Privacy Policy

Vanta is operated by Dan, known online as Danman311009 on Roblox and dan.2947 on Discord.

For privacy questions, data requests or other concerns about how Vanta handles information, contact us through the Vanta Support Server and open a ticket.

The information Vanta receives depends on the features you and your community use. This can include Discord user IDs and usernames, Roblox user IDs and usernames, linked account information, server and community information, dashboard permissions, staff profiles, ranks, duty records, leave records, applications, moderation records, activity records, logs, server configuration and information submitted through Vanta forms.

Where an ER:LC server is connected, Vanta may receive information made available by the ER:LC API. Depending on the feature, this can include server status, player information, teams, vehicles, callsigns, queue information, locations, commands and server events.

Vanta may also process technical information needed to keep the service working and secure, such as authentication events, error information, security events and limited request or browser information.

Some information is processed or stored by the systems Vanta uses without being freely available to the Vanta operator. We cannot simply browse or access most information held by Vanta whenever we want.

Access by the Vanta operator is limited to information that is reasonably necessary to operate, maintain, secure or support Vanta, investigate an issue or security incident, respond to a lawful request, or otherwise meet a legitimate operational or legal need.

Community owners and authorised staff may be able to access information belonging to their own community where Vanta gives them that permission. Their access is controlled by the community's permissions and is separate from the operator's access.

Information can come directly from you, from a community owner or administrator, from your use of Vanta, or from services connected to Vanta. These can include Discord, Roblox and ER:LC.

Vanta may also receive information from infrastructure and service providers that help us run the website, database, authentication, security and other core parts of the service.

We use information where reasonably necessary to provide Vanta, authenticate users, connect accounts, provide community management features, operate integrations, provide support, protect the service, investigate abuse and security problems, diagnose faults, maintain records, enforce our Terms of Service and comply with legal obligations.

We do not sell personal data.

Where UK data protection law applies, the lawful basis depends on what we are doing with the information. Depending on the circumstances, this may include performing a contract with you, taking steps at your request before a contract, our legitimate interests in operating and securing Vanta, complying with a legal obligation, or consent where consent is required.

Where we rely on legitimate interests, we consider whether the processing is necessary and whether the interests of the service are outweighed by the rights and interests of the people concerned.

Vanta lets community owners and authorised staff manage information about their communities. If a community collects information through applications, staff records, moderation records or other forms, the community is responsible for deciding what information it needs and how it uses that information.

Community administrators should only collect information they have a legitimate reason to collect and should handle it in line with applicable data protection and other laws.

We may make information available to service providers where this is reasonably necessary to operate Vanta. This can include providers for hosting, databases, authentication, security, communications and other technical infrastructure.

Information can also be exchanged with Discord, Roblox or ER:LC when that is necessary for a feature you or an authorised community administrator has enabled.

We may disclose information where required by law or where reasonably necessary to protect Vanta, its users or other people from fraud, abuse, security threats or other serious harm.

Vanta or its service providers may process information in countries outside the United Kingdom. Where UK data protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism or recognised safeguard.

We keep information for as long as it is reasonably needed for the purpose it was collected for, including providing the service, security, support, dispute handling, legal compliance and necessary operational records.

Different information can therefore have different retention periods. When information is no longer reasonably required, it may be deleted, anonymised or otherwise disposed of, subject to backups and information we are legally required or reasonably entitled to retain.

We use reasonable technical and organisational measures to protect information against unauthorised access, alteration, disclosure, loss or destruction. No internet service can guarantee absolute security.

If you believe that an account, integration, API key or other Vanta access has been compromised, revoke the affected access where possible and contact us through the support server.

Vanta may use cookies, local storage and similar technologies where needed for authentication, security, preferences and core functionality. Where we use non-essential technologies that require consent, we will provide an appropriate consent mechanism.

Vanta is a community management service and may be used by communities containing younger users. We do not ask users to provide unnecessary sensitive information. Community owners should also avoid collecting unnecessary personal or sensitive information from younger users through Vanta.

Depending on the law that applies to you, you may have rights to access your personal data, correct inaccurate information, request deletion, restrict processing, object to certain processing, receive certain information in a portable format, and withdraw consent where consent is the lawful basis.

To make a request, join the Vanta Support Server and open a ticket. We may need to verify that the request relates to you before acting on it.

If you have a concern, please contact us first so we have a chance to investigate and resolve it. If UK data protection law applies to you, you may also complain to the Information Commissioner's Office.

Vanta connects with independent services such as Discord, Roblox and ER:LC. Those services have their own privacy policies and terms. This policy does not cover information that those services process independently of Vanta.

We may update this policy when Vanta changes, our data practices change, or legal requirements change. The date at the top of this page shows when it was last updated. Where the law requires additional notice, we will provide it.

Vanta is intended to remain available for the long term, but we cannot promise that the service will operate forever. If Vanta is substantially changed or discontinued, users will be able to request access to their relevant personal data where applicable and legally possible. Any remaining information will be handled in line with this policy and applicable law.