Privacy Policy

Ashy Bot is a commercial Discord moderation and gaming bot operated as a small independent service. References to "we", "us", or "Ashy" in this policy refer to the Ashy Bot operator.

We only collect what is strictly necessary to operate the service:

• Discord Guild (server) IDs — to identify your server and link its configuration.
• Discord User IDs — to track moderation actions (warnings, bans, mutes) and game economy balances.
• Discord Role and Channel IDs — to apply your dashboard configuration (log channels, muted roles, etc.).
• Moderation records — warning reasons, timestamps, moderator ID, and escalation state.
• Ticket metadata — ticket IDs, opening/closing timestamps, assigned moderator, transcript (if enabled).
• XP and coin balances — for leveling and in-game economy features.
• OAuth tokens — short-lived Discord access tokens used to authenticate dashboard login. Not stored permanently.

We do not read, store, or process the content of private messages (DMs). We do not sell data to third parties.

• To operate bot commands and enforce the moderation policies you configure.
• To display your server dashboard, warning history, ticket list, and leaderboard.
• To run scheduled jobs (pending ban expiry, XP decay, subscription grace periods).
• To generate audit logs visible only to authorized admins of your server.

We do not use your data for advertising or profiling.

Your server data (configuration, warnings, tickets, XP records) is retained for as long as your subscription is active. If you remove the bot or your subscription expires:

• Active data is soft-deleted within 48 hours of bot removal.
• All associated records are permanently purged within 30 days.
• Moderation audit records may be retained for up to 90 days to resolve disputes.

We do not sell, rent, or share your data with third parties except:

• Discord Inc. — we use the Discord API to operate the bot; Discord's own privacy policy governs their data practices.
• Infrastructure providers — our database and hosting providers process data on our behalf under strict confidentiality.

We store data in a PostgreSQL database with encrypted connections. OAuth tokens are short-lived and never written to disk in plain text. Dashboard sessions use signed, server-side cookies. We never store your Discord password.

You can request at any time:

• Data export — a copy of your server's stored data.
• Data deletion — permanent removal of all records associated with your server.
• Correction — fix inaccurate moderation records (subject to admin review).

To exercise these rights, contact us through our official Discord support server.

Ashy Bot is not directed at children under 13. We do not knowingly collect data from users under 13. Discord itself requires users to be at least 13 years old.

We may update this policy as the service evolves. Significant changes will be announced in our support server. The effective date at the top of this page reflects the latest revision. Continued use after changes means you accept the updated policy.

Privacy questions or deletion requests: join our Discord support server and open a ticket.