Data & Security

Agely is built to hold as little of your data as possible. This page summarizes, in plain terms, what we store, where it lives, how it's protected, and how to remove it. For the full legal detail, see our Privacy Policy.

Throughout, a "tenant" means the community that runs Agely and that you verify to join — today a Discord server, with APIs and websites to follow. Agely is the tool; the tenant is a separate party that receives your verification result.

What Agely stores: almost nothing

• No biometric media: your selfie, video, or ID image is never kept on our servers — it exists only for the seconds it takes to run the check and deliver the result, then it is deleted (24 hours maximum in rare edge cases)
• No date of birth: a DOB is used only to compute your age, then discarded — we keep the computed age and a coarse age band with your result
• No payment data: purchases go through the platform you buy from (currently Discord); we never see card details
• One small reference: we keep an identifier for the message your result was delivered in, so that if you delete your data we can try to redact it (remove any image/video and generalize the result)
• No cross-site tracking: our website uses cookieless analytics and a sign-in cookie — nothing more

Where verification media lives

On Agely: transient only

While a check runs, your image is processed in memory and held briefly in access-restricted private storage (Vercel Blob) so it can be delivered with your result. Our copy is then deleted automatically — within seconds in the normal case, 24 hours at most.

On the tenant: controlled by the community

When your check finishes, Agely delivers the result to the tenant. What the tenant keeps, and for how long, is controlled by that tenant, and depends on the tenant type:

• Discord servers: the result is delivered to the server's private moderation channel. If the server enabled media proof, your verification image is attached to that message and lives in their Discord channel. Running /reset asks Agely to redact that copy — removing the image or video and generalizing the result — as long as the bot is still in the server with permission to edit the message; if not, the server would need to remove it
• APIs & embedded widgets (as Agely expands beyond Discord): results are returned to the tenant's own application; each integration's handling will be described here as it launches

How your image is processed

Age estimation, ID text extraction, face matching, and the optional liveness check are performed by Amazon Web Services (Rekognition and Textract). We have opted out of AWS's AI-service data retention, so AWS analyzes your image in the moment and does not retain it. Agely reads the text on an ID; it does not authenticate the document itself.

What we keep durably

The only records we retain until you delete them are:

• Your verification result for a tenant: status (verified, pending, or rejected), the coarse age band, the computed age, and which method(s) you used
• Tenant configuration: a community's settings, channels, roles, and workflows
• No media, no date of birth, and no payment data are ever part of these records

Removing your data

You are in control of your data at any time:

• On Discord, run /reset to delete your verification data — for a single server or across every server at once. Where permissions allow, it also strips your image from the tenant's result message
• Deletion is destructive: records are permanently removed, not just flagged, and cannot be recovered
• On any platform, you can contact us to have your data deleted

Security measures

• Encryption in transit (HTTPS/TLS) and at rest
• Access-restricted private storage for the brief time media exists — never on public URLs
• Strict access controls and authentication for our systems
• A narrow, opted-out AI processing path, so your biometric image isn't retained by our AI provider
• Secure, managed cloud infrastructure (Vercel, Neon, AWS)

Subprocessors

We rely on a small set of trusted providers to run the Service:

• Amazon Web Services — biometric AI processing (opted out of AI-service data retention)
• Vercel — hosting, short-lived private media storage, and cookieless website analytics
• Neon — our database (verification status and settings only)
• Discord — the platform Agely runs on and where results are delivered
• Clerk — dashboard sign-in

For the full legal detail, including your rights, see our Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: