Privacy Policy
Last updated: November 2026
We respect your privacy. This policy explains what data we collect and how we use it.
1. Data we collect
We collect public identifiers from Discord (user/server/channel IDs, username, avatar) and the server settings you configure. For protection and automod features we process message data in real time (such as links and attachments), and where a server enables AI features the relevant message text as well, all without storing your regular message content. Content you deliberately submit to run a specific feature (such as tags, sticky messages, suggestions, or autoresponses) is stored, since the feature itself depends on keeping it. When a server admin uses the server architect, we also process the server's structure (the names of its channels, categories and roles, channel topics and permission settings) and the admin's messages in that conversation. We keep the conversation in memory only while it is open and don't save it. When someone copies a server template or clones a server with /template, we read that template's or server's structure (its roles, categories and channels with their permissions, and, when cloning, its custom emojis and stickers) to recreate it, and keep only a record of what was applied. If a server's managers let its members clone it, a member's clone reads only what that member can see, and we keep a count of these clones; the member's name is also noted in that server's moderation log channel, if it has one, once a day for each member.
2. How we use data
We use data only to run the features you enable (moderation, levels, tickets…) and to show your settings in the dashboard. We never sell your data.
3. Legal basis for processing
We process your data on the basis of contractual necessity (running the features you enable yourself, including the server architect whenever an admin asks it for changes), our legitimate interest in protecting your server from abuse and in giving each server and each person the architect's free trial only once, and explicit consent specifically when you enable the other AI features, since those are fully optional and off by default.
4. Third-party sharing
We share data only where technically required to run the service: with Discord (its API), with the cloud hosting provider that runs the dashboard, with our payment provider (PayPal) for premium subscriptions, and, only where a server enables AI features, with our AI provider, Anthropic (Claude), which processes the relevant message text to classify or answer it, and, when an admin uses the server architect, the server's structure and the admin's messages to propose changes. These are service providers that process data on our behalf only; we never share data for marketing, and we never sell it.
5. Data retention
We keep your server settings while the bot is in your server. When the bot is removed or you request deletion, the server's data is deleted, except billing records (Premium subscriptions and Premium time bought from a balance), which we keep for accounting. Your personal balance, the top-ups and refunds behind it and what you spent are tied to your Discord user ID, not to a server, and we keep them for accounting and so your money is never lost. Actual payment details (card or account information) are handled entirely by PayPal; we never hold them ourselves. There are two exceptions, so that removing and re-adding the bot doesn't restart a free trial or a month's AI allowance. For the server architect we keep one-way hashes of the server ID and of the user ID of each person who used free builds, not the IDs themselves, together with their usage (the number of builds and the AI cost). For the other AI features we keep a one-way hash of the server ID with the number of AI requests it made this month and on each day of the last week, and we delete a month's counts once it ends. For members' AI commands we also keep a one-way hash of the server ID and the member's user ID together, with how many of those commands the member used on each day of the last week. These hashes hold nothing else about the server, its members or that person. We also keep backups of the bot's database, to restore it after a failure, and the bot's activity logs, which can contain Discord IDs when an error occurs. We delete each backup, and each day's logs, after at most 30 days, so data we delete from the bot is gone from them within 30 days too.
6. Automated decisions
When a server enables AI features, the system may take automatic action (such as deleting a message, timing out, or kicking a member) based on automated content classification, depending on how your server's staff configured it, without human review of each individual case. Any member can submit an appeal via the /appeal command for the server's staff to review.
7. Your rights
You may request access to, correction of, deletion of, or restriction on your data, and object to processing based on our legitimate interest. When we delete your data at your request, we keep what servers need for moderation and security (warnings, moderation actions and notes, automod offenses, the scheduled end of a ban or timeout, and security settings that include your ID), the records of your tickets and modmail threads and of giveaways you hosted, and your balance and payments for accounting. Content you added to a server, such as suggestions and tags, stays without your ID. Where our processing relies on your consent (such as AI features), you may withdraw it at any time by disabling the feature. Contact us via the support server to exercise any of these rights; you may also lodge a complaint with your local data protection authority if you're not satisfied with our response.
8. Children's privacy
The service is not directed at anyone below the minimum age Discord itself requires, and we do not knowingly collect data from users under that age. Members between that age and 18 can use the AI features, so those features follow extra safety rules: replies stay suitable for teenagers, never turn sexual, never ask for personal details, and point anyone who says they are in danger to a trusted adult or emergency services. Answers to the AI commands and to FAQ questions are marked as written by AI, and they can be wrong. Don't share personal details with them. Each server's staff can turn the AI features off, and anyone can report a harmful AI reply through our support server.
9. International data transfers
Your data may be processed in countries other than your own, since we rely on global providers (Discord, PayPal, and our AI provider). We only work with providers that apply reasonable protections to your data.
10. Data security
We use encrypted connections (HTTPS), and your login session itself is fully encrypted (AES-256-GCM) rather than stored as plain text, alongside restricted internal access controls. That said, no method of electronic transmission or storage is 100% secure.
11. Cookies
The dashboard uses only secure (httpOnly) functional cookies: a session cookie to keep you signed in, and short-lived cookies (expiring within minutes) during the login flow itself to protect against forgery (CSRF) and remember where to return you afterward. We use no tracking or advertising cookies.
12. Changes to this policy
We may update this policy; the updated version is posted here with its update date. For material changes we also announce them via the support server.
13. Contact
For any privacy question, reach us via the support server.