1. Data Collection and Minimization Principle
Votefolio strictly adheres to data minimization principles, processing only operational metadata necessary for exhibition and anti-cheat verification:
- Discord User ID, Username, Avatar hash, and Slack User ID / Team ID: Used to attribute creations and verify voter eligibility.
- Guild ID and Channel ID: Used for multi-tenant data partitioning and targeted card broadcasting.
- Submission Metadata: Title, description, media URL, category tags, and visibility status.
- Vote & Rating Records: Voter ID, submission ID, rating value, timestamp, and account join date (for anti-cheat heuristics).
2. Multi-Tenant Data Storage and Security
Persistent records are stored in SOC 2-compliant Cloudflare D1 relational databases, strictly partitioned by tenant_id. Cross-tenant data leakage between Discord guilds and Slack teams is cryptographically and architecturally prevented.
3. Zero Chat Logging Guarantee
Votefolio only processes explicit slash commands (/submit, /leaderboard) and button clicks. The service never reads, inspects, logs, or sells regular community conversation messages.
4. Private Submissions and Right to Erasure
Creators may specify visibility:hidden to keep entries private. Members and workspace administrators may request removal of any submission and its corresponding vote records at any time.