Version 1.0 · November 2026
Members & followers
Email us at admin@krownsec.xyz if you want us to remove or change the information tied to your verification, and we'll take care of it.
Server owners
You can manage or delete your account, your servers and your bots from your Zentro dashboard.
This privacy notice explains how KrownSec (“we”, “us” or “our”), the operator of Zentro, handles information when you use our services (the “Services”) — including when you visit getzentro.xyz, verify in a server that uses Zentro, or set Zentro up for a server you run. If you do not agree with this notice, please do not use the Services. Questions? Contact us at admin@krownsec.xyz.
Information you provide. When you create an account, set up a server, or contact us, we collect the information you choose to give us — such as account and contact details, and, for server owners, the Discord application credentials needed to run your bot. If an owner enables the backup feature, we process the structure of the chosen server (for example channel and role names) so that it can be restored later.
Information collected automatically. When you use the Services, we may process technical and connection information associated with your request. This kind of information doesn't identify you by name; we use it mainly to keep the Services running and secure and for basic analytics. The specific checks that run during verification are chosen by the server you are joining.
Sensitive information. We do not seek to process sensitive personal information through the Services.
Payments. The Services are free, so we do not collect payment-card information.
We process information for legitimate, limited purposes, including to:
Where required, we process your information only with your consent, which you may withdraw at any time.
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR: consent, which you can withdraw at any time; performance of a contract to deliver the Services you request; our legitimate interests in operating and securing the Services (for example preventing fraud and abuse), where these are not overridden by your rights; legal obligations; and vital interests, where processing is necessary to protect someone's safety.
If you are in Canada, we process your information with your express or implied consent, except in the limited circumstances permitted or required by applicable law.
We do not sell your personal information. We share it only in these situations: with the service providers and infrastructure that host and operate the Services, under contracts that require them to protect it and use it only on our instructions; where we believe disclosure is required to comply with the law or to protect rights and safety; and in connection with a business transfer such as a merger or acquisition. We never pool members across servers — a server can only ever re-add people who verified in that same server.
We use only the cookies and similar technologies needed to operate the Services and keep them secure. We do not use them to build advertising profiles of you.
We and our providers may store and process information in countries other than your own, including the United States and other jurisdictions where our infrastructure or providers operate. Data-protection laws in those countries may differ from those where you live. Where we transfer information out of the EEA, the UK or Switzerland, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, available on request.
We keep information only for as long as necessary for the purposes described here — generally while you have an account or a server set up with us — unless a longer period is required or permitted by law. Security-related details are retained only for the period needed for protection and are then removed or anonymised. When backups contain information that cannot be immediately deleted, we isolate it from further processing until deletion is possible.
We use reasonable technical and organisational measures designed to protect the information we process. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security. You access the Services at your own risk and should use a secure environment.
The Services are not directed to children under 18, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us at admin@krownsec.xyz and we will take appropriate steps to remove it.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of your information, to data portability, and to withdraw consent. To exercise them, email us at admin@krownsec.xyz (members), or use your dashboard (server owners). We will respond in line with applicable law. You may also remove Zentro's authorization in your Discord settings (Authorized Apps) at any time.
EEA, UK & Switzerland. You may lodge a complaint with your local data-protection authority (or, in Switzerland, the Federal Data Protection and Information Commissioner) if you believe we have processed your information unlawfully.
United States. Residents of states with comprehensive privacy laws — including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA) and Virginia (VCDPA) — have rights to know, access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, “sales” and certain profiling. We do not sell personal information or use it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights, and you may appeal a declined request by contacting us.
Canada. You may request access to or correction of your information and may withdraw consent, subject to legal and contractual limits.
Australia & New Zealand. We handle information consistently with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020, and you may complain to the relevant Information or Privacy Commissioner.
Republic of South Africa. You may request access or correction and may contact the Information Regulator if you are unsatisfied with how we handle a complaint.
Because no common standard for Do-Not-Track signals has been finalised, we do not currently respond to them. If a standard is adopted, we will update this notice.
We may update this notice from time to time. The revised version is effective once posted, and the date at the top reflects the latest change. For material changes we will take reasonable steps to notify you.
For any question about this notice or to make a privacy request, contact the KrownSec team at admin@krownsec.xyz. A postal address is available on request.