Privacy Policy

1. Who is responsible

Krishna Khong, an individual based in Sydney, Australia, is responsible for the Bot’s handling of personal information. Contact: krishna@khong.dev.

2. What the Bot collects

The Bot collects only what it needs to run and to keep the service secure. Depending on which features are enabled, that can include:

• Discord user IDs, usernames and display names;
• Discord server (guild) IDs, channel IDs and role IDs needed to route commands and apply permissions;
• the command you used, its options, and the time it was used;
• server configuration for the Bot, such as enabled features and moderator settings;
• error and diagnostic logs, including the technical details of a failed request; and
• message content only where a feature must read it to work — for example, when the Bot is invoked in a channel or is configured to respond to messages there.

The Bot does not collect your email address, phone number, payment details, precise location, or the contents of your direct messages unless you send a command to the Bot in a direct message and a feature needs that input. The Bot does not sell personal information and does not use it for advertising.

If a feature changes what is collected, this page will be updated to name the feature and the new data before the feature is enabled.

3. Message content

The Bot reads message content only where it needs to for a feature you or a server moderator has enabled, or where you invoke it. It does not store entire channel histories. Command inputs may be kept for a short period so a command can be completed, faults can be investigated, and abuse can be handled.

If you do not want a message processed by the Bot, do not invoke it and do not enable message-reading features in your server.

4. Why the Bot uses it

• to run the commands and features you ask for;
• to remember server settings and preferences;
• to keep the Bot secure, prevent abuse, and enforce these terms;
• to diagnose errors and improve reliability; and
• to comply with legal obligations.

5. Legal bases

Where Australian privacy law applies, I rely on your consent (when you use a command or enable a feature), my legitimate interests in running and securing a small community service, and compliance with legal obligations. Where the GDPR or UK GDPR applies, the corresponding bases are consent, legitimate interests, and legal obligation. You can withdraw consent by stopping use of the Bot and asking for deletion.

6. Who it is shared with

The Bot runs on Discord and on hosting infrastructure used to operate it. Discord processes messages and account data under its own privacy policy. Hosting providers may process technical logs as part of running the service. I do not sell personal information, and I do not share it for advertising.

I may disclose information if required by law, or if necessary to protect the rights, safety or security of the Bot, its users, or the public.

7. Retention

• Command and error logs: up to 30 days, unless needed to investigate an ongoing security or abuse issue.
• Server configuration and preferences: while the Bot remains in the server, or until the owner asks for deletion.
• Data tied to a user who asks for deletion: removed within 30 days, except where the law requires retention.
• Backups: any backup that contains the data is cycled within 30 days.

Some technical logs kept by Discord or a hosting provider are outside my control and follow their retention policies.

8. Security

Access to the Bot’s systems is limited, tokens are kept out of source code, and the Bot requests only the Discord permissions it needs. No service is perfectly secure. If you find a vulnerability, please report it to krishna@khong.dev rather than testing it against other users.

9. Your rights

You can ask what personal information the Bot holds about you, ask for a correction, or ask for deletion. Email krishna@khong.dev from the address you use for the request, and include your Discord user ID so I can find the right records. I may need to verify that the request is yours.

You can also complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au, or to your local data protection authority if you are outside Australia.

10. Children

The Bot is not directed at children. Discord requires users to meet its minimum age in their country. If you are below that age, do not use the Bot. If I learn that the Bot holds personal information from a child below the applicable age, I will delete it.

11. International transfers

The Bot and its hosting may process data in Australia and in other countries where Discord or the hosting provider operates. Where required, I take reasonable steps to ensure transfers are protected by appropriate safeguards.

12. Changes to this policy

I may update this policy when the Bot or the law changes. The current version is always at this URL, with the “last updated” date above.

13. Contact

Privacy questions and deletion requests: krishna@khong.dev.

This Bot is not affiliated with, endorsed by, or operated by Discord Inc. Discord’s own privacy practices are described in Discord’s Privacy Policy.