PRIVACY

Privacy Policy

Effective August 27, 2026 · Rebuild

This policy explains what Rebuild collects, why it is processed, how long it is kept, and the controls available to account owners and verified Discord members.

1. Data we collect

Depending on how you use Rebuild, we may collect account details, OAuth identifiers, email address, Discord user and server identifiers, server configuration, bot configuration, verification results, subscription status, support communications, security events, and technical logs.

2. How data is used

We process data to authenticate accounts, operate backups and restores, provide verification and bot hosting, prevent fraud and abuse, secure the service, process subscriptions, provide support, comply with law, and improve reliability. We do not sell personal information.

3. Discord data

Discord OAuth and bot permissions determine the data Rebuild can access. This may include your Discord identity, email when separately authorized, server membership, roles, channels, permissions, emojis, and configuration needed for requested features. Server owners control their Rebuild workspace and must use member information lawfully.

4. Verification and network signals

Verification may process IP address, approximate region, browser characteristics, CAPTCHA results, VPN or proxy signals, and related risk indicators for anti-abuse and anti-alt purposes. Staff-facing interfaces should display masked IP addresses by default. Raw network identifiers must be access-controlled, encrypted, retained only as necessary, and never posted to public Discord channels. When a server administrator starts a message backup, Rebuild may store accessible server-channel message content, attachment links, Discord user identifiers, display names, avatars, and timestamps until the configured backup expiration date. Direct messages are never accessed or backed up.

5. Service providers and disclosures

Data may be processed by hosting, database, storage, CAPTCHA, email, payment, monitoring, and authentication providers. We may also disclose information when required by law, to protect users or the service, during a corporate transaction, or with your direction. Each provider receives only what is reasonably necessary.

6. Retention and deletion

Account data is kept while an account is active and for a limited period afterward for security, recovery, billing, and legal needs. Backup retention follows the selected plan. Verification risk data should use a documented short retention period. Account owners may request deletion, subject to fraud prevention, chargeback, and legal obligations.

7. Security

Rebuild uses access controls, encryption in transit, protected secrets, signed sessions, audit logging, and security monitoring appropriate to the service. No system is perfectly secure. Users should enable passkeys or authenticator-based two-factor authentication and protect recovery codes.

8. Your choices and rights

Depending on location, you may request access, correction, deletion, restriction, portability, or objection and may appeal certain decisions. You can revoke Discord or Google access through those providers. Server members may contact the relevant server owner for community-controlled records and Rebuild for platform-controlled data.

9. Children

Rebuild is not intended for children below the minimum age required by Discord or applicable law. We do not knowingly collect personal information from children outside those requirements.

10. International processing

Providers may process information in countries other than yours. Where required, Rebuild will use appropriate contractual or legal safeguards for international transfers.

11. Policy changes

We may update this policy as features, providers, and laws change. Material updates will be announced through the service or account contact information, and the effective date will be revised.

12. Contact

Privacy requests should be sent to the official privacy address published by Rebuild. Before launch, add the legal operator, privacy email, business address, retention schedule, processor list, and jurisdiction-specific disclosures.