Privacy Policy

1.Data controller

Your personal data is processed by Vante App as the data controller. For questions and requests about this policy, write to contact@vante.app.

2.Data we collect

Through the dashboard we collect the following data:

• Account details: your name, email address, password (only in irreversible, hashed form), profile picture and, if you link it, your Discord user ID.
• Security settings: whether two-factor authentication is on, your backup codes and the public keys of your passkeys. Biometric data such as fingerprints or face recognition never leaves your device and never reaches us.
• Sign-in records: the time of every sign-in attempt, its result (success or failure and the reason), the method (password, Discord, passkey etc.), the IP address, the country estimated from the IP address and (if our hosting provider reports it) the city, and browser and operating system details. The country estimate is made on our own servers, without sending your IP address to any third party.
• Device details: technical properties the browser you open the dashboard in reports about itself: screen resolution and pixel ratio, color depth, graphics card model, number of processor cores, approximate memory, touchscreen support, time zone (and the country estimated from it), language preferences, operating system and browser versions, device model (if the browser reports it), a summary of a test drawing (canvas), connection type, theme preference and whether the browser is controlled by an automation tool. A summary value (browser fingerprint) is calculated from these properties; a random device ID cookie is also placed in your browser.
• Dashboard activity: the changes you make to server settings, bots, requests, members and your own account; what was changed, when, and from which IP address and device.
• Content you create: requests and comments you write on the request board and images you upload.
• Email communication: your email address, for sign-in codes, sign-in links and invitations.

Bot data from your Discord server (message and voice statistics, punishments, giveaways, bot settings) isn't stored permanently on the dashboard. This data is kept in your server's bot infrastructure; the dashboard only reads it on demand to show it to you.

3.Purposes and legal grounds

We process your data only for the following purposes, based on the legal grounds in Article 5 of the KVKK:

• Providing the service: opening your account, letting you sign in and letting you manage your server's bots. Legal ground: establishing and performing a contract (Art. 5/2-c).
• Protecting your account and the Service: detecting unauthorized sign-ins, password-guessing attacks and account takeovers; preventing banned users from returning with new accounts and abuse through multiple accounts. Sign-in records, IP addresses and device details are processed for this purpose. Legal ground: legitimate interest (Art. 5/2-f).
• Accountability: being able to show a server's admins who changed a server setting and when. Legal ground: legitimate interest.
• Support and debugging: solving the problems you run into and finding bugs. Legal ground: legitimate interest.
• Legal obligations: keeping the records required by law and responding to requests from the authorities. Legal ground: legal obligation (Art. 5/2-ç).

Links found between accounts (the same device, a similar device or the same IP) are only a hint; on their own they never lead to an automatic sanction — our team makes the decisions. We don't use your data for advertising, profiling or marketing, and we don't sell it.

4.Cookies and browser storage

We only use cookies that the Service needs to work and stay secure; we don't use advertising or analytics cookies.

• Session cookies: remember that you're signed in; used temporarily during the two-factor and passkey steps.
• Device ID cookie (vante_did): a randomly generated ID to recognize your browser, kept for at most 400 days and used only in security records.
• Language cookie (vante_locale): remembers the language you picked yourself for at most 400 days; without it, the language is chosen from your country.
• Preference cookie (sidebar_state): remembers for 7 days whether the dashboard's side menu is open or closed.
• Browser storage: your theme preference and a note that your device details have already been sent in this session (deleted when the session ends).

You can delete cookies in your browser settings; however, you can't sign in to the dashboard without the session cookie.

5.Who we share data with

• Server admins: the admins of a server you're a member of can see the record of the changes you made on that server (who changed what, and when).
• The Vante App team: can see your sign-in records, device details and activity for security, support and abuse prevention, and can view the dashboard from your account while providing support. This access is logged too.
• Bot infrastructure: the system that runs your server's bots receives the setting changes you make on the dashboard.
• Our service providers: hosting and database, email delivery, rate limiting, error tracking and file storage services; only as far as the Service requires and bound by contract.
• Discord: when you sign in with Discord or link your account, Discord's own privacy policy also applies.
• Competent authorities: only when legally required.

Because some of our service providers have servers abroad, your data may be transferred abroad in line with the conditions in Article 9 of the KVKK.

6.Retention periods

• Account details: for as long as your account is open.
• Sign-in records and device details: 180 days; deleted automatically at the end of this period.
• Activity records: the change itself is kept as part of the server's history; the IP address, browser and device ID in the record are deleted after 180 days.
• When your account is deleted: your account, session, sign-in and device records are deleted. Your requests, comments and activity records that are part of a server's history remain; they show “deleted user” instead of your name.

7.Security

Passwords are stored irreversibly, bot API keys are encrypted, all connections use HTTPS and sign-in attempts are rate limited. We recommend turning on two-factor authentication or a passkey for your account.

8.Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed and, if so, request information about it,
• learn the purpose of the processing and whether the data is used in line with that purpose,
• know the third parties in Turkey or abroad to whom the data is transferred,
• request that it be corrected if it is incomplete or incorrect, deleted or destroyed within the conditions of Article 7 of the KVKK, and that these actions be reported to the parties the data was transferred to,
• object to an outcome against you that results solely from analysis by automated systems,
• claim compensation if you suffer damage because of unlawful processing.

You can send your requests to contact@vante.app; we reply within 30 days at the latest. You can see and end your active sessions on the Profile page.

9.Age limit

In line with Discord's age requirement, the Service is not for people under 13.

10.Changes to this policy

We may update this policy from time to time. We announce important changes; the current version is always on this page, and the date at the top shows the last update.