This Privacy Policy describes how HaZeyBot ("we," "us," or "our") collects, uses, discloses, and protects information when you use our Discord bot (the "Bot"), our website at www.hazeybot.com (the "Website"), and our web dashboard (the "Dashboard") (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. This Privacy Policy is incorporated into our Terms of Use.
1. Information We Collect
a) Information Collected via Discord OAuth
When you log in to the Dashboard using Discord OAuth2, we collect the following information from your Discord account:
Discord user ID
Username
Discriminator (if applicable)
Avatar
Email address
Discord OAuth access token and refresh token
We store these tokens to call Discord's API on your behalf (for example, to fetch your guild list and verify permissions).
b) Information Collected from Discord Servers
When the Bot is added to a Discord server and used, we collect and store:
Server ID and name
Channel IDs
Role IDs
User IDs (of members interacting with the Bot)
Usernames and avatars (cached for display)
Message IDs (for logging and moderation features)
Custom settings configured via the Dashboard
Moderation action records (e.g., bans, kicks, timeouts, mutes) including responsible moderator and reason
Audit logs (staff/admin actions and bot installs)
Direct messages sent to the Bot (used for the support inbox feature)
The Bot may read general message content for moderation purposes (such as automod and anti-spam), but general message content is not stored. Only direct messages to the Bot are stored in full.
c) Information Collected Automatically
IP Address: We read your IP address transiently for two purposes: (1) as an in-memory rate-limit key for unauthenticated requests, and (2) to determine language preferences for the Website. The IP address is not persisted and is not logged.
Cookies and Analytics: We do not use cookies or any analytics/tracking technologies on the Website or Dashboard.
d) Payment Information
If you purchase a premium subscription, payments are processed by third-party payment processors (Stripe and PayPal). We do not collect or store your full payment card details. We may receive limited information from the payment processor, such as transaction IDs, subscription status, and the Discord server ID associated with the purchase.
2. How We Use Your Information
We use the collected information for the following purposes:
To provide, operate, and maintain the Bot and its features (moderation, economy, leveling, tickets, etc.).
To authenticate you and provide access to the Dashboard.
To enable per-server configuration and plugin management.
To store moderation logs and audit trails for server administrators.
To operate the support inbox feature, which allows staff to view and respond to DMs sent to the Bot.
To enforce our Terms of Use and Acceptable Use Policy.
To process payments and manage premium subscriptions.
To detect and prevent abuse, fraud, and security incidents.
To comply with legal obligations.
3. Data Sharing and Disclosure
We do not sell, rent, or share your personal information with third parties except as described below:
Discord API: We share data with Discord as necessary to operate the Bot and Dashboard (e.g., reading server information, managing roles, sending messages).
Payment Processors: Stripe and PayPal process payments and may receive information necessary to complete transactions, such as your email address and payment details. We do not receive full card numbers.
Legal Compliance: We may disclose information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
We do not transfer your data internationally outside the United Kingdom or the European Economic Area, except as necessary to use Discord's services (which may process data in the United States) or our payment processors.
4. Data Retention
We retain user and server data indefinitely until you request deletion. This includes:
Moderation cases and audit logs.
DM messages sent to the Bot (support inbox content).
Server configuration settings.
User profile information (Discord ID, username, email, avatar).
OAuth tokens (stored until you revoke access or request deletion).
If you remove the Bot from your server, data is not automatically deleted. You must request deletion explicitly.
To request deletion of your data, contact us via a support ticket or email (see Contact Us section).
5. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your data. You can do this by contacting us via email or support ticket.
Objection: Object to processing in certain circumstances.
Data Portability: Request transfer of your data to another service where technically feasible.
To exercise any of these rights, contact us using the details in Section 9. We will respond within a reasonable timeframe.
6. Security
We take reasonable technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
In the event of a security breach that affects your personal data, we will:
Investigate the incident to confirm whether a breach occurred.
Notify affected users as soon as reasonably possible, explaining what information may have been exposed, what steps you should take, and what we are doing to address the breach.
Take appropriate remedial actions.
7. Children's Privacy
The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you believe we have collected information from a child under 13, please contact us immediately.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. We will not provide individual notifications; instead, the updated policy will be posted on the Website with the new date. Your continued use of the Service after any changes constitutes acceptance of the revised Privacy Policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: contact@hazeybot.com
Support Server: https://discord.com/invite/smFVrgEwXA
By using HaZeyBot, you acknowledge that you have read and understood this Privacy Policy.