Privacy Policy

1. Scope

This Privacy Policy explains how Netrcol processes information when you use the Discord bot, web dashboard, and related services.

It covers data used by commands/events, dashboard APIs/pages, ticket/transcript features, AI tools, music/social integrations, and community features.

2. Data We Process

• Identity and access data: user ID, username/global name, avatar, guild ID/name, permission context, and OAuth profile data.
• Session and preference data: login session state, language selection, return path, consent state, and technical request metadata.
• Guild configuration data: moderation, automod, tickets, welcomes, invites, reaction roles, logging, and module settings.
• Feature records: economy/levels/reputation state, warnings, moderation records, reminder and invite statistics.
• Ticket and transcript data: ticket metadata, message content, author labels, mentions, attachment URLs, and transcript tokens.
• Audit and notification data: dashboard action logs and guild-related notification/audit records.
• Integration data: linked Spotify account metadata/scopes and encrypted OAuth tokens, plus optional social integration metadata.
• AI feature data (if enabled): thread metadata, user/assistant messages, policy outcomes, and usage telemetry.

3. Why We Process Data

• To deliver bot and dashboard functionality requested by users and server administrators.
• To authenticate users and enforce authorization for guild-level operations.
• To run moderation, anti-abuse, security, and logging workflows.
• To keep configured modules working (tickets, levels, economy, reminders, integrations, etc.).
• To diagnose errors, improve reliability, and respond to support/security incidents.

4. Cookies and Consent

• Session cookie: used for dashboard authentication and secure session management.
• Language cookie: lang stores your selected interface language.
• Consent cookie: cookie_consent stores your analytics/ads preference.
• Analytics/ads scripts: optional scripts are loaded only after consent is accepted.

5. Third-Party Services

Depending on enabled features, data may be exchanged with third-party providers.

• Discord: OAuth flows, guild/user metadata, and bot command/event operations.
• OpenAI-compatible providers: optional dashboard AI and moderation assistance.
• Spotify: account linking and optional music-related operations.
• Social providers: optional YouTube/Twitch/Kick notification workflows.
• Top.gg: vote webhooks and temporary vote-state checks.
• Google services: optional analytics/ads scripts after consent.

We do not sell personal data.

6. Retention and Deletion

Removing the bot from a server does not always guarantee immediate deletion of every stored record. For deletion requests, contact support with relevant identifiers.

• Retention periods depend on feature type and operational requirements.
• Some records use TTL-based expiration (for example AI threads/messages, vote states, and selected metrics).
• Some collections are capped or pruned by maintenance routines (for example notification and giveaway records).
• Session cookies and production session storage have configured expiration windows.
• Many module records remain until changed, manually deleted, or cleaned through maintenance processes.

7. Security and International Processing

Service infrastructure and third-party providers may process data in different countries. By using the service, you acknowledge potential cross-border processing subject to applicable platform terms.

• Dashboard routes use authenticated sessions and permission checks.
• Security controls may include rate limits and signature/secret verification where configured.
• Sensitive integration tokens are stored with encryption in supported flows.
• Session cookies use security attributes such as httpOnly, sameSite, and production secure.

8. Your Rights and Contact

For privacy questions or data requests, contact us via the Discord Support Server. We may update this policy as features, providers, and legal requirements evolve.

• Depending on your region, you may request access, correction, deletion, or objection regarding personal data processing.
• You can manage or disconnect optional integrations through available dashboard/API controls.
• You can manage or remove certain user-generated records through related bot or dashboard features.
• Server administrators can modify or remove many guild-level settings and records directly.
• For broader requests, provide identifiers such as user ID, guild ID, and module context.