How we handle your community's data
A plain-language summary of what Midnight CRM stores, how it's protected and how to delete it. The privacy policy is the full legal version.
What we store
Members
Discord ID, display name, avatar, roles, join date, activity counts and when they were last seen. Members who leave are marked inactive rather than kept as current members.
Messages
The bot stores message text, author and channel for analytics, keyword trends, automations and moderation. Attachments are kept as Discord links, not copies.
UGC media
Media submitted in channels you set up for user-generated content is copied to our storage so it stays available for review and your optional public library.
Your account
Your Discord profile and the servers you manage, used to sign you in and keep your server list up to date.
How it's protected
Isolation per server
Row-level security in the database limits each server's data to that server's team, with roles from owner to read-only.
Encrypted secrets
Discord sign-in tokens, custom bot tokens, API credentials and webhook secrets are encrypted with AES-256-GCM. API access tokens are stored only as one-way hashes.
Audit log
Sensitive dashboard changes such as publishing workflows, bulk sends and moderation actions are recorded with who made them.
Services that process data
- Vercel hosts the web app.
- Supabase provides the database and file storage.
- OpenAI powers AI features. When you use them, the relevant messages or server statistics are sent for processing, for example messages checked by AI moderation.
- Stripe handles payments; we never see card details.
- Sentry collects errors and performance data so we can fix problems.
- Resend sends account and billing emails.
Permissions
Signing in asks Discord for the list of servers you're in. The bot is added with Administrator permission so workflows can manage roles, channels, messages and moderation for you. You can remove it from your server at any time.
Deleting your data
Email support@midnightcrm.com to have your server's data deleted. We complete requests within 30 days. See the privacy policy for retention periods and your rights.
Run your community from one place
Connect your server, add the bot, and start syncing members and launching workflows in minutes. Free for communities up to 500 members.
- Free plan, no card needed
- Real member sync
- Upgrade any time
Questions first? Ask us in our Discord