Privacy Policy
This Privacy Policy explains how Sinux Consulting (SSM Registration No. 202503207573), based in Malaysia ("we", "us"), collects, uses, and protects personal information when you use the Sinux Relay platform and portal (the "Service"). We are the controller of the information described here in relation to platform accounts and authentication. For data inside a specific Client workspace, the Client is also a controller (see "How information is stored and shared").
1. Information we collect
We collect:
- Discord account information — your Discord user ID, username, avatar, and email address, received when you sign in with Discord. We use the Discord user ID as your identifier.
- Workspace and configuration data — the servers, channels, routing rules, templates, and team-member assignments you create.
- Forwarded message content — when you direct the Service to forward a message, we process its content to deliver it. We do not retain message bodies; we log only operational metadata such as message identifiers, source and destination, timestamp, and delivery status.
- Activity and audit logs — records of configuration changes and forwarding actions, including the acting account's identifier, kept for security and accountability.
- Technical data — an authentication session cookie and standard request and log information needed to operate and secure the Service.
2. How we use information
We use this information to:
- authenticate you and control access to workspaces;
- provide, operate, and maintain the Service;
- deliver and log the forwarding actions you request;
- secure the Service, prevent abuse, and investigate incidents;
- provide support; and
- comply with our legal obligations.
3. Cookies
We use a single essential authentication cookie to keep you signed in, scoped to the Sinux Relay domain and its subdomains so that one sign-in works across your workspace. We do not use advertising or third-party tracking cookies.
4. How information is stored and shared
We do not sell your personal information. We use the following providers to run the Service:
- Discord Inc. — authentication and message delivery (privacy policy at https://discord.com/privacy).
- Supabase — database and authentication hosting (https://supabase.com/privacy).
- Vercel — application hosting (https://vercel.com/legal/privacy-policy).
5. Workspace visibility and disclosures
Within a Client workspace, your activity and the configuration you create are visible to that Client's authorised administrators, who act as an independent controller of that workspace's data; please direct workspace-specific requests to the relevant Client. We may also disclose information where required to comply with law, enforce our Terms, or protect the rights, safety, and security of users and the Service.
6. Data retention
We retain account and workspace data for as long as your access or workspace remains active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When a workspace is deleted, its associated configuration, members, and logs are deleted. Operational logs are retained for a limited period for security and accountability.
7. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Because we sign you in through Discord, some information (such as your profile) is controlled by Discord and managed in your Discord account. To exercise your rights with us, contact support@sinuxconsulting.com. We do not sell personal information.
8. Security
We use technical and organisational measures designed to protect personal information, including access controls and strict tenant isolation, and we restrict data access to authorised server-side processes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children
The Service is not directed to children. You must meet Discord's minimum age requirement (and be at least 13) to use it. We do not knowingly collect personal data from children below that age.
10. Third-party links and content
Content forwarded through the Service, and links it may contain, can lead to third-party websites or services that we do not control. We are not responsible for their content or privacy practices, and their own policies apply.
11. International users
Our providers may process and store data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
12. Changes to this Policy
We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date above.
13. Contact
Questions about this Policy or our data practices? Contact us at support@sinuxconsulting.com.