1. Who we are
Waypoint is operated by Joel Torres, based in Ibiza, Spain.
- Contact: joeltorresc10@gmail.com
- Website: sellwithwaypoint.com
Waypoint is in Early Access. The service and this policy may change as it develops.
2. Who this policy covers
- Visitors to sellwithwaypoint.com.
- Community operators who use Waypoint to sell access to their Discord communities (“operators”).
- Members of those communities who start a purchase from Discord and receive access through Waypoint (“members”).
Depending on the context, Waypoint either decides how and why personal data is used (as a controller), or handles members’ data to provide the service to the operator whose community they are joining. Operators decide what they sell, to whom and on what terms, and are responsible for informing their members.
3. The data we handle
Information you give us
For example your name, email address and account details, and anything you send us when you contact us.
Discord information
Discord account and server identifiers (such as user IDs, usernames and server IDs), and the roles and access status needed to grant, maintain and remove access. Waypoint only receives what Discord makes available under the permissions an operator grants.
Stripe information
An operator’s Stripe Connected Account identifier and status, and the transaction and subscription metadata needed to connect a payment to the right access. That can include customer, checkout, payment and subscription identifiers, product and price references, amounts, currency, status and dates.
Members pay on Stripe Checkout. Waypoint does not receive or store full card numbers or other payment credentials: Stripe collects and processes them.
Product and configuration data
How an operator sets Waypoint up: products and plans, the Discord roles they unlock, and related settings.
Technical, security and log data
When you use the website or the service, our servers and hosting provider process technical data such as IP addresses, request details, timestamps and error logs.
Support communications
Messages you send us and our replies.
This website
This website does not use cookies, analytics or advertising trackers. To display its typefaces, your browser loads fonts from Google Fonts, so Google receives your IP address and standard request information. See Google Fonts and privacy.
4. Why we use it, and on what legal basis
- To provide the service: connecting payments to Discord access, granting the roles an operator configures and keeping subscriptions, renewals and cancellations connected to access. Legal basis: performance of our contract with the operator (GDPR art. 6(1)(b)), and the legitimate interest of the operator and of Waypoint in delivering access that a member has paid for (art. 6(1)(f)).
- To bill Waypoint fees and keep records. Legal basis: contract (art. 6(1)(b)) and legal obligations such as tax and accounting rules (art. 6(1)(c)).
- To keep the service secure and to prevent fraud and misuse. Legal basis: legitimate interests (art. 6(1)(f)).
- To answer support requests. Legal basis: contract or legitimate interests (art. 6(1)(b) or (f)).
- To run this website, including loading its fonts. Legal basis: legitimate interests in operating and presenting the website (art. 6(1)(f)).
- To meet legal obligations and to establish, exercise or defend legal claims. Legal basis: art. 6(1)(c) and (f).
Where we rely on legitimate interests, you can object (see section 10). We do not sell personal data.
5. Stripe
Payments are processed by Stripe, not by Waypoint. For its payment processing, Stripe acts as an independent provider (and controller) under its own terms, and operators hold their own Stripe Connected Accounts. See the Stripe Privacy Policy and the Stripe Connected Account Agreement.
6. Discord
Discord is an external platform. Waypoint works with Discord through the permissions an operator grants in their server. Your use of Discord is governed by Discord’s Terms of Service and Privacy Policy.
7. Service providers
We rely on these providers to run Waypoint:
- Railway: hosting and infrastructure for the website and the service (privacy policy).
- Stripe: payment processing and Connected Accounts (see section 5).
- Discord: the platform where access is delivered (see section 6).
- Google: website fonts, and email for support communications (privacy policy).
If this list changes, we will update this policy.
8. International transfers
Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States. Where that happens, we rely on the safeguards those providers offer, such as the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
9. How long we keep data
We keep personal data only for as long as we need it for the purposes above. Account and configuration data is kept while the account is active. After that, we delete or anonymise it within a reasonable time, unless the law requires us to keep it longer (for example for tax or accounting) or we need it to establish, exercise or defend legal claims. Technical and security logs are kept for a limited time.
10. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections and restricted access. Payment credentials stay with Stripe. No method of transmission or storage is completely secure.
11. Your rights
Under the GDPR you can ask to access, rectify or erase your personal data, to restrict or object to its processing, and to receive it in a portable format, where these rights apply. Where processing is based on consent, you can withdraw it at any time.
To exercise your rights, email joeltorresc10@gmail.com. We may need to verify your identity. We will reply within the time the law requires, normally one month. If we handle your data for a community operator, we may refer your request to that operator.
12. Complaints
You can complain to a data protection supervisory authority. In Spain that is the Agencia Española de Protección de Datos (AEPD). You can also contact the authority where you live or work. We would appreciate the chance to address your concern first.
13. Changes to this policy
We may update this policy as Waypoint develops. We will publish the new version here with its effective date and, for material changes, give notice by reasonable means.
14. Contact
Joel Torres · Ibiza, Spain · joeltorresc10@gmail.com