ScryNexus Privacy Notice

What ScryNexus is

ScryNexus is a private-pilot communications, loyalty, and community service for local game stores. A store controls its own customer and campaign workspace. ScryNexus separately controls account security, platform operations, and the shared service.

Data we process

• Account identifiers and profile details supplied by email or Discord sign-in, including a Discord user ID when linked.
• Store roles, league membership, pairings, results, standings, lists, comments, and content you deliberately submit.
• Store-scoped contact channels, consent and suppression evidence, message state, and replies needed for approved communications.
• Shopify customer/order references, purchase facts, loyalty ledger entries, and reward state when a store enables that integration.
• Security, delivery, audit, and coarse product-usage events. Pilot analytics exclude raw contact values and message bodies.

How we use and share data

We use data only to provide the product, secure it, honor consent, reconcile purchases and rewards, respond to requests, and improve reliability. We do not sell personal information or use Discord API data to profile relationships, target advertising, or contact people outside Discord without explicit permission.

Data is processed by service providers only as needed for enabled features, including Supabase for authentication/database/storage, Google Cloud for hosting and approved AI drafting, Shopify for commerce, Resend for email, and Discord for sign-in and interactions. Stores can see only their own tenant data under server-enforced roles.

AI boundaries

AI may draft or explain content for an authorized store user. It cannot send messages, change consent, link identities, mutate points, or issue rewards. Deterministic application code performs those actions only after authorization and validation.

Retention and deletion

Contact deletion removes active channel values and provenance while retaining non-identifying consent, suppression, and audit evidence. Account deletion removes authentication methods, Discord identities, profile details, linked contact information, private Discord uploads, stored photo records, and user-authored list content. Shared match results, store accounting, loyalty entries, and audit facts remain under a “Deleted player” or opaque identifier so other people’s histories still reconcile.

Coarse pilot analytics are retained for 90 days. Other operational evidence is retained while needed for the service, fraud prevention, store records, legal obligations, or dispute resolution, then deleted or de-identified.

Your controls

• Use Account & sign-in to delete your ScryNexus account without contacting support.
• Use /deletemydata in Discord to reach the same data controls from the app.
• Use the preference link in a store email to withdraw consent or unsubscribe. Store operators can correct, export, or redact a linked customer record.
• League organizers can download a reconstructable JSON export from the league organizer workspace.

Security and age

Service traffic is encrypted in transit. Hosted Supabase database disks are encrypted at rest, and row-level security plus server-side capability checks isolate tenants. ScryNexus is not directed to children under 13 or anyone below the minimum digital-consent age in their location.

See the official Supabase security documentation and Discord Developer Terms for the platform controls and obligations this notice reflects.

Questions or access problems

During the private pilot, use the in-product controls above. If you cannot access your account, the store that invited you can relay a privacy request to the ScryNexus pilot operator without receiving your account credentials.