Privacy Policy
Last updated: June 2026
Who we are
ShadowCaller (“we”, “the service”) relays a caller’s voice across your Discord servers. This policy explains what data we process and why.
Data we collect
- Discord account data: your Discord user ID, username and avatar, obtained through Discord’s OAuth login when you sign in.
- Discord access tokens: we store the OAuth access and refresh tokens Discord
issues so we can list the servers where you are an administrator. We never post
on your behalf and only request the
identifyandguildsscopes. - Subscription data: which Discord servers have an active subscription, plan and dates. Payment details (card, billing address) are handled entirely by our payment processor — we never see or store them.
- Support messages: the content you submit when you report a problem, plus a technical snapshot of your server’s bot status and configuration at that time.
- Voice attendance (only if a server admin turns it on): when the Attendance feature is enabled for a Discord server, we record which members are in the voice channels that server’s bots use, and when. For each member this is their Discord user ID, username, server nickname, avatar, the channel, and the times they were seen there. It is off by default and can be turned off — and its history deleted — at any time from the dashboard.
Voice attendance
This feature exists so a clan can see who took part in its events, for example to hand out in-game rewards. Two things are worth stating plainly:
- The server’s admin decides. We only record this where an admin has turned the feature on for their server. We ask them to tell their members first.
- Who can see it: the admins and operators of that Discord server, through the dashboard or through an API token they create. Our own staff can see it only to provide support.
We do not record what anyone says. This feature notes presence in a voice channel, not audio.
How we use it
- To authenticate you and show the servers you can manage.
- To provide the relay service and manage your subscription.
- To respond to support requests.
Payment processing
Payments and billing are handled by Paddle, acting as Merchant of Record. Paddle processes your payment data under its own privacy policy. We receive only the information needed to activate and manage your subscription (e.g. a customer and subscription identifier), never your card details.
Analytics
We use privacy-friendly, cookieless analytics (a self-hosted Umami instance on our own infrastructure) to understand how the site and app are used in aggregate — for example which pages are visited and which buttons are clicked. It does not set cookies, does not track you across other websites, and does not collect personal data: metrics are anonymous and aggregated, so no consent banner is required. Because it runs on our own servers, this data is not shared with any third-party analytics provider.
Data sharing
We do not sell your data. We share data only with the processors needed to run the service: Discord (authentication), Paddle (payments) and our hosting provider.
Retention
We keep your account data while your account exists. Subscription and billing records are kept as required for accounting/tax obligations.
Voice attendance is kept for 90 days and then deleted automatically. A server admin can delete their server’s attendance history sooner, from the dashboard.
Your rights (GDPR)
If you are in the EU/EEA you have the right to access, rectify, delete and port your data, and to object to its processing. You can delete your account and personal data at any time from the dashboard (“Delete account”), which removes your profile and login data. To exercise any other right, contact us.
Contact
For privacy questions or requests: thexreth+caller@gmail.com.