Privacy policy

poi-bot is a Discord bot and dashboard operated for server owners. This page describes exactly what it stores. The short version: aggregate counts and configuration, almost never message content, and no selling of anything to anyone.

What we store

• Account: your Discord user id, username, avatar and the list of servers where you have Manage Server or Administrator. This is what decides which servers appear in your dashboard.
• Server configuration: the settings you enter — automod rules, ticket panels, autoresponders, embeds, products and so on. This is the substance of the product.
• Moderation cases: the action taken, the moderator, the reason, and a snapshot of the offending message where automod triggered, so a decision can be justified and appealed.
• Orders: the product, amount, currency, status and the purchasing Discord user, for servers using commerce.
• Analytics: aggregate daily counts of messages, joins and leaves per channel. No message content and no per-user rows.
• Credentials: Stripe and SellAuth keys you enter, encrypted with AES-256-GCM under a per-row key before storage.

Message content

Message content is retained in exactly two places, and both are deliberately narrow:

• Ticket transcripts — written when a ticket closes, visible to the staff of that server only.
• Snipe — held in memory only, capped at five messages per channel, discarded after an hour, never written to the database, and off by default.

Everything else the bot sees while evaluating automod is processed and discarded. It is not logged and not stored.

What we never do

• We do not sell or rent personal data.
• We do not use your data to train models.
• We never see the plaintext of a payment. Checkout happens on Stripe’s own pages, and card details never touch our systems.
• We do not show your stored API keys back to you, include them in log lines, or transmit them to the bot process.

Retention

Analytics are retained for the window your plan allows — 7, 30, 90 or 365 days — and rolled off after that. Configuration, cases and orders persist until you delete them or remove the bot. Removing the bot from a server stops all collection for that server immediately.

Sub-processors

• Discord — the platform the bot operates on, and the identity provider for dashboard sign-in.
• Vercel — hosts the dashboard.
• Railway — hosts the bot process and the Postgres database.
• Stripe — processes subscription billing, and processes your own sales under your own account.

Security

Payment credentials are encrypted with AES-256-GCM under a per-record key before they are written, and decrypted in memory only for the duration of a single API call. They are never rendered back to you, never written to a log, and never sent to the bot process. Traffic to this site and to the database runs over TLS.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe a credential you stored here has been exposed, revoke it at Stripe or SellAuth first — removing it from poi-bot does not revoke it — and then replace it.

Who is responsible for your data

poi-bot is the data controller for the account and configuration data described above. For anything you collect from your own members through your own Stripe or SellAuth account, you are the controller and we are not a party to it.

For access, correction, deletion, or any question about this policy, contact us at the address in the footer. We respond within 30 days.

Your rights

You can request a copy of the data associated with your Discord account, or its deletion, by contacting us. Server owners can delete server-scoped data from the dashboard at any time. We respond to requests within 30 days.

Children

poi-bot follows Discord’s own minimum age requirements and is not directed at children below them.

Changes

Material changes will be announced in the support server before they take effect. The date at the top of this page always reflects the current version.