Privacy

The short version

• Nothing is sold, and there is no advertising, profiling or third-party analytics anywhere in the product.
• Card details never reach these servers. Stripe handles payment and we keep only a subscription reference.
• Removing the bot from a server removes the data it held for that server.

ByteCats — what the bot holds

The bot stores per-server configuration and the data the features it is given need to work. Concretely:

• Discord identifiers — server, channel, role and user ids. Never passwords, and never your Discord email.
• Levels and experience, if levels are enabled on that server.
• Moderation records: the action, who performed it, who received it, the reason and the time. That is a log the server’s own moderators keep, and it is visible to them.
• Feature data you create: reminders, notes, birthdays, invite counts, economy balances, tickets.
• Message content only where a feature is explicitly switched on for it — audit logging of edits and deletions, automod filtering, and the snipe command. Anti-spam and filtering read messages as they pass and keep nothing.

A server’s administrators decide which of those are switched on. Data belonging to a server is removed when the bot is removed from it.

Server logs record request times, paths and IP addresses, as any web server does. They are operational and are not used to build a profile of anybody.

Payment

No payment is taken at the moment. If a plan is introduced, payment will be handled entirely by Stripe. No card number, expiry or security code ever reaches these servers — this software holds no Stripe API key at all, only the secret used to verify that a webhook genuinely came from Stripe. What is stored here is a reference linking a subscription to the account that bought it, so the plan can be applied and so cancelling it takes effect.

Stripe is the data controller for the payment itself, under its own privacy policy.

How long

• Bot data for a server: until the bot is removed from that server.
• Product news preference: until you turn it off in your profile.
• Server logs: rotated by the host and kept only as long as they are operationally useful.
• Payment records: kept as long as accounting obligations require, which in France is ten years for invoices.

Your rights

Under the GDPR you may ask for a copy of your data, its correction, its deletion, or that processing stop.

To do any of that, write to infos@bytecats.be. If you are unhappy with the answer you may complain to the CNIL, the French supervisory authority.

Where it runs

Servers are hosted by Infomaniak, in Switzerland. Switzerland is recognised by the European Commission as providing an adequate level of data protection, so no additional transfer safeguards are required.

Sub-processors

• Infomaniak — hosting (Switzerland).
• Stripe — payment processing (Ireland and the United States, under its own safeguards).
• Discord — the platform the bot runs on, under its own privacy policy.

There are no others: no analytics, no tag managers, no advertising networks.

Children

Discord requires its users to be at least 13, or older where local law says so. This service is not directed at anybody younger.

Changes

If this policy changes in a way that affects what is collected or why, the change is announced before it takes effect — through the bot for anyone who has asked for product news.