Effective
This policy explains what Delta Seven does with personal data. It covers the Delta Seven website, every resource we sell for FiveM servers, and the Delta Panel web application through which those licences are managed.
It is written to reflect what the product actually does. Where a category of data is not collected, this policy says so rather than staying silent.
For a customer's own account, D7 decides what is held and why, and is the controller of that data. That is the Discord account used to sign in, the licence, and the servers registered against it.
For the player data our resources read on a customer's server, the customer decides. A server owner runs their own FiveM server, holds their own player records, and uses our resources to read and act on them. D7 processes that data on the customer's instructions and does not decide what is collected on their server.
If you are a player on someone's server and want to know what is held about you, the server owner is the right person to ask. They control that data; we provide the tool they use.
Signing in uses Discord. We receive and store your Discord user ID, username and avatar reference, and the Discord servers and roles relevant to the permissions you have been granted.
We store your licence, the servers bound to it, and the public IP each server is bound to. A server's IP is part of how a licence is enforced.
We keep an audit record of administrative actions taken through the Panel, so a server owner can see who did what. This is a product feature, not analytics.
The Panel displays data that already exists on the customer's own server: characters, identifiers, inventories, vehicles, bans and similar records. It is read from their server and shown to authorised staff.
Delta Panel does not create player accounts and does not copy a customer's player database into a permanent D7 archive. Short-lived copies are held only to make the Panel responsive, and expire on their own.
Live Screens shows a live view of a connected player's screen to authorised staff while they are watching it.
The video is transient. It is not recorded, not stored, and cannot be downloaded through the product. There is no screenshot feature: the operation that once provided one has been removed from the product entirely.
A stream exists only while a member of staff has the card on screen in a focused window. When nobody is watching, the player's client stops sending.
Delta Panel uses one session cookie to keep you signed in, and a second one for the Platform Admin area. They are strictly necessary: without them you cannot stay signed in.
Your language choice and the server you last selected are kept in your browser's local storage so the interface opens where you left it. That information stays in your browser.
There is no analytics, no advertising, no tracking pixel and no third-party measurement script in any part of this product. We do not track you across other websites.
Discord provides sign-in. Salla handles purchases through our store. Cloudflare sits in front of our websites. Each receives only what its function requires.
Payment details are handled by Salla and its payment providers. D7 does not see, receive or store card numbers.
We do not sell personal data, and we do not share it for anyone else's advertising.
Account, licence and server records are kept while the account exists.
Operational records are kept for a set time and then deleted automatically: the record of a command sent to a server for about two hours, the administrative audit trail for 90 days, and security-related audit entries for 180 days. Background job records are kept for a week.
The deletion runs on a schedule as part of the platform maintaining its own tables, not on request.
Live video is never retained, because it is never stored in the first place.
Under the Saudi Personal Data Protection Law you may ask to see the personal data held about you, ask for it to be corrected, ask for it to be deleted, ask how it is used, and object to processing in the cases the law allows.
We answer such requests within 30 days. Where a request genuinely needs longer, we will tell you before that period ends.
If your request concerns data on a customer's game server, we will help, but the server owner may need to act, because it is their data.
Access to the Panel is controlled per user and per server, and is enforced on the server side rather than by hiding things in the browser.
Traffic is encrypted in transit. Administrative actions are recorded.
No service can promise that nothing will ever go wrong, and this policy does not make that promise. If a breach affects personal data, we notify the competent authority and affected people as the law requires.
If this policy changes in a way that affects you, the effective date below changes with it and the previous position does not apply retroactively.