1) Privacy Policy
1.1 Who we are
The provider of the Service (the Discord bot, API and dashboard) is an individual developer (natural person) operating in Poland ("we", "us").
If you are a Discord server owner/admin using the bot in your server, you may also be a separate controller for content and moderation data within your server. This policy describes what we process in order to operate the Service.
1.2 What this covers
This policy applies to:
1.3 Data we process
Below are the main categories of data processed by the Service.
A) Discord identifiers and metadata (required to function)
We process:
Purpose: provide bot functionality, permissions checks, configuration per guild, moderation and audit features.
B) User-provided content (feature-dependent)
We process and in some cases store content you provide to the bot, including:
Additionally, the bot may process message content in specific features:
C) Moderation, security and audit logs
Depending on configuration, we may store:
Purpose: safety, abuse prevention, server moderation features.
D) Feature data (economy, leveling, games)
Depending on which modules are enabled on a server, we may store feature-specific data linked to Discord IDs, such as:
Purpose: provide the requested gameplay/utility features and prevent abuse.
E) Telemetry and diagnostics
We may store:
Purpose: reliability, debugging, feature improvements, anti-abuse.
F) OAuth session and cookies (dashboard)
The dashboard uses cookie-based sessions.
Cookies used by the dashboard include:
elpho/dashboard (session cookie used to keep you logged in)Purpose: login state, secure OAuth flow, showing which guilds you can manage.
G) Integrations
If you enable integrations, we may process related identifiers/config:
Some integrations may also keep basic delivery/diagnostic records (for example, whether an event was delivered or failed).
H) Script storage (ElphoScript / SimpleScript)
The project includes a scripting/runtime feature that can store arbitrary JSON key/value data on disk, scoped (for example, by guild). Depending on script logic, this storage may contain personal data.
Purpose: allow scripted automations.
1.4 Automated actions
Some safety and moderation features can take automated actions (depending on settings), such as deleting messages, timing out users, or stripping roles. These actions are based on server-configured rules.
1.5 Legal bases (EEA/UK GDPR style; adjust if not applicable)
We generally rely on:
If you operate in the EU/EEA/UK, these bases are intended to align with GDPR requirements. Where applicable, we can clarify our role (controller/processor) for specific features on request.
1.6 Sharing and third parties (processors)
The Service interacts with third parties, including:
We do not sell personal data.
1.7 International data transfers
Some providers may process data outside your country/EEA. Transfers depend on the vendors and hosting location. Where required, we will provide information about relevant safeguards (for example, SCCs) upon request.
1.8 Retention (how long we keep data)
Retention depends on feature configuration and maintenance/cleanup.
Typical retention behavior:
We may periodically run cleanup procedures (including deletion of older telemetry/logs) as part of maintenance; exact schedules can vary by deployment.
1.9 Your choices and rights
Depending on your jurisdiction, you may have rights to:
Practical controls:
1.10 Security
We implement reasonable technical and organizational measures, including:
No method is 100% secure; you use the Service at your own risk.
1.11 Children
The Service is not intended for children under the minimum age required by Discord’s Terms. Do not use the Service if you are under that age.
1.12 Changes
We may update this policy from time to time. The effective date at the top indicates the latest version.
2) Terms of Service
2.1 Acceptance
By using the Service (bot, dashboard, API), you agree to these Terms and the Privacy Policy.
2.2 Eligibility
You must comply with Discord’s Terms and policies and any applicable laws.
2.3 Service description
The Service provides server utilities and automations, including (depending on configuration): moderation tools, tickets, reminders, verification, telemetry/analytics, integrations, scripting/custom commands, and optional AI features.
2.4 Your responsibilities
You agree to:
If you use scripting/custom commands:
2.5 Server admins and content
If you are a server admin, you are responsible for:
2.6 User content and licenses
You retain ownership of content you submit (messages, custom commands, ticket answers). You grant us a limited license to process that content solely to operate the Service.
2.7 AI features disclaimer
If AI features are enabled:
Do not submit sensitive personal data to AI features unless necessary.
2.8 Availability and changes
We may modify, suspend, or discontinue parts of the Service at any time.
2.9 Termination and enforcement
We may restrict or ban usage (including a global bot-ban) if we believe you violate these Terms or pose a security risk.
2.10 Premium / paid features (if applicable)
The project includes premium tiers/keys and premium appearance/custom limits.
Pricing/payment/refunds depend on how (and whether) premium is sold/distributed. If payments are introduced, purchase terms (price, duration, refunds) will be presented at the time of purchase and/or in a separate premium policy.
2.11 Disclaimers
The Service is provided “as is” and “as available”, without warranties of any kind, to the extent permitted by law.
2.12 Limitation of liability
To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential damages, or loss of data, arising from the use of the Service.
2.13 Governing law
These Terms are governed by the laws of Poland.
2.14 Contact
Questions about these Terms or privacy requests:
3) Cookies
The dashboard uses essential cookies for authentication and security. These cookies are required for the login flow and to keep you signed in.
elpho/dashboard: session cookie used to keep you logged in.