Privacy Policy

This Privacy Policy describes how Crimson Bot ("we", "the bot") collects, uses, stores, and protects information when you or members of your Discord server use it. By inviting the bot to a server or interacting with it, you agree to the practices described below.

1. What we collect

Crimson Bot only stores the minimum data needed to provide its features. We never collect personal information beyond what Discord exposes via its public API.

Server-side data

• Discord IDs — guild, channel, role and user IDs (snowflakes). These are public Discord identifiers.
• Module configuration — settings you save from the dashboard (welcome messages, mod-log routing, auto-mod rules, ticket panels, etc.).
• Moderation records — warnings, mutes, bans and audit-log entries, so moderators can see history.
• Engagement data — XP totals, message counts, birthday dates (only if a member opts in) and reminder text.
• Message snapshots — when modules like the mod log or starboard are enabled, the bot caches recent messages to render deletion/edit/star embeds. Snapshots are short-lived and never sent to third parties.

Dashboard login

• Discord OAuth profile — when you log in at botcrimson.in/dashboard, we receive your Discord user ID, username, avatar hash and the list of servers you can manage. We do not receive your email or password.
• Session cookies — a single HTTP-only cookie scoped to botcrimson.in keeps you logged in. We use no third-party analytics, ad networks or tracking pixels.

2. AI-powered features

Some optional features — AI chat and AI summarization — work by sending the relevant message text to a third-party AI provider that generates the response. These features are disabled by default and turned on by your server's administrators.

• What is sent — when a member uses an AI feature, the content of the relevant message(s) is sent to our AI provider solely to generate a reply or summary. It is not used for any other purpose.
• Who processes it — a reputable third-party AI provider acting on our behalf, only to return a response. The provider is not given your Discord account credentials.
• Conversation memory — so the AI can follow a conversation, recent messages in an AI chat channel are stored in our database, scoped to the member and channel. Storage is capped per server; once the cap is reached, the oldest messages are deleted automatically.

If your server doesn't enable these AI features, no message content is sent to any AI provider or stored as conversation memory. An administrator can erase all stored AI conversation memory at any time from the dashboard.

3. Payments & billing

Crimson's free tier requires no payment and no card on file. If you buy a paid Premium or Ultimate subscription, the transaction is handled by Lemon Squeezy, which acts as our Merchant of Record — it is the seller of record and processes the payment on our behalf.

• What the provider receives — to take payment, the provider collects the billing details you enter at checkout (such as name, email, billing address/country and card details) directly. Crimson never sees or stores your full card number.
• What we receive back — only what's needed to grant and manage your subscription: which Discord server is subscribed, the plan, its status, the renewal date and an order/receipt reference, tied to your Discord user and server IDs.
• Lemon Squeezy's own terms — Lemon Squeezy processes your payment data as an independent controller under its own privacy policy. We don't control how it handles that data.

Cancellations and refunds are covered by our Refund & Cancellation Policy.

4. How we store it

All data is stored in a private database we operate directly. We do not use third-party storage providers, analytics platforms, ad networks or tracking pixels, and the database is accessible only to the bot process.

We do not sell or rent your data, and we never share it with advertisers or data brokers. Our only outbound data flows are: to Discord's API to run the bot; to our AI provider for the optional AI features above (message content, purely to generate a response); and to our payment provider for purchases, as described in §3.

5. Who can access your data

• Server administrators can see and edit all data for their own server via the dashboard or commands — admins need this to manage their members.
• The bot operator has access for support and maintenance only. We don't browse server data outside debugging a specific support request you submit.
• You, as a member, can view your own data (birthdays, XP, warnings) via commands.

6. Data retention

• Active data (config, moderation records, levels) is kept as long as the bot is in your server.
• When the bot leaves a server, that guild's configuration is retained for 30 days in case it's re-added, then deleted.
• Giveaway records are kept 7 days after the giveaway ends to support re-rolls, then deleted.
• Reminders are deleted immediately after they fire.
• Mod-log/starboard message snapshots are kept only as long as the cache TTL (minutes, never more than 24h).
• AI conversation memory is kept only until the per-server cap prunes the oldest messages, or until an admin clears it.

7. Your rights

You can request at any time: a copy of all data we hold about you; deletion of your personal data (warnings, XP, birthday, reminders, attribution records, AI conversation memory); or correction of inaccurate data. Email us with your Discord user ID and the server it concerns — we process requests within 14 days.

8. Children

Crimson Bot follows Discord's minimum age requirements (13+, or 16+ in the EEA). We don't knowingly collect data from anyone below those limits. If you believe a younger user has data stored, contact us and we'll delete it.

9. Changes to this policy

If we materially change what data we collect or how we use it, we'll post a notice in our support server and update the "Last updated" date at the top of this page.

10. Contact

Questions or data requests: crimsonbot2210@gmail.com or our support server.