1. Who operates Cordlytics
Cordlytics is operated by Felix Nagel, Max-von-Pettenkofer-Weg 5, 60438 Frankfurt am Main, Germany. For privacy questions or requests, email felix@cordlytics.com. Full provider information is available in the legal notice.
2. Our roles
Cordlytics is the controller for account authentication, subscriptions, security, support, and operation of the service. That means Cordlytics decides why and how those records are processed.
For messages from configured Discord channels, the server owner or administrator chooses the workspace, coverage scope, and use of the result. That customer is the controller and Cordlytics processes the covered community data on its instructions under the Data Processing Agreement.
3. Data processed
- Account data: Discord account identifier, name, email address, profile image, Discord connection and session information, and servers the account is authorized to manage.
- Connected-community data: server and channel information, selected channels, short-lived public message content, message and channel identifiers, timestamps, and pseudonymous participant identifiers specific to each server.
- Product records: creator profiles, insight reports, research briefs, public YouTube source information, Content Plans, and corrections or edits made by the creator.
- Billing data: workspace subscription status, billing period, plan, currency, and billing reference identifiers. Polar processes payment details; Cordlytics does not store complete card details.
- Contact inquiries: name, email address, selected topic, message, and any details supplied in the inquiry.
- Security and service data: request logs, IP address, browser or user-agent information, errors, and events needed to secure and operate the service.
4. Purposes and legal bases
Where Cordlytics acts as controller, account, workspace, research, and billing-status data is processed to provide the requested service and administer the contract (Article 6(1)(b) GDPR). Required financial and compliance records are processed to meet legal obligations (Article 6(1)(c)). Security logs, service diagnostics, abuse prevention, and necessary product operations rely on Cordlytics' legitimate interest in running a secure and reliable service (Article 6(1)(f)).
When Cordlytics processes configured community discussions as a processor, the connected server's controller is responsible for its legal basis and instructions. Cordlytics does not use that content for advertising, individual member profiling, or training its own models.
Contact inquiries are processed to answer the request, take requested steps before or during a contract, and provide support (Article 6(1)(b) or 6(1)(f), as applicable).
5. How community data is limited
Cordlytics processes only public Discord discussions selected by an authorized workspace administrator. Participant identifiers are replaced with pseudonymous identifiers specific to each server before storage. Raw Discord messages and temporary collection records stored by Cordlytics are deleted within 14 days. Reports retain summarized themes, aggregate information, and paraphrased examples. Cordlytics does not create member profiles or compare people across servers.
6. Other retention periods
Account, workspace, creator-profile, research, and Content Plan data remains until the workspace or account is deleted, except where limited records must be retained for security, disputes, or legal obligations. Our hosting provider retains request and error logs for up to seven days. Anthropic's standard commercial API service deletes inputs and outputs within 30 days, except where longer retention is needed for safety enforcement or law. Google may retain Gemini API prompts and responses for 55 days for abuse monitoring. Contact messages are normally deleted within 90 days after resolution unless they remain necessary for support, a dispute, fraud prevention, or a legal obligation. Polar separately retains transaction records under its legal obligations as merchant of record.
7. Service providers and transfers
Cordlytics uses Cloudflare for hosting and supporting infrastructure; Google Workspace for support email; Anthropic, TypeSafe, and Google Gemini for AI analysis and research; and Polar for billing and transaction support. Discord and Google/YouTube also process data under their own platform terms. The current roles, purposes, and links are listed on the service-provider page.
Some providers operate outside the European Economic Area. Where a restricted transfer occurs, Cordlytics relies on an applicable adequacy decision, the EU Standard Contractual Clauses, and any additional safeguards included in the provider agreement.
8. YouTube API Services
Cordlytics uses YouTube API Services to find public creator-channel and video information. Use of those features is also subject to the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy. Cordlytics does not request access to a creator's private YouTube account or private channel analytics.
9. Necessary cookies and local storage
The application uses strictly necessary cookies or browser storage for sign-in, subscription checkout, and security. Cordlytics does not currently use advertising cookies, cross-site tracking, or behavioral analytics.
10. Choices and rights
Workspace owners choose the public Discord coverage scope and can disconnect or delete the workspace. Signed-in users can request workspace or account deletion from the application. Depending on the law that applies, a person may request access, correction, erasure, restriction, portability, or object to processing.
Requests may be sent to felix@cordlytics.com. Cordlytics may need to verify the requester's identity or workspace relationship. For a request about a specific connected community, Cordlytics may coordinate with that server's controller. A complaint may also be submitted to a competent supervisory authority, including the Hessian Commissioner for Data Protection and Freedom of Information.
11. Automated processing
Cordlytics uses AI to analyze discussions and assist with content research. The outputs are suggestions for a creator to review, not decisions that produce legal or similarly significant effects about community members.
12. Changes
Material changes will be posted here with a revised date and, where required, communicated through the service. Questions about this policy can be sent to the contact address above.