Privacy Policy

1. Introduction

Agely, LLC ("we," "us," or "our") provides age verification services for online communities. Throughout this policy, a "tenant" means the community that runs Agely and that you verify to join — today primarily a Discord server, with websites and apps to follow. Agely is the tool a tenant uses; the tenant is a separate party that receives the result of your verification. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to our website, our Discord bot, and all related services, on every platform where Agely operates.

2. Information We Collect

2.1 Authentication Information

When you sign in to our website through a supported identity provider (currently Discord, via our authentication provider Clerk), Agely reads — but does not store on its own servers — your basic account details so it can show you your servers and data:

• Your account ID with that provider (for example, your Discord user ID)
• Your username, display name, and profile picture

2.2 Age Verification Data

When you complete age verification through our service, we collect and process:

• Date of Birth: used only to calculate your age during verification, then discarded — we never store it for verification purposes (see Section 5.4 for the separate, opt-in birthday feature). We keep the computed age (for example, 34) and a coarse age band (for example, 30–39) with your result until you delete your data
• Age Estimation Results: summary data from facial analysis (an estimated age range)
• ID Validation Results: verification status of government-issued identification (when used)
• Verification Media: images/video used to run the check — held only transiently while the check runs and the result is delivered, then deleted (see Section 5)
• Verification Method: which verification method(s) you used
• Verification Timestamp: when you completed verification

2.3 Community Data

For community owners who use our service (for example, Discord server owners), we collect:

• Community identifiers and names (for example, a Discord server ID and name)
• Configuration settings (channels, roles, workflows, message templates)
• Identifiers of service-generated verification log messages

2.4 Automatically Collected Information

When you visit our website we collect a limited amount of technical information:

• Aggregate, cookieless page-view analytics via Vercel Web Analytics — anonymous counts used to understand site traffic, with no cookies, no cross-site tracking, and no user profiles
• Standard server request logs kept by our hosting provider (Vercel) for security and reliability

3. How We Use Your Information

We use your information for the following purposes:

• Age Verification: to verify your age and provide verification results to the communities you choose to verify in
• Service Delivery: to operate, maintain, and improve our services
• Security: to detect and prevent fraud, abuse, and security threats
• Communication: to send service-related notifications and respond to your inquiries
• Legal Compliance: to comply with applicable laws, regulations, and legal processes

4. Biometric Data Processing (Important)

Our age verification service may process biometric information (facial analysis from selfies or video). Here's what you need to know:

• Consent: by using our verification service, you explicitly consent to the collection and processing of biometric data for age verification purposes
• Agely stores no biometric media: your selfie, video, or ID image exists on our systems only for the seconds it takes to run the check and deliver the result, then our copy is deleted (24 hours maximum in rare edge cases). See Section 5 for how a tenant may keep a copy of your result
• Processing: images are analyzed by Amazon Web Services (Rekognition/Textract) to return a result. We have opted out of AWS's AI-service data retention, so AWS analyzes your image in the moment and does not retain it
• User Control: you can request immediate deletion of your data at any time (see Section 5.2)
• No Sale: we never sell or trade your biometric data; the only place your result goes is the tenant you chose to verify in
• Security: verification media is encrypted in transit and at rest while it briefly exists, in access-restricted private storage
• Purpose Limitation: biometric data is used solely for age estimation and identity verification — no other purposes

5. Data Retention and Deletion

5.1 Where Your Data Lives, and Automatic Deletion

What Agely stores

• No verification media: your selfie, video, or ID image is never kept on our systems — it exists only for the seconds it takes to run the check and deliver the result, then it is deleted (24 hours maximum in rare edge cases)
• No date of birth: used only to compute your age, then discarded — we keep the computed age and a coarse age band with your result
• The result-log reference: we store an identifier for the message your result was delivered in (for example, the Discord result-log message), so that when you delete your data we can go back and try to redact it
• In-progress verification sessions: these expire automatically if not completed

What the tenant keeps

When your check finishes, Agely delivers the result to the tenant. What the tenant retains — and for how long — is controlled by that tenant, and depends on the tenant type:

• Discord servers: the result is delivered to the server's private moderation channel. If the server has enabled media proof, your verification image is attached to that message and lives in their Discord channel. When you run /reset, Agely uses the stored message reference to try to redact that copy — removing any attached image or video and generalizing the result shown — as long as the bot is still in the server with permission to edit the message. If the bot has been removed or lacks permission, we cannot reach that copy, and the server would need to delete it.
• API and embedded widgets (as Agely expands beyond Discord): results are returned to the tenant's own application; each integration's handling — including how deletion requests are honored — will be described here as it launches.

5.2 User-Initiated Deletion

You can request complete data deletion at any time:

• On Discord, use the /reset command to delete your verification data — for a single server or across every server at once
• On any platform, contact us to have your data deleted
• Our service will redact its verification log messages where it can (note: on Discord, we can only edit messages if the bot is still in the server with appropriate permissions)
• After deletion, only anonymized summary data may remain in a community's own logs

5.3 Deletion Method

We use destructive deletion (permanent removal) rather than soft deletion (flagging). When you delete your data, it is permanently removed from our systems and cannot be recovered.

5.4 Optional Opt-In Features

These features store more than the defaults above — always strictly opt-in, with your explicit consent, and always removable. (1) Birthday Announcements: if a tenant (for example, a Discord server) turns this feature on and you choose to take part, Agely stores your birth date for that server only — nowhere else. It is kept only for as long as you stay opted in and the tenant keeps the feature enabled. You can remove it anytime with /birthday or /reset, and it is automatically purged if the bot is removed from that server. (2) Saved Verification (planned, not yet available): reuse your result in other communities without verifying again. Until you opt in to a feature like this, your date of birth is never stored and verification data is handled exactly as described above.

6. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• The tenant you're joining: your verification result (status, age band, method used) is delivered to the community you chose to verify in. That is the entire purpose of the check, and it is the only party your result is shared with
• Service Providers (subprocessors): we use a small set of trusted providers to operate the Service — Amazon Web Services (biometric AI processing; images are analyzed transiently and, because we have opted out of AWS's AI-service data retention, are not retained by AWS), Vercel (hosting, plus the short-lived private storage that briefly holds verification media before it is delivered and deleted, and cookieless Vercel Web Analytics for our website), Neon (our database — verification status and settings only; no media, and no date of birth except a birthday you opt in to save for birthday announcements), Discord (the platform Agely runs on and where results are delivered), and Clerk (dashboard sign-in). These providers act only on our instructions
• Payments: purchases are handled by the platform you buy through (currently Discord); Agely never receives or stores payment card data
• Legal Requirements: when required by law, court order, or government request
• Security and Fraud Prevention: to protect our users, services, and legal rights
• Business Transfers: in the event of a merger, acquisition, or sale of assets (with continued privacy protection)

7. Your Privacy Rights

7.1 Rights for All Users

• Access: request a copy of your personal data
• Deletion: request deletion of your data (see Section 5.2) or by contacting us
• Correction: request correction of inaccurate information
• Objection: object to processing of your data for certain purposes

7.2 Additional Rights for EU/EEA Users (GDPR)

• Data Portability: receive your data in a structured, machine-readable format
• Restriction of Processing: request limitation of how we process your data
• Withdraw Consent: withdraw consent for biometric data processing (note: this will prevent you from using our verification service)
• Lodge a Complaint: file a complaint with your data protection authority

7.3 Additional Rights for California Users (CCPA)

• Know: request details about personal information we've collected about you
• Delete: request deletion of your personal information
• No Sale: we do not sell personal information and have not sold it in the past 12 months
• Non-Discrimination: you have the right not to be discriminated against for exercising your privacy rights

To exercise any of these rights, use the deletion options in Section 5.2 or contact us at privacy@agely.xyz.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest
• Access Controls: strict access controls and authentication requirements for our systems
• Private Storage: for the brief time verification media exists on our systems, it lives in access-restricted private storage (Vercel Blob), never on public URLs
• Infrastructure: secure cloud infrastructure with Vercel, Neon, and AWS

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Communities use our service to enforce their age requirements, including platform minimums (for example, Discord's Terms of Service require users to be at least 13 years old). We process verification data for users of all ages (including minors) to provide this service.

Parents or guardians may request deletion of a minor's data by contacting us at privacy@agely.xyz.

10. International Data Transfers

Our services are operated from the United States. If you access our services from outside the United States, your information will be transferred to, stored, and processed in the United States.

We implement appropriate safeguards to protect your data in accordance with applicable data protection laws, including GDPR for EU users.

11. Third-Party Links and Services

Our website and services may contain links to third-party websites and services (such as Discord). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our website or support server
• Sending an email notification for significant changes (if we have your email)

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: