Privacy Policy

Last updated: 7 October 2026

On this page

Discord bot and connected communities

This section applies to Arxcomms Service Bot (application ID 1540693430517243904) and supplements the policy below. The A.R.X. operator identified below is responsible for the bot’s processing.

Website feeds and linked accounts

The bot publishes approved public developer profiles, client profiles and commission listings in designated A.R.X. and participating community channels, currently including KW Studio, according to the author’s sharing choice and each receiving server’s rules. Posts may include your public display name, profile image, skills, description, listing details and website links. Members with access to those channels can see and copy the posts. Draft revisions, private messages, applications, quotes, private files, billing details and support conversations are not published in these public feeds.

Use Discord connection to choose website-only publication, sharing in A.R.X. Discord, or sharing in participating communities for your profile and your listing default. Each listing can override its default. If you have not chosen a sharing scope, your content stays website-only. Public display of your linked Discord identity and private activity notifications have separate controls. Turning sharing off requests removal of the shared Discord copies and does not delete the website listing.

Voluntary member submissions and community review

Where a participating server enables member submissions, eligible members can use /arx post to create a private, structured listing draft. The author chooses website plus the originating server, or website plus participating communities. Normal channel messages are not imported as listings. We process the submitted listing fields, author and linked-account identifiers, originating server, sharing choice, review decisions and delivery status to operate this feature.

Authorised community managers and reviewers can access the listing details and relevant author and source identifiers needed to configure rules or review submissions. Local review and A.R.X. publication review apply where required. Receiving communities can approve, reject, remove a local copy, block an author or source, or report a network concern. Review records, reports and block identifiers are processed to enforce these choices and maintain the service. Community operators also process information under their own policies.

To operate synchronization, we process website record IDs, approved content, revision and delivery status, Discord server/channel/message IDs and, for linked-account features, your Discord user ID and relevant roles. The bot may assign or remove managed roles in the A.R.X. server and send service notifications associated with your account. It can read recent channel history to locate its own posts and avoid duplicate deliveries.

Moderation and Message Content access

When enabled and authorized by Discord, custom moderation operates in the A.R.X. server. It does not moderate KW Studio. The bot processes messages and edits, user/server/channel/message IDs, timestamps, mentions, links and attachment metadata to detect prohibited promotion, repeated flooding and spam raids. Short-term detection state is held in memory. Moderation cases can retain a message excerpt of up to 1,200 characters, related message references, detection statistics, the reason, action and outcome. Relevant membership and role information is checked before enforcement.

Rules can automatically remove offending messages, issue warnings, apply timeouts or ban users for detected raids. A warning may be sent by direct message or, if delivery fails, in the source channel. The bot does not monitor private direct-message conversations or track online presence. It does not use Discord message content to train AI models, and we do not sell Discord API data or use it for advertising profiles.

Purposes, recipients and storage

We process data necessary to provide requested account and publishing features as part of our service, and rely on legitimate interests in community safety, preventing abuse and maintaining reliable synchronization for moderation and operational records. Where a feature requires consent, we request it separately; this notice does not itself obtain consent.

Discord receives bot posts and API requests. Railway hosts the bot and its operational storage; the website hosting provider processes website-side records. Authorized A.R.X. staff can access relevant operational and moderation records. Case excerpts may be posted to a restricted A.R.X. staff channel. Partner members receive public listing content, not our private moderation case database. Discord and partner server operators also process information under their own policies. Our bot currently runs in Railway’s US West region, so processing occurs outside the EEA; the international-transfer section below also applies.

Retention and requests

Local moderation cases are automatically pruned after 30 days during startup and hourly while moderation runs. This does not automatically delete copies in Discord staff channels, Discord audit logs or hosting logs. Those copies have separate retention and require separate removal where applicable. Synchronization records remain while needed to maintain, update, remove and recover bot posts; withdrawing a listing does not itself erase every operational record.

For access, correction, deletion, an objection to processing or removal of a synchronized post, email info@arxcomms.com or use Support. Include your Discord user ID and relevant profile, message or case reference where available; never send passwords or tokens. We may verify your identity. We promptly delete Discord API data on a valid user or Discord request, when no longer needed or when the bot stops operating, except where retention is required by law. Requests include relevant records and bot-controlled copies we hold; Discord’s own records and copies made by other users are subject to their respective control.

You can ask for human review of an automated moderation action through Support or the A.R.X. server owner. Publication changes and removal may be delayed by outages or missing channel permissions; contact us if a post remains after withdrawal. Your data-protection rights below also apply to the bot.

This Privacy Policy explains how A.R.X. Roblox Commissions collects, uses, stores, and protects personal data when you use our website, platform, profiles, services, or related features.

This Privacy Policy describes our processing and the legal bases used. Browsing the site or accepting our Terms does not by itself constitute consent to every use of personal data. Where consent is required, we request it separately.

1. Who We Are

The platform is operated by:

A.R.X., Matej Žitnik Slatinšek s.p., 3D Oblikovanje
Registered in: Slovenia
Business address: Šlandrova ulica 2, Pragersko, 2331 Pragersko
Email: support@arxcomms.com

For general business inquiries: contact@arxcomms.com
For website-related questions: info@arxcomms.com

For the purposes of data protection law, A.R.X. is the data controller for personal data processed through the platform.

2. What Data We Collect

We collect different types of personal data depending on how you use the platform.

Account Data

When you register or use an account, we may collect:

username
display name
email address
password, stored securely in encrypted/hashed form
account role, such as developer, client, studio, or individual
account status
login activity
profile completion status
Profile Data

If you create a public or private profile, we may collect and display:

profile picture
banner image
description/bio
skills
tags
portfolio images
portfolio videos or video links
external portfolio links
social links
Discord or other contact details, if provided
prices or price ranges
availability
country or region
work examples
uploaded media
profile tabs and sections
profile update history

Some of this information may become publicly visible once your profile is approved.

Verification and Moderation Data

If you apply for approval, verification, higher status, or platform badges, we may collect:

portfolio examples
explanations of past work
links to public work
proof of experience
client feedback or references, if voluntarily submitted
communication with A.R.X.
internal moderation notes
report history
review history
assigned platform tags
approval/rejection decisions

We may use this information to decide whether a profile should be approved, verified, tagged, hidden, or removed.

Messages and Communication Data

If A.R.X. provides on-site messaging, contact forms, support forms, or similar features, we may process:

messages sent between users
support requests
notifications
email replies
reports
complaints
attached files
timestamps
sender and recipient information

External services process communications under their own policies. A.R.X. also processes data through its Discord bot and A.R.X. server moderation as described in the Discord section above; communications outside those functions are not monitored by our bot.

Reviews, Reports, and Feedback

We may collect:

reviews
ratings
feedback after commissions
reports about users
report evidence
comments about completed or failed projects
internal notes used for moderation

We may use repeated feedback patterns to assign or remove public platform tags.

Billing and Purchase Data

We do not require full billing information just to create an account.

If you purchase memberships, services, profile reviews, quality checks, consultations, or other paid A.R.X. services, we may collect billing information needed for payment, invoicing, tax, and legal compliance.

This may include:

full legal name
billing address
country
email address
phone number, if required
company name, if applicable
VAT/tax number, if applicable
order history
invoice details
payment status

Payment card data is normally processed by payment providers such as Stripe, PayPal, WooCommerce payment integrations, or similar services. A.R.X. does not intentionally store full card numbers.

Technical Data

When you use the website, we may automatically collect:

IP address
browser type
device type
operating system
pages visited
referral source
timestamps
login attempts
security logs
cookie identifiers
approximate location based on technical data
error logs

This helps us keep the site secure, fix bugs, prevent abuse, and understand how the platform is used.

Cookies and Similar Technologies

We may use cookies and similar technologies for:

Essential cookies may be necessary for the website to work.

Analytics, advertising, tracking, or non-essential cookies will be used only where legally allowed and, where required, with user consent.

See our Cookie Policy for details and instructions for managing your cookie preferences.

3. How We Use Your Data

We use personal data for the following purposes:

To Provide the Platform

We process data to:

create accounts
allow login
build user profiles
display public profiles
allow creators to showcase work
allow clients to browse creators
enable search and filtering
provide messaging or contact features
show notifications
manage bookmarks, follows/watchlists, or profile updates
To Review and Moderate Profiles

We process data to:

approve or reject profiles
check profile quality
prevent spam
detect stolen or fake content
assign platform tags
process verification requests
investigate reports
remove unsafe links
suspend or ban abusive accounts
To Provide Paid Services

We process data to:

provide profile reviews
provide quality checks
provide project guidance
provide creator matching
provide consulting
provide tutorials/courses
process membership features
manage orders
issue invoices or receipts
To Communicate With Users

We use data to:

respond to support requests
send account emails
send important platform notices
send verification decisions
notify users about messages
provide service updates
contact users about safety, moderation, or legal issues
To Improve and Secure the Website

We use data to:

detect bugs
prevent abuse
block spam
prevent fraud
protect accounts
monitor security
improve performance
understand which features are useful
To Comply With Legal Obligations

We may process or disclose data when necessary to:

issue invoices
meet accounting or tax obligations
respond to lawful requests from authorities
protect legal rights
enforce our Terms & Conditions
handle disputes or claims

4. Legal Bases for Processing

Depending on the situation, we rely on one or more legal bases:

Contract

We process data when necessary to provide the platform, user accounts, profiles, paid services, memberships, messaging, and support.

Legal Obligation

We process billing, invoice, accounting, tax, and legally required records where required by law.

Legitimate Interest

We process some data to protect the platform, moderate content, prevent abuse, improve services, handle reports, maintain security, and operate a trusted creator network.

Consent

We rely on consent for optional things such as certain cookies, marketing emails, optional public profile details, or other processing where consent is required.

You may withdraw consent at any time where consent is the legal basis.

5. Public Profile Information

Some profile information may become public after approval, including:

display name
profile picture
description
skills
portfolio images/videos
prices
availability
tags
verification status
external links
selected contact details

Do not upload or publish anything you do not want other users or visitors to see.

A.R.X. may hide, remove, or edit public profile information if it violates our rules, appears unsafe, or does not meet platform standards.

6. External Links and Third-Party Platforms

Profiles may include links to external websites or platforms such as:

ArtStation
Discord
YouTube
personal websites
Roblox-related pages
KW Studio or other partner sites
social media

A.R.X. is not responsible for the privacy practices, content, downloads, messages, payments, or security of external platforms.

When you click an external link, that website’s own privacy policy applies.

7. Who We Share Data With

We do not sell personal data.

We may share data with trusted service providers where needed to operate the platform, including:

website hosting providers
WordPress/plugin providers
email delivery services
payment processors
invoice/accounting tools
security tools
analytics providers
spam-prevention tools
customer support tools

These providers may only process data as needed to provide their services to A.R.X.

We may also share data:

when legally required
with law enforcement or authorities under valid legal process
to protect users, the platform, or legal rights
during business transfer, restructuring, or legal succession, if applicable

8. Payments and Billing

If you purchase paid A.R.X. services or memberships, your billing data may be processed by payment providers and checkout systems.

A.R.X. may keep order and invoice records for legal, accounting, and tax purposes.

Payment providers may process your payment information under their own privacy policies.

A.R.X. does not handle payments between clients and creators unless a separate payment system is introduced in the future.

9. Data Retention

We keep personal data only as long as necessary for the purposes described in this Privacy Policy.

Typical retention periods may include:

account data: while your account exists
public profile data: while your profile is active or pending moderation
billing/invoice data: for the legally required accounting/tax retention period
support messages: as long as needed to handle the request and maintain records
moderation records: as long as needed for safety, abuse prevention, and dispute handling
security logs: for a limited period unless needed for investigation
deleted accounts: some data may be retained where required by law or needed for legitimate safety/legal reasons

If you delete your account, we will remove or anonymize personal data where possible, unless we need to keep certain information for legal, security, accounting, dispute, or abuse-prevention reasons.

10. Your Data Protection Rights

Depending on the situation and legal basis, you may have the right to:

access your personal data
request correction of inaccurate data
request deletion of your data
restrict processing
object to processing
request data portability
withdraw consent
complain to a supervisory authority

To exercise your rights, contact:

info@arxcomms.com

We may need to verify your identity before handling your request.

Some rights may not apply in every situation, especially where we must keep data for legal, accounting, tax, security, or dispute-related reasons.

11. Complaint to the Supervisory Authority

If you believe your personal data rights have been violated, you may contact the Slovenian data protection authority:

Information Commissioner of the Republic of Slovenia
Dunajska cesta 22
1000 Ljubljana
Slovenia
Email: gp.ip@ip-rs.si
Website: www.ip-rs.si

You can also contact us first at:

info@arxcomms.com

12. Security

We take reasonable technical and organizational measures to protect personal data, including:

secure account login
password hashing
access controls
moderation controls
hosting security
plugin/theme updates
anti-spam measures
limited admin access
backups where appropriate

No website or online service can guarantee absolute security.

Users are responsible for keeping their own login details secure and avoiding suspicious links, files, or external websites.

13. Children and Minors

A.R.X. may be used by Roblox creators, some of whom may be minors.

Users under 18 should use the platform with permission and supervision from a parent or legal guardian, especially when discussing paid work, commissions, payments, contracts, or business arrangements.

Users under 15 may need consent from a parent or legal guardian for certain personal data processing.

A.R.X. may restrict paid services, billing, memberships, or business-related features to users who are 18 or older.

If we learn that we collected personal data from a child without proper consent where required, we may delete or restrict the account.

Parents or guardians may contact us at:

info@arxcomms.com

14. International Data Transfers

Some service providers used by A.R.X. may process data outside Slovenia or outside the European Economic Area.

Where required, we rely on appropriate safeguards such as:

EU adequacy decisions
Standard Contractual Clauses
data processing agreements
provider security commitments

15. Marketing Communications

We may send marketing emails only where allowed by law.

You can unsubscribe from marketing emails at any time.

Important account, security, billing, moderation, or service-related emails are not marketing and may still be sent where necessary.

16. Automated Decision-Making

The Discord bot can make automated moderation decisions, including message removal, warnings, timeouts and bans, using rules for promotion and spam patterns. You can request human review as explained in the Discord section above.

Profile approval, verification, tags, and moderation decisions may involve manual review.

Some automated tools may be used to help detect spam, abuse, security risks, or suspicious activity.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If changes are important, we may notify users through the website, email, account notices, or platform notifications.

We will identify material changes to our processing and provide notice where required. Where new processing requires consent, continued use alone will not be treated as that consent.

18. Contact

For privacy-related questions, contact:

info@arxcomms.com

For support:

support@arxcomms.com

For business inquiries:

contact@arxcomms.com