Chính sách Bảo mật Hệ thống Triển lãm và Bình chọn Votefolio

1. Data Collection and Minimization Principle

Votefolio strictly adheres to data minimization principles, processing only operational metadata necessary for exhibition and anti-cheat verification:

• Discord User ID, Username, Avatar hash, and Slack User ID / Team ID: Used to attribute creations and verify voter eligibility.
• Guild ID and Channel ID: Used for multi-tenant data partitioning and targeted card broadcasting.
• Submission Metadata: Title, description, media URL, category tags, and visibility status.
• Vote & Rating Records: Voter ID, submission ID, rating value, timestamp, and account join date (for anti-cheat heuristics).

2. Multi-Tenant Data Storage and Security

Persistent records are stored in SOC 2-compliant Cloudflare D1 relational databases, strictly partitioned by tenant_id. Cross-tenant data leakage between Discord guilds and Slack teams is cryptographically and architecturally prevented.

3. Zero Chat Logging Guarantee

Votefolio only processes explicit slash commands (/submit, /leaderboard) and button clicks. The service never reads, inspects, logs, or sells regular community conversation messages.

4. Private Submissions and Right to Erasure

Creators may specify visibility:hidden to keep entries private. Members and workspace administrators may request removal of any submission and its corresponding vote records at any time.