Privacy Policy
Effective August 6, 2026
This policy describes what information Zerobox LLC ("Zerobox", "we") collects when you use the Zerobox website and Discord service (the "Service"), and how we handle it. We collect the minimum we need to run the Service, and we do not sell your personal information.
1. Information we collect
- Discord account basics. You sign in with Discord. Through Discord's authorization flow we receive your Discord user ID, username, display name, and avatar. We never see your Discord password. Web sign-in does not request your email address.
- Subscription and entitlement data. Your plan, its status, billing period dates, and the history needed to operate your membership.
- Payment information — held by our payment processor, not us. Payments are processed by Stripe; your card or bank details go directly to Stripe, and we receive only what is needed to manage your subscription (for example payment status, method type, and the last four digits of a card).
- Creator Program data. If you apply to the Partner Program, we collect what you submit: your legal name, your content platform links, your audience size, and your application answers. If you become a creator, we also keep your payout status and commission records. The identity and bank details Stripe requires for payouts are collected by Stripe directly through Stripe Connect — we never see or store them.
- Service activity. Operational records of your use of the Service — for example queue and session activity, bot interactions, and timestamps — used to run the Service and prevent abuse.
- Technical data. Standard server logs (IP address, browser user agent, requested pages, timestamps) kept for security and troubleshooting.
2. Cookies and analytics
The website uses a single first-party session cookie to keep you signed in (up to 30 days), plus short-lived cookies used only during the Discord sign-in handshake. We do not use advertising cookies.
We use Plausible Analytics to count page views and understand which pages are used. Plausible does not set cookies, does not collect personal data, and does not track you across other websites; it records aggregate information such as the page visited, referring site, approximate country and device type, and when a link to another site is clicked, the destination site. No data is sold or shared for advertising.
3. How we use information
- To provide and operate the Service: authentication, queueing, entitlements, and bot access.
- To bill subscriptions and manage renewals, cancellations, and payment issues.
- To provide support and communicate service matters with you, primarily through Discord.
- To run the Creator Program: reviewing applications, attributing referrals to partner codes, and paying commissions.
- To add you to our Discord server when you sign in with Discord, using the permission Discord asks you to approve during sign-in — the Service is operated through that server.
- To keep the Service secure and prevent fraud and abuse.
- To comply with legal obligations, including tax and accounting requirements.
4. Who we share information with
We share personal information only with the service providers that make the Service work, and only what each needs:
- Stripe — web payment processing, and partner payouts through Stripe Connect.
- Discord — identity and the delivery of the Service itself (our bots and server operate on Discord).
- Amazon Web Services — cloud hosting.
- Cloudflare — networking and security in front of our services.
If you subscribe using a partner's code or share link, that partner can see anonymized referral statistics only — the date, the plan tier, and their commission. They never see your identity or account details.
We may also disclose information if required by law, or to protect the rights, safety, or property of Zerobox, our members, or others. If Zerobox is involved in a merger, acquisition, or sale of assets, member information may be transferred as part of that transaction.
5. Data retention
We keep account and subscription data for as long as your account is active. Billing records are retained as required by tax and accounting law. Server logs are kept for up to 365 days and then deleted or anonymized. When your account is deleted, we remove or anonymize personal information we no longer need (an active subscription must be cancelled before account deletion).
6. Your rights
You can request access to, correction of, or deletion of your personal information by contacting us (section 9). If you are in the European Union or United Kingdom, you additionally have rights under the GDPR/UK GDPR — including access, rectification, erasure, restriction, portability, and objection — and the right to lodge a complaint with your supervisory authority. If you are a California resident, you have equivalent rights under the CCPA/CPRA; we do not sell or share personal information as those terms are defined there.
7. Security
Traffic to the Service is encrypted in transit. Access to production systems and member data is restricted, and payment credentials are held by our payment processors rather than by us. No online service can guarantee perfect security, but we work to protect the Service and your data.
8. Children
The Service is not directed at children under 13, and you must meet Discord's minimum age requirements to use it. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.
9. Contact and changes
Privacy questions and requests: our Discord server at discord.gg/zerobox or by email at info@zerobox.gg. We may update this policy from time to time; material changes will be announced through the Service before they take effect, and the date at the top reflects the latest revision.