Privacy Policy for Buoy Discord Bot

Last Updated: February 4, 2026

1. Introduction

This Privacy Policy explains how Buoy ("the Bot", "we", "our", or "us") collects, uses, discloses, and safeguards your information when you use our Discord bot services. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Discord Platform Data

When you use Buoy, we collect the following information from the Discord platform:

Essential Operational Data:

• Discord Guild ID (server identifier)
• Discord Channel ID (where giveaways are hosted)
• Discord Message ID (giveaway message identifiers)
• Discord User ID (giveaway participants and hosts)
• Discord Role ID (for blacklist/bypass functionality)

Giveaway-Specific Data:

• Prize descriptions and giveaway rules
• Winner counts and selection criteria
• Duration and timing information
• Embed customization settings (colors, images, descriptions)
• Participant reaction data

2.2 Technical Data

• Bot performance metrics
• Command usage statistics
• Error logs and debugging information

3. How We Use Your Information

3.1 Giveaway Management

We use collected data exclusively for:

• Creating and managing giveaways
• Tracking participant eligibility
• Selecting and announcing winners
• Storing giveaway history and configurations

3.2 Service Improvement

• Monitoring bot performance and stability
• Identifying and fixing technical issues
• Understanding usage patterns to improve functionality

3.3 Legal Basis for Processing

We process your data based on:

• Contractual Necessity: Data required to provide the giveaway services you request
• Legitimate Interests: Improving our services and ensuring security

4. Data Storage and Security

4.1 Storage Methods

Primary Storage (MongoDB):

• Giveaway configurations and history
• Guild and channel settings
• Persistent operational data

Caching Layer (Redis):

• Temporary performance caching
• Guild giveaway counts
• Frequently accessed data

4.2 Data Retention

• Giveaway Data: Retained indefinitely until manually deleted via /giveaway delete command
• Cache Data: Automatically expires based on configured timeouts
• Technical Logs: Retained for 30 days for debugging purposes

4.3 Security Measures

• Secure database connections
• Environment variable protection for credentials
• Regular security updates
• Access limited to essential operational needs

5. Data Sharing and Disclosure

5.1 No Third-Party Sharing

We do not sell, trade, or otherwise transfer your data to third parties. Your data is used exclusively for Bot operation.

5.2 Service Providers

We use the following infrastructure providers:

• Discord: Platform hosting and API services
• MongoDB: Primary data storage
• Redis: Performance caching
• Koyeb: Hosting

These providers only process data necessary for their services and are bound by contractual obligations to protect your information.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. International Data Transfers

Your data may be processed on servers located outside your country of residence. We ensure appropriate safeguards are in place through:

• Data processing agreements with infrastructure providers
• Compliance with applicable data protection laws

7. Your Data Protection Rights

7.1 Access and Control

You have the right to:

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another service

7.2 Exercise Your Rights

To exercise these rights, contact us through our official support channels.

7.3 Data Deletion

You can delete giveaway data using the /giveaway delete command. For comprehensive data deletion requests, contact us directly.

8. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Data Breach Procedures

In the event of a data breach, we will:

• Notify affected users within 72 hours of discovery
• Take immediate steps to secure systems
• Cooperate with relevant authorities
• Provide transparency about the nature and scope of the breach

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through:

• Discord announcements
• Bot status updates
• Revision of this document

Continued use of the Bot after changes constitutes acceptance of the updated policy.

11. Contact Information

For privacy-related questions, concerns, or to exercise your data protection rights, please contact us through our official support channels.

12. Compliance with Regulations

We are committed to complying with applicable data protection regulations, including:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other relevant privacy laws

13. Consent

By using Buoy, you consent to the collection and use of information as described in this Privacy Policy.