🔒 Privacy
Privacy Policy
We keep things minimal. Here's exactly what Demon Bot collects, why, and how to get it removed.
This Privacy Policy explains what information Demon Bot collects, how it is used, and how it is protected. We collect only the minimum data required to operate the service.
🛡️ Short version: We collect Discord IDs, server config data, and billing info from paying customers. We don't read, store, or sell your private messages. We don't share data with third parties except as required to operate the service.
The following table describes each category of data collected, why, and how long it is retained.
| Data Type | Purpose | Retention |
|---|---|---|
| Discord Guild (Server) ID | Ties your license and configuration to your server | Active subscription |
| Discord User ID | License activation, admin verification | Active subscription |
| Server Name | Displayed in admin portal and license records | Active subscription |
| Email Address | License key delivery and billing notifications via Stripe | Until deletion request |
| Stripe Customer & Subscription ID | Payment processing, renewal, and cancellation management | Per Stripe's policy |
| Emoji & Reaction Config | Vault and auto-reaction data stored in your storage channel | Active subscription |
| License Key | Access control and activation records | Active subscription |
| Chat Log (Support) | Support conversations via the bot's chat interface | 90 days or on request |
Demon Bot does not:
- Read, store, or log private or direct messages between users
- Record message content from server channels (except when a command is explicitly invoked)
- Collect demographic data, location data, or IP addresses from Discord users
- Build profiles on individual users across servers
- Sell or rent any collected data to advertisers or third parties
Data is used exclusively for:
- Validating and activating license keys
- Processing subscription payments and renewals through Stripe
- Delivering license keys and billing notifications by email
- Persisting server configuration (emoji vaults, reaction rules) across redeploys
- Providing access to the remote web portal
- Diagnosing errors and maintaining service reliability
We do not use your data for advertising, profiling, or any purpose beyond operating the service.
Demon Bot uses the following third-party services, each with their own privacy policies:
- Discord — Core platform. User IDs, guild data, and message events are governed by Discord's Privacy Policy
- Stripe — Payment processing. Email and payment info handled by Stripe's Privacy Policy
- Resend — Transactional email delivery (license keys, billing notices) from keys@demonbot.win
- Railway — Hosting and infrastructure. Config data persisted in Railway environment variables
⚡ We share only the minimum data necessary with each third party. We do not sell data to any third party.
License and billing records are stored in a JSON database on Railway-hosted infrastructure. Server configuration data (emoji vaults, reaction rules) is backed up to a private Discord channel designated by the server administrator.
We implement reasonable technical safeguards including secret-key authentication for all internal API endpoints and webhook signature verification for payment events. No method of storage is 100% secure, but we are committed to protecting your data using industry-standard practices.
You have the following rights regarding your data:
- Access: Request a copy of data we hold about you or your server
- Correction: Request correction of inaccurate data
- Deletion: Request deletion — note that deleting license data will deactivate access
- Portability: Request your server configuration data in a portable format
- Objection: Object to any processing of your data
To exercise any of these rights, contact inbound@demonbot.win. We will respond within 30 days.
Demon Bot is not directed at children under 13. We do not knowingly collect personal data from children under 13. Discord's own minimum age requirement is 13 years old.
If you believe a child under 13 has provided us with personal data, contact us and we will delete it promptly.
We may update this Privacy Policy periodically. When we do, we will revise the effective date above. For material changes affecting how we use your personal data, we will make a reasonable effort to notify active users.
Continued use of Demon Bot after changes constitutes acceptance of the updated policy.
Privacy questions or data requests:
- Email: inbound@demonbot.win
- Website: demonbot.win