Privacy Policy.
We believe in uncompromised transparency. This document details our zero-monetization policy, cryptographic protection standards, data retention schedules, and user data rights across the Agni platform.
1. Information We Collect & Scope
We practice strict data minimization. The bot and web dashboard only collect identifiers strictly required for core functionality, Discord OAuth2 access, and automated moderation.
Public Discord User ID, username, discriminator/handle, and avatar hash when authenticating with Discord OAuth2 or invoking bot commands.
Guild IDs, channel IDs, role IDs, custom bot prefix, automod thresholds, custom embeds, vanity roles, and anti-nuke whitelists.
Track titles, artist names, streaming URLs, and voice channel IDs during active playback. Voice channel audio streams are processed in memory and NEVER recorded, intercepted, or saved.
Automated event timestamps (mass kicks, role deletions, spam spikes) used exclusively to execute anti-raid defenses configured by administrators.
2. Cryptographic Security & Infrastructure
All system layers adhere to zero-trust defense architectures with strict isolation between the Next.js dashboard, FastAPI daemon, and database instances.
All HTTP, WebSocket, and Discord Gateway communications require modern TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
We never ask for, collect, or store your Discord password, client bot token, or 2FA credentials. OAuth2 tokens are handled via ephemeral, secure session states.
Databases and cache backends reside within private VPC subnets with zero public internet ingress, accessible exclusively via authenticated internal cluster endpoints.
Production environments require multi-factor hardware keys (FIDO2) and strictly auditable SSH bastion jump hosts.
3. How Data is Processed & Used
Data collected is processed exclusively for feature fulfillment and security enforcement. We do not profile users for commercial advertising.
Validating user permissions (Administrator, Manage Server) against Discord API to ensure only authorized administrators can alter bot settings.
Comparing rapid administrative channel/role deletions against server whitelist thresholds to halt rogue staff attacks in sub-second intervals.
Calculating chat activity XP counters, leaderboard rankings, and virtual currency balances exclusively within participating guilds.
Aggregated, anonymized latency benchmarks to balance load distribution across Discord bot shards and Lavalink audio worker nodes.
4. Data Lifecycle, Retention & TTL Policy
Every data structure has an explicit time-to-live (TTL). Once data is no longer relevant, it is permanently purged by automated cron jobs.
Retained for the duration of the bot's membership in the server. If the bot is removed, configs enter a 30-day grace period for re-invites before complete eradication.
Temporary command history, anti-nuke audit logs, and trigger logs expire automatically and are wiped permanently after 30 days.
OAuth2 authentication cookies are configured with HttpOnly, Secure, and SameSite=Lax flags, expiring within 7 days or upon explicit signout.
Buffered strictly in RAM by the Lavalink node for current playback; never written to physical disk or persisted.
5. Third-Party Services & Integrations
We interface with trusted third-party providers strictly to facilitate external multimedia decoding and gateway communications.
All bot interactions, voice states, and OAuth2 authorization flows are governed by Discord's Developer Terms and Privacy Policy.
Fetches publicly available audio metadata (YouTube, Spotify, SoundCloud) without transmitting personal user identifiers.
Enterprise infrastructure partners providing encrypted storage, DDoS mitigation, and global CDN delivery compliant with SOC2 and ISO 27001.
6. User Rights, Data Export & Deletion
Under GDPR (Articles 15-22), CCPA, and global privacy frameworks, you retain full ownership and control over your digital footprint.
Server Owners can trigger an immediate wipe of all server data using bot commands or by opening a ticket on our official Discord.
Request a JSON dump of all stored database records linked to your Discord User ID or owned Discord guilds.
Guild owners can individually disable specific modules (Leveling, JoinDM, Reaction Roles, Logs) directly from the Web Dashboard.
Data Processing & Storage Matrix
Transparent summary of all data types processed across the platform.
| Data Type | Operational Purpose | Storage Medium | Retention / TTL | Third-Party Sharing |
|---|---|---|---|---|
| Discord User ID & Username | Authentication & Command Execution | Encrypted Database | Until Account Deletion Request | None (Never Shared) |
| Server Settings & Whitelists | Anti-Nuke, Prefix, Automod Config | Encrypted Database | Active Guild + 30 Day Grace | None (Never Shared) |
| Voice Channel Audio | Real-time Music Playback | RAM Cache Only (0s Storage) | Instant (Realtime Stream) | Lavalink Node (Memory only) |
| Audit & Moderation Logs | Anti-Raid Incident Defense | Database / Redis | 30-Day Automated Expiration | None (Never Shared) |
| XP & Economy Balances | Server Leaderboards & Rewards | Encrypted Database | Until Guild Reset / Bot Kick | None (Never Shared) |
Self-Service Privacy Commands
Control and manage your server's stored data directly via Discord commands.
$settings resetCompletely wipes all custom bot configurations, custom prefixes, and embed setups for the current guild.
$antinuke statusDisplays active anti-nuke whitelists, emergency staff contacts, and server security thresholds.
$help privacyProvides instant in-chat privacy documentation, support links, and automated data request protocols.
Frequently Asked Privacy Questions
Quick answers to common questions regarding privacy, logs, and security.
Need a full data export or instant guild wipe?
Open a ticket in our official community Discord. Our team validates server ownership and executes requests within 24 hours in compliance with GDPR & Discord Developer requirements.
© 2026 Agni Development • Developed by FG ROCKY DEV