Privacy Policy
This policy explains what personal data Gofa Bots ("we", "us") collects when you use Gofa Bots, why we collect it, and what rights you have. We keep it short on purpose; if anything is unclear, write to support@gofabot.duckdns.org.
1. Data we collect
When you log in with Discord. Your Discord user ID, username, display name and avatar, plus the OAuth access and refresh tokens Discord issues to us. We also receive the list of servers you belong to, with your permissions on each, so that we can show you the servers you administer. We do not receive your email address or password.
When you configure a bot. Everything you enter in the dashboard: panel names, texts, colours, image links, selected channels, categories and roles, and form definitions. This is tied to the Discord server ID, not to you personally.
When your members use the bot. For each ticket we store the Discord ID, display name and avatar of the member who opened it, the answers they gave in the form, who claimed and closed it, and timestamps. If a ticket is closed, the bot saves a transcript: the messages written in the ticket channel, the authors' IDs, names and avatar links, message timestamps, embeds, and copies of attachments up to 8 MB each.
Technical data. Our web server logs the IP address, browser user agent, requested page and time of each request for security and debugging. These logs are kept for up to 30 days.
2. Why we use it
- to sign you in and show you the servers you can manage (performance of our contract with you);
- to run the bots according to your settings and to provide transcripts you asked for (performance of the contract);
- to keep the service secure, prevent abuse and fix problems (our legitimate interests);
- to comply with legal obligations.
We do not use your data for advertising, we do not build profiles, and we do not sell it.
3. Server administrators and members
Ticket transcripts contain data about your server's members. The administrator who enables a bot decides whether tickets are recorded and is responsible for informing their members. For that data, the server administrator acts as the controller and we act on their instructions. Members who want a transcript removed should contact the administrator of that server first; you can also contact us and we will verify the request with the administrator.
4. Who we share data with
- Discord, because the bots and login run through Discord's platform (see Discord's Privacy Policy).
- Our hosting provider, which stores the servers the service runs on.
- A payment provider (such as Stripe) if you buy a paid plan in the future. They receive the details needed to process the payment; we do not store card numbers.
- Authorities, if we are legally required to.
We do not use analytics or advertising services.
5. Where data is stored
Data is stored on servers in the European Union. Discord may process data in other countries under its own safeguards.
6. How long we keep it
- Your account record and tokens: until you ask us to delete them, or until 12 months after your last login.
- Bot settings, tickets and transcripts: until the server administrator deletes them, removes the bot, or asks us to delete them.
- Server logs: up to 30 days.
7. Security
All traffic to the site uses HTTPS. Tokens and secrets are stored on access-restricted servers. No system is perfectly secure, so please contact us if you believe your data has been exposed.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to its processing, and to complain to a data protection authority. To use these rights, email support@gofabot.duckdns.org from an address you can verify, or contact us from the Discord account in question. You can revoke our access to your Discord account at any time under Discord's Authorized Apps settings; removing the bot from a server stops all new data collection for that server.
9. Children
The service is not directed at children under 13 (or the higher minimum age where you live), and we do not knowingly collect data from them. If you think a child has given us data, contact us and we will delete it.
10. Changes
We may update this policy. The date at the top shows the latest version; significant changes will be announced on the site.
11. Contact
Gofa Bots, support@gofabot.duckdns.org.