Privacy Policy

The controller responsible for data processing on this website and through the AutoMod Discord bot is:

Paul Schaper
Im Rehmen 20
29358 Eicklingen, Germany
Email: [email protected]

When you visit this website, our servers automatically collect general access data, such as browser type and version, the operating system used, referring pages, and the date and time of access. This information is technically necessary to deliver the website to you and is used for security and diagnostic purposes only.

When AutoMod is added to a Discord server, it processes Discord data made available to it through Discord's API in order to provide moderation and community features. Depending on which features are enabled, this may include:

• Message content, for automated moderation, logging, and command handling
• Reactions, for reaction roles and starboard functionality
• Channel and role information, to enforce permissions and automation rules
• Member join/leave events and role assignments

The dashboard uses a cookie to store your session and API access token after you sign in with Discord. This allows you to remain logged in across visits without re-authenticating every time. We do not use cookies for advertising or third-party tracking purposes.

We process personal data on the basis of Art. 6(1)(a) GDPR (consent, e.g. when you authorize AutoMod via Discord OAuth) and Art. 6(1)(f) GDPR (legitimate interest in providing reliable and secure moderation services to server owners and their communities).

Data associated with a Discord account is retained only for as long as necessary to provide the service. Should AutoMod be removed from a server, or should a user request deletion, associated data is removed from our systems within seven days. Session tokens are only retained for as long as they remain valid.

Under the GDPR, you have the right to:

• Request confirmation of whether we process data concerning you
• Request access to, correction, or deletion of your data
• Request a portable copy of your data
• Object to or request restriction of processing

To exercise any of these rights, please contact us using the details above.

When you buy a membership, pass, gift or tip from a server's store, we store your Discord user ID, display name, what you bought, its status and dates, and references to the related Stripe objects. We need this to deliver your perks (roles), show your memberships and handle renewals, cancellations, refunds and gifts (Art. 6(1)(b) GDPR).

Payments are processed by Stripe on the seller's own Stripe account. Your payment details are entered on Stripe's page and never reach AutoMod. Stripe and the seller (the server owner) receive the data needed for the payment, such as your name, email address and billing address, and process it under their own responsibility and privacy policies.

Purchase and payment records are kept for as long as they're needed for the contract and to comply with legal retention duties (for example, accounting records of AutoMod's fees for up to ten years). This overrides the shorter retention described above for these records only.

If you report a store, we store your report and, if you're signed in, your Discord user ID to review it (Art. 6(1)(f) GDPR, our legitimate interest in keeping stores safe and lawful).

Some features use artificial intelligence provided by OpenAI (OpenAI, L.L.C. and its affiliates): the AI Builder in Automations including voice input, "Write with AI" in message editors, the AI action in Automations, AI ticket summaries and reply suggestions, and AI Moderation. When they're used, the text or recording entered and, where needed, the server's channel, role and automation names are sent to OpenAI to generate the answer. The AI action in Automations and the ticket features send the content the server admin configured them to process, such as member messages or a ticket's conversation. AI Moderation sends the content of checked messages to OpenAI's moderation service.

OpenAI processes this data on our behalf and, according to its API terms, does not use it to train its models. Data may be processed in the United States; the transfer is based on the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. OpenAI may keep API data for up to 30 days for abuse monitoring.

We store AI Builder conversations, drafts and versions with the server's automations until they are deleted, and per-day credit usage counters for up to 40 days. We use a pseudonymized server identifier for OpenAI's abuse detection, never your Discord ID or name.

Legal basis is Art. 6(1)(b) GDPR (providing the features you request) and, for AI Moderation, Art. 6(1)(f) GDPR (the server's legitimate interest in moderation). Please don't enter personal data into AI features that isn't needed. The "ChatGPT (own key)" plugin sends requests with the server's own OpenAI key; for those, the server owner and OpenAI are responsible.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. AutoMod's moderation actions are configured and controlled by the respective server's administrators.