Privacy Policy

Last updated: April 25, 2026

This policy explains what data DemonDev ("we") collects through demonworld.shop and the linked Discord server, why we collect it, how we use and share it, and your rights.

1 · What we collect

Provided directly by you

  • Discord identity — when you join our Discord, your username, ID, avatar, and any roles you receive. We do not collect your Discord email address or password.
  • Ticket content — messages, attachments, and metadata in private tickets you open (project briefs, files, payment confirmations).
  • Chat with the on-site assistant — messages you type into the chat widget on demonworld.shop are sent to our server and to a third-party LLM provider (Anthropic) for processing.
  • Email correspondence — if you email contact@demondev.tech, the sender address and message content.

Collected automatically

  • Server logs — IP address, user-agent, request path, timestamps. Retained 30 days for abuse-prevention and debugging, then deleted.
  • Cookies — we use only essential session cookies. We do not use ad-tracking, fingerprinting, or analytics cookies.

2 · Why we use it

  • To deliver the services you commission.
  • To respond to questions, support requests, and disputes.
  • To send service-related emails (order confirmations, status updates).
  • To detect and prevent fraud, abuse, or violations of our Terms.
  • To comply with applicable law.

We do not sell your data, share it with advertisers, or use it for marketing to third parties.

3 · Third-party processors

We rely on a small set of third-party services to operate. Each has its own privacy policy:

  • Discord — hosts our community and ticket system. Their privacy policy applies to data you share inside Discord.
  • Anthropic — provides the LLM behind the on-site chat assistant. Messages are processed per their privacy terms.
  • Hosting / VPS provider — operates the server that runs demonworld.shop and the bot.
  • Cloudflare — DNS, edge cache, email routing. Cloudflare may log connection metadata.
  • Payment processors — vary per engagement (e.g. crypto wallets, Wise, PayPal). We never store full card numbers; the processor handles them.

4 · Retention

  • Ticket transcripts: retained indefinitely as a record of work delivered.
  • Chat assistant messages: server-side logs retained 30 days.
  • Server access logs: 30 days.
  • Invoice + payment metadata: retained for 7 years to satisfy tax / accounting requirements.

5 · Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, LGPD, and similar), you may have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your data ("right to be forgotten"), subject to legal retention obligations.
  • Object to or restrict processing.
  • Receive your data in a portable format.
  • Withdraw consent (where applicable).
  • Lodge a complaint with a supervisory authority.

To exercise any right, email contact@demondev.tech. We respond within 30 days.

6 · Children

The Service is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.

7 · Security

We use HTTPS everywhere, encrypted database storage at rest, password-less SSH (key-only) access to infrastructure, principle-of-least-privilege on bot tokens, and regular dependency audits. No system is 100% secure, but we treat your data as we treat our own.

8 · International transfers

Our infrastructure may process data in the United States and the European Union. By using the Service you consent to this processing. We rely on Standard Contractual Clauses with our subprocessors where required.

9 · Changes

We may update this Privacy Policy. The "Last updated" date at the top reflects the current version. Material changes are announced in our Discord #announcements.

10 · Contact

Privacy questions, deletion requests, or concerns: contact@demondev.tech.