized analytics.
• Responding to legal obligations or lawful requests from authorities where required.

We do not use your data for profiling, targeted advertising, or any purpose beyond the operation and improvement of Vesper's core service.

Vesper does not sell, rent, or trade your data. We may share limited data in the following narrow circumstances:

• Service Providers: Infrastructure providers (hosting, databases) who process data on our behalf under strict data processing agreements.
• Legal Requirements: Where required by applicable law, court order, or governmental authority.
• Safety: To protect the safety and security of Vesper users or the public, where necessary.

Any third-party service providers we engage are contractually prohibited from using your data for their own purposes and are bound by confidentiality obligations.

Depending on your location, you may have certain rights regarding your personal data. We respect and support these rights:

To exercise any of these rights, server administrators may use the Data Management section of the Vesper dashboard, or contact us directly. We will respond to requests within 30 days.

We implement industry-standard security measures to protect your data from unauthorized access, disclosure, alteration, or destruction:

• All data is encrypted at rest using AES-256 encryption.
• All data in transit is protected by TLS 1.3.
• Access to production systems is restricted to authorized personnel via multi-factor authentication.
• Regular security audits and vulnerability assessments are conducted.
• Incident response procedures are in place to detect and respond to data breaches promptly.

In the event of a data breach that affects your information, we will notify affected server administrators within 72 hours of becoming aware, in accordance with applicable law.

We retain data only for as long as necessary to provide our services or as required by law. When you remove Vesper from your server, we will begin the process of deleting all associated data within 30 days.

You may also request immediate deletion through the Vesper dashboard. This will permanently remove:

• All server configuration and module settings.
• All moderation logs and user infraction histories stored by Vesper.
• All cached server and member metadata.

Anonymized, aggregated analytics data (which cannot be linked back to your server) may be retained for longer periods for statistical purposes.

This Privacy Policy may be updated periodically to reflect changes in our practices or applicable law. We will notify server administrators of material changes through the Vesper dashboard or our official Discord server.

For privacy-related inquiries, data deletion requests, or to report a concern, please reach out through:

• The Vesper dashboard support section.
• Our official Discord support server.
• The help center at vesper.bot/docs.