Privacy Policy

1. Introduction

Agely, LLC ("we," "us," or "our") provides age verification services for online communities — today primarily Discord servers, with support for other platforms such as websites and apps to follow. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to our website, our Discord bot, and all related services, on every platform where Agely operates.

2. Information We Collect

2.1 Authentication Information

When you sign in to our website through a supported identity provider (currently Discord, via our authentication provider Clerk), we collect:

• Your account ID with that provider (for example, your Discord user ID)
• Your username and display name
• Your profile picture
• Email address (if provided by the identity provider)

2.2 Age Verification Data

When you complete age verification through our service, we collect and process:

• Date of Birth: used only to calculate your age during verification — we never store your exact date of birth, only a coarse age band (for example "18+")
• Age Estimation Results: summary data from facial analysis algorithms
• ID Validation Results: verification status of government-issued identification (when used)
• Verification Media: temporary images/video used for age estimation and identity verification
• Verification Method: which verification method(s) you used
• Verification Timestamp: when you completed verification

2.3 Community Data

For community owners who use our service (for example, Discord server owners), we collect:

• Community identifiers and names (for example, a Discord server ID and name)
• Configuration settings (channels, roles, workflows, message templates)
• Identifiers of service-generated verification log messages

2.4 Automatically Collected Information

We automatically collect certain technical information when you use our services:

• IP address (for security and fraud prevention)
• Browser type and version
• Device type and operating system
• Usage data and interaction patterns

3. How We Use Your Information

We use your information for the following purposes:

• Age Verification: to verify your age and provide verification results to the communities you choose to verify in
• Service Delivery: to operate, maintain, and improve our services
• Security: to detect and prevent fraud, abuse, and security threats
• Communication: to send service-related notifications and respond to your inquiries
• Legal Compliance: to comply with applicable laws, regulations, and legal processes

4. Biometric Data Processing (Important)

Our age verification service may process biometric information (facial analysis from selfies or video). Here's what you need to know:

• Consent: by using our verification service, you explicitly consent to the collection and processing of biometric data for age verification purposes
• Minimal Storage: verification media is stored privately, only to support the community's review of your verification result, and is automatically deleted — at most 180 days after verification
• User Control: you can request immediate deletion of your data at any time (see Section 5.2)
• Third Parties: we do not sell, share, or disclose your biometric data to third parties except as required by law
• Security: verification media is encrypted in transit and at rest, in access-restricted private storage
• Purpose Limitation: biometric data is used solely for age estimation and identity verification — no other purposes

5. Data Retention and Deletion

5.1 Automatic Deletion

• Verification media (images/video): automatically deleted, at most 180 days after verification
• Exact date of birth: never stored — only a coarse age band is kept with your verification result
• In-progress verification sessions: expire automatically if not completed

5.2 User-Initiated Deletion

You can request complete data deletion at any time:

• On Discord, use the /reset command to delete your verification data — for a single server or across every server at once
• On any platform, contact us to have your data deleted
• Our service will redact its verification log messages where it can (note: on Discord, we can only edit messages if the bot is still in the server with appropriate permissions)
• After deletion, only anonymized summary data may remain in a community's own logs

5.3 Deletion Method

We use destructive deletion (permanent removal) rather than soft deletion (flagging). When you delete your data, it is permanently removed from our systems and cannot be recovered.

5.4 Optional Saved Verification (Planned)

We may offer an optional feature that lets you save your verification result so you can reuse it in other communities without verifying again. If offered: it will be strictly opt-in with your explicit consent at verification time, you will be able to withdraw consent and delete the saved result at any time, and nothing will be saved for reuse without that consent. Until you opt in, verification data is handled exactly as described above.

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Community Owners: verification results (verification status, age band, method used) are shared with the communities you choose to verify in
• Service Providers: we use trusted third-party services — Clerk (authentication), Vercel (hosting), Neon (database), Amazon Web Services (verification media storage), and payment platforms such as Discord
• Legal Requirements: when required by law, court order, or government request
• Security and Fraud Prevention: to protect our users, services, and legal rights
• Business Transfers: in the event of a merger, acquisition, or sale of assets (with continued privacy protection)

7. Your Privacy Rights

7.1 Rights for All Users

• Access: request a copy of your personal data
• Deletion: request deletion of your data (see Section 5.2) or by contacting us
• Correction: request correction of inaccurate information
• Objection: object to processing of your data for certain purposes

7.2 Additional Rights for EU/EEA Users (GDPR)

• Data Portability: receive your data in a structured, machine-readable format
• Restriction of Processing: request limitation of how we process your data
• Withdraw Consent: withdraw consent for biometric data processing (note: this will prevent you from using our verification service)
• Lodge a Complaint: file a complaint with your data protection authority

7.3 Additional Rights for California Users (CCPA)

• Know: request details about personal information we've collected about you
• Delete: request deletion of your personal information
• No Sale: we do not sell personal information and have not sold it in the past 12 months
• Non-Discrimination: you have the right not to be discriminated against for exercising your privacy rights

To exercise any of these rights, use the deletion options in Section 5.2 or contact us at privacy@agely.xyz.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: strict access controls and authentication requirements for our systems
• Private Storage: verification media lives in access-restricted private storage, never on public URLs
• Infrastructure: secure cloud infrastructure with Vercel, Neon, and AWS

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Communities use our service to enforce their age requirements, including platform minimums (for example, Discord's Terms of Service require users to be at least 13 years old). We process verification data for users of all ages (including minors) to provide this service.

Parents or guardians may request deletion of a minor's data by contacting us at privacy@agely.xyz.

10. International Data Transfers

Our services are operated from the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States.

We implement appropriate safeguards to protect your data in accordance with applicable data protection laws, including GDPR for EU users.

11. Third-Party Links and Services

Our website and services may contain links to third-party websites and services (such as Discord). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our website or support server
• Sending an email notification for significant changes (if we have your email)

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: