Privacy Policy

1. Introduction

This Privacy Policy describes how Privonix Technologies ("we", "us", "our") collects, uses, and protects information when you use the NotNicePool Discord bot ("the Bot") and the web dashboard at notnicepool.xyz ("the Service").

By using the Service, you agree to the practices described in this policy. Please also review our Terms of Service.

2. Information We Collect

2.1 Data Collected by the Bot

When the Bot is active in your Discord server, it may collect and store the following data in its local databases:

• User identifiers: Discord user IDs, usernames, and display names (used for leaderboards, moderation logs, and XP tracking).
• Server identifiers: Discord guild (server) IDs and channel IDs (used for configuration and feature routing).
• Message metadata: Message counts per user for XP calculations. The Bot does not store message content except in ticket transcripts (when the ticket system is enabled by server staff).
• Voice activity: Duration of voice channel participation for Voice XP tracking. Audio is never recorded or processed.
• Moderation data: Moderation case records (bans, kicks, warns, timeouts) including the moderator, target user, reason, and timestamp.
• Invite data: Invite codes, usage counts, and inviter attribution for the invite tracking feature.
• Command usage: Which commands are used, by whom, and whether they succeeded — for analytics and insight generation.
• Server configuration: Settings configured by server administrators via commands or the dashboard (e.g., welcome channels, AutoMod rules, XP multipliers, level-up messages).
• Achievement data: Achievement progress and unlock timestamps per user and per server.
• Ticket transcripts: When the ticket system is enabled, messages within ticket channels are logged for support record-keeping.

2.2 Data Collected by the Dashboard

When you log in to the web dashboard, we collect:

• Discord OAuth2 data: Your Discord user ID, username, avatar URL, and the servers you manage. This is provided by Discord through their OAuth2 authorization flow.
• Session data: A server-side session is created containing your authentication state. Sessions are stored securely and expire after 7 days of inactivity.

2.3 Data We Do NOT Collect

• We do not read or store the content of regular messages (only message counts for XP).
• We do not record or process voice audio.
• We do not collect email addresses, IP addresses, or personal information beyond what Discord provides through OAuth2.
• We do not use cookies for tracking or advertising. The only cookie used is a session cookie for dashboard authentication.

3. How We Use Your Information

The data we collect is used exclusively to:

• Provide and operate the Bot's features (leveling, moderation, invite tracking, etc.).
• Display leaderboards, rank cards, profiles, and analytics.
• Enforce moderation rules and AutoMod configurations set by server administrators.
• Authenticate dashboard users and enforce permission checks.
• Generate analytics and insights for server administrators.
• Detect and prevent abuse of the Service.

4. Data Storage & Security

• All data is stored in local SQLite databases on our secured server infrastructure.
• Databases use WAL (Write-Ahead Logging) mode for data integrity.
• Dashboard sessions are stored server-side with cryptographically random session IDs.
• Authentication cookies are HttpOnly and Secure (over HTTPS).
• CSRF protection is in place for all state-changing dashboard operations.
• We do not use cloud-based third-party databases or storage services.

5. Data Sharing

We do not sell, trade, rent, or share your data with any third parties.

The only external service the Bot communicates with is the Discord API, which is required for the Bot to function. Data sent to Discord is governed by Discord's Privacy Policy.

6. Data Retention

• While the Bot is in your server: Data is stored indefinitely for as long as the Bot remains a member of your Discord server.
• After Bot removal: If the Bot is removed from a server, associated data may be retained for a reasonable period and will be deleted upon request.
• Dashboard sessions: Sessions expire automatically after 7 days of inactivity.
• Analytics data: Command usage analytics are automatically pruned after 90 days.

7. Your Rights

You have the right to:

• Access your data: Server administrators can view collected data through the dashboard and bot commands (e.g., /rank, /profile, /cases).
• Request deletion: You may request deletion of your data by contacting us at support@privonix.in. Server administrators can also remove the Bot from their server to cease further data collection.
• Modify server settings: Server administrators can configure which features are enabled, which channels are tracked, and what data the Bot collects within their server via the dashboard or bot commands.

8. Children's Privacy

The Service is not intended for users under the age of 13, consistent with Discord's Terms of Service. We do not knowingly collect data from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that data promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions, concerns, or data deletion requests, contact us at: support@privonix.in

Privonix Technologies — privonix.in