Privacy Policy

Clear, Discord-friendly explanations of what we collect, why, and how you control it.

What We Collect

Discord identifiers: guild, channel, and user IDs needed to function.
Command usage metadata: command name, timestamps, and result status for reliability and anti-abuse.
Error context: stack traces and minimal context to diagnose issues; may include usernames or message snippets.
OAuth tokens: stored server-side only where required by features you enable; encrypted at rest.

How We Use Data

We use data strictly to run Boty and improve stability. We do not sell data, profile users, or run ads.

Operate features you enable (moderation, utilities, or integrations).
Prevent spam and abuse with basic rate limiting and anomaly detection.
Measure reliability (uptime, error rates) and guide bug fixes.

Example: Commands

We log a command name and status to diagnose failures. No message content is required for most commands.

Example: OAuth

If you link accounts, tokens are encrypted and used only to perform the actions you initiate.

Example: Abuse

Repeated failures or spam patterns may trigger temporary rate limits to keep the service healthy.

Retention

We keep data only as long as needed for the purpose it was collected or to meet legal requirements.

Aggregated analytics are stored without personal identifiers.

Security

Secrets are stored server-side only and never logged in plaintext.
Least-privilege permissions for infrastructure and the bot.
Encryption at rest where supported by the provider and TLS in transit.

Your Choices & Rights

Request deletion of guild-scoped data via support; include your guild ID.
Opt out of non-essential analytics where offered (defaults to minimal collection).
Restrict bot permissions to the minimum needed for your use.

Contact

Questions or requests? Reach out via the support server or the contact link in the footer. For data deletion, include your guild ID and proof of ownership.

Tip: You can find your guild ID by enabling Developer Mode in Discord settings and right-clicking the server.

Note: We aim to respond to verified deletion requests within 30 days.