Legal
Privacy Policy
Effective and last updated: September 21, 2026
Who we are: RaidReady, the streaming-community service at raidready.app
Privacy Officer: support@raidready.app
This policy covers the RaidReady site at raidready.app, your account, the Discord community, the calendar and reminders, and the Support RaidReady subscription. The short version: we collect what a community for streamers needs, we keep it only while it serves you, we do not sell it, and you can ask us to delete it. The Terms of Service sit beside it.
Section 1
Information we collect
- What you give us: your email address, what you type into forms, your consent choices, and messages you send to support.
- Your Discord account: when you sign in with Discord, your Discord user id and username; your membership and roles in the RaidReady server, including your Crew's private channel. Reminders and account messages reach you as Discord direct messages. The going-live announcement, for supporters, posts your display name, stream title, and channel link into a public channel of the RaidReady Discord - it is not a direct message.
- Your Twitch channel, when you connect it: your Twitch account id, public channel data, your channel's creation date (used to decide when the verified badge applies), whether your channel is live right now, and your profile picture, shown beside your name to every signed-in member in the live-now feed, the RaidReady calendar and your Crew's roster.
- Account and access records: internal identifiers, sign-in and authentication events, hashed verification copies of one-time email codes, connected account identifiers, and the permissions you granted for them.
- Payment records, supporters only: your Stripe customer id, subscription id or payment intent, billing period or annual access period, invoices, refunds, and our entitlement records. Stripe takes your card details; we never store full card numbers or card security codes.
- First-party measurement events: pages viewed, actions taken, and where a signup came from - an invite link, a code, or a campaign. Stored in our own database to operate and improve the service. This always runs and is not part of your cookie choice.
- Technical records: IP address, browser and device, request path, referring page, security and rate-limit signals, and error records.
Section 2
How and why we use it
- create and run your account and sign-in;
- deliver the community features: the calendar, reminders, the Saturday check-in, live-now, and your Crew's channel;
- run the Support RaidReady subscription: billing, the going-live announcement, and cancellation;
- send you transactional email and Discord messages a service needs - codes, receipts, reminders, access notices;
- understand what works and what breaks, and improve the service (first-party events always; PostHog only after your consent);
- prevent fraud, duplicate accounts, abuse, and security incidents; and
- meet accounting, tax, privacy, and consumer-protection obligations the law puts on us.
Depending on the situation, we process your information on the basis of your consent, your request or your subscription contract with us, a legal obligation, or our legitimate need to run and protect the service. Where you live gives you additional rights; those still apply.
We do not sell personal information. Paying for support is not consent for marketing email.
Section 3
Who gets your information
Only the providers the service actually runs on, and only what each of them needs:
- Supabase - our database: accounts, community, payments, entitlements, and first-party events.
- Discord - the community server: roles, channel membership, reminder direct messages, and the going-live announcement, through the RaidReady bot.
- Twitch - the channel connection: public channel data, live-status checks, and the account age behind the verified badge.
- Stripe - subscription payments, refunds, and the billing portal where you cancel.
- Brevo - transactional email, and marketing email only where you consented to it.
- Anthropic - the AI features, when you use one; it receives the text needed to generate an answer.
- PostHog - product analytics, only after your cookie consent.
- Silktide - the cookie banner; it stores your consent choice.
- Hosting and security providers - limited request, routing, and operational information required to serve and protect the site.
A paid product can carry its own notice, shown to you before you pay. Beyond that, we disclose information at your direction, to investigate fraud or a security incident, in a business transfer under appropriate protections, or where the law requires or permits it.
Section 5
How long we keep it
- Account, community, and support records are kept while your account exists and while we need them to run the service, resolve disputes, and meet legal obligations.
- Payment, refund, and accounting records are kept for the period the law requires.
- One-time email codes expire after their stated lifetime and are invalidated when used or replaced; limited security evidence may remain to prevent replay.
- After you unsubscribe from marketing email, a suppression record may remain so we do not write to you again by mistake.
- When a Crew is dissolved, its channel is closed and archived, not deleted; messages already delivered in Discord stay under Discord's rules, not ours.
- Operational, security, and analytics records are kept for their documented purpose and provider settings, and removed when we no longer need them.
Section 6
Your rights
You can ask us whether we hold personal information about you, ask for a copy of it, ask us to correct it, withdraw a consent you gave, say no to marketing email, or ask us to delete it.
A deletion request may not remove information we must keep for a payment, a refund, tax, fraud prevention, security, or a dispute. We may verify who you are before changing account information.
Send any request to the Privacy Officer at support@raidready.app. Additional rights may apply where you live, including portability and restriction.
Section 7
Where it is processed, and how it is protected
Our providers may process information in other countries than yours, including the United States and the European Union. Privacy laws there may differ. We stay responsible for our own handling of your information and use provider and contractual safeguards appropriate to the service and the law.
Security measures include TLS, signed sessions, hashed verification copies of one-time credentials, protected custody of connected-account tokens, restricted operational access, row-level database controls, signed webhooks, and audit records. Restricted delivery records may temporarily contain a private access URL so a requested transactional message can be sent or retried; those records are access-controlled and kept only for delivery and audit needs. No online service is risk-free.
If a privacy incident creates a risk of serious harm, we will take reasonable mitigation steps and notify affected people and regulators where the law requires it.
Section 8
Age requirement
RaidReady is for people age 18 and older. We do not knowingly collect information from minors. If you believe a minor gave us information, contact the Privacy Officer and we will remove it.
Section 9
Complaints, changes, and contact
Questions or complaints go to the Privacy Officer at support@raidready.app. We update the date at the top when this policy changes, and give appropriate notice before a material change applies to you.
If our answer does not resolve your concern, you can also complain to the data-protection authority where you live.