Your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that data when you use MODUS (Modular Discord Utility System) and its web dashboard.

1. Information We Collect

We collect the minimum amount of information necessary to provide the Service. When you sign in via Discord OAuth2, we receive:

• Discord User ID — Your unique Discord identifier
• Username & Avatar — For display within the dashboard
• Server Memberships — To determine which servers you can manage
• Email Address — If provided by Discord as part of OAuth, used solely for account identification

Additionally, the bot may process the following in the context of enabled modules:

• Message Metadata — Character counts for milestone tracking (message content is not stored)
• Voice Channel Audio — Only when the Recording module is explicitly enabled and active. Recordings are accessible only to the server owner and administrators with access to server settings
• Server Configuration Data — Module settings, enabled features, and preferences you configure
• Music Queue Data — Song titles, URLs, and queue preferences for the Music module
• AI Conversations — When the AI Assistant module is used, MODUS reads the last 5 messages in the channel for context. These messages are sent to third-party AI providers (OpenAI, Anthropic, Google) for processing. No conversation data is stored by MODUS.

2. How We Use Your Information

Your information is used exclusively to:

• Authenticate you and provide access to the dashboard
• Display your servers and their configuration status
• Persist your module settings and preferences
• Operate the bot's features as you've configured them
• Monitor system health and troubleshoot issues (via server logs)

4. Data Sharing

We only share your information in the following limited cases:

• With Discord — As required for the bot to function within Discord's platform via their API
• Infrastructure Providers — Data is stored on our hosting and database providers (such as Appwrite) solely for Service operation
• Legal Requirements — If required to comply with a legal obligation, court order, or governmental request

5. Data Retention

We retain your data only as long as necessary to provide the Service:

• Account Data — Retained while you actively use the Service. If you remove the bot and discontinue usage, your data may be deleted upon request.
• Server Configurations — Retained while the bot is present in your server. Configurations may be removed when the bot leaves.
• Recordings — Audio recordings are stored only for the duration you specify and are accessible only to authorized server members.
• Logs — Server and operational logs are retained for a limited period for troubleshooting and are not used for profiling.

6. Data Security

We implement reasonable security measures to protect your data, including:

• Encrypted authentication via Discord OAuth2 (we never see or store your Discord password)
• Secure, authenticated API communications
• Restricted access to database and infrastructure

While we take security seriously, no system is completely immune to risk. We cannot guarantee absolute security of your data.

7. Your Rights

You have the right to:

• Access — Request a copy of the data we hold about you
• Deletion — Request that we delete your data by removing the bot from your servers and contacting us
• Withdraw Consent — Revoke Discord OAuth access at any time via your Discord Authorized Apps settings
• Opt Out of Modules — Disable any module at any time to stop the associated data processing

8. Children's Privacy

The Service is not intended for users under the age of 13 (or the minimum age required by Discord in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided data to us, please contact us for removal.

9. Third-Party Services

The Service interacts with third-party platforms (primarily Discord). Their privacy policies govern the data they collect. We encourage you to review:

• Discord Privacy Policy
• OpenAI Privacy Policy
• Anthropic Privacy Policy
• Google Privacy Policy (Gemini)

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].