## Privacy Policy
### 1. Information We Collect
#### 1.1 Automatically Collected Information
- Discord identifiers: User ID, server ID, channel/thread IDs, message IDs
- Usage data: Commands used, features accessed, timestamps, session durations
- Technical data: IP addresses (via Discord), device information, connection metadata
#### 1.2 User-Provided Information
- Profile information: Name, pronouns, bio, timezone (if provided via `/profile_set`)
- Billing linkage: Email address (if you choose to link for Ko-fi guest checkout), subscription tier metadata, webhook transaction IDs, payment provider identifiers
#### 1.3 Third-Party Data
- Data provided by Discord (user profile, server membership, permissions)
- Data from payment processors (Ko-fi) regarding transactions and subscriptions
### 2. How We Use Your Information
We use collected information to:
- Provide the service: Generate AI replies, manage chat/voice sessions, apply credits and subscriptions, maintain continuity across interactions
- Prevent fraud and abuse: Detect and prevent fraudulent transactions, rate limit enforcement, account security
- Improve the service: Analyze usage patterns, debug issues, optimize performance (aggregated/anonymized data)
- Comply with legal obligations: Respond to legal requests, enforce our Terms of Service
### 3. Data Sharing and Third-Party Services
#### 3.1 Third-Party Processors
Your data may be processed by:
- LLM providers (OpenAI, Groq): Messages and context are sent to generate responses. These providers have their own privacy policies and data retention practices.
- Voice providers (ElevenLabs): Audio and text are processed for TTS/STT. Audio may be temporarily stored on their servers.
- Vector database providers (Pinecone, or local storage): Message embeddings and memory vectors are stored for context retrieval.
- Payment processors (Ko-fi): Transaction data, email addresses, and subscription information are processed according to Ko-fi's privacy policy.
- Infrastructure providers (MongoDB, hosting services): Data is stored on their servers in accordance with their security practices.
#### 3.2 Data Sharing Limits
- We do not sell your personal information to third parties.
- We may share aggregated, anonymized usage statistics for business purposes.
- We may disclose information if required by law, court order, or to protect our rights and safety.
### 4. Data Storage and Security
#### 4.1 Storage Locations
- Primary storage: MongoDB (cloud-hosted, location depends on provider configuration)
- Backup storage: May be stored in additional locations for redundancy
- Third-party services: Data processed by LLM/voice/vector providers may be stored in their respective regions
#### 4.2 Security Measures
- We implement reasonable security measures to protect your data, including encryption in transit and access controls.
- However, no method of transmission or storage is 100% secure. You acknowledge that data transmission over the internet carries inherent risks.
#### 4.3 Data Breaches
- In the event of a data breach that may affect your personal information, we will notify affected users and relevant authorities as required by applicable law.
- We assume no liability for breaches caused by third-party providers or factors beyond our reasonable control.
### 5. Data Retention
#### 5.1 Retention Periods
- Message logs and chat history: Generally retained for up to 90 days after your last interaction. We may retain limited records for longer where reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance, or where deletion is not technically feasible immediately (see 6.2).
- Billing and transaction records: Retained for 7 years or as required by law for tax/accounting purposes
- Account data: Retained while your account is active and for 30 days after account termination
- Voice audio: Processed in real-time and not permanently stored; temporary transcription data may be retained for up to 7 days
#### 5.2 Deletion
- Upon account termination or deletion request, we will delete or anonymize your data within a reasonable period (generally within 30 days), except where retention is required by law, necessary for security/fraud prevention, billing records, or other legitimate operational purposes.
### 6. Your Rights and Controls
#### 6.1 Access and Correction
- You can view your profile data via `/profile_show`
- You can update your profile data via `/profile_set`
- You can request a copy of your data by contacting support via `/support`
#### 6.2 Deletion Requests
- You can request deletion of your data via `/support`. We will process requests within 30 days, subject to legal and operational requirements.
- Note: Deletion may result in loss of credits, subscriptions, and chat history. Deleted data cannot be recovered.
#### 6.3 Opt-Out Controls
- Opt out of re-engagement DMs via `/opt_out_pings`
- Opt out of upsell messages via `/opt_out_upsells`
- Note: Opting out does not affect service functionality or data collection necessary for service operation.
#### 6.4 Limitations
- Some data may be retained if required by law, for fraud prevention, or to fulfill contractual obligations (e.g., billing records).
- Deletion requests do not affect data already shared with third-party processors (LLM providers, etc.), which is subject to their own retention policies.
### 7. Children's Privacy
- The service is intended for users 18 years of age or older. We do not knowingly collect information from minors.
- If we become aware that we have collected information from a minor, we will delete it promptly.
### 8. International Data Transfers
- Your data may be transferred to and processed in countries other than your country of residence, including the United States and other jurisdictions where our service providers operate.
- By using the service, you consent to such transfers and acknowledge that data protection laws in these jurisdictions may differ from those in your country.
### 9. Changes to This Privacy Policy
- We may update this Privacy Policy from time to time. Material changes will be communicated via Discord or our official channels.
- Continued use of the service after changes constitutes acceptance of the updated Privacy Policy.
### 10. Contact
- For privacy-related questions or requests, contact us via `/feedback` or `/support` in Discord.
---