Privacy Policy

This Privacy Policy describes how Annie Bot ("Annie", "we", "us", or "our") collects, uses, and stores information when you use our Discord bot and dashboard. By using Annie, you agree to the data practices described in this policy.

Annie is a Discord bot providing economy, music, moderation, social, leveling, and gaming features to Discord servers.

Server administrators who add Annie act as the controllers of their server's data and are responsible for informing their members about Annie's use in line with this policy and applicable law.

Automatically collected. When you interact with Annie we may collect:

• Discord User ID — a unique identifier assigned by Discord
• Discord username and display name
• Guild (server) IDs and names where Annie is present
• Command usage and interaction timestamps

User-generated. Through your use of Annie's features, we store:

• Economy data — aura balance, inventory, bank balance, portfolio, and in-bot transaction history
• Music / listening history — songs played, queue history, and linked music-service data
• Social data — marriage, family tree, relationship records, invite attribution, and profile bios
• Moderation records — warnings, mutes, bans, and case history within servers you belong to
• DM message content — messages sent through Annie's staff /dm feature are logged (sender ID, recipient ID, message text, and server name) for safety
• Game data — linked Valorant accounts, anime/character collections, and game statistics
• Voice recordings — if a server's staff use the /record feature, the spoken audio of each participant in the voice channel is temporarily captured and stored (see the Voice Recording section below)
• AFK status, cooldown data, and reminders you set
• Premium & purchase records — your premium status, plan, and a payment/transaction reference (we do not store wallet credentials or private keys)

We use collected data solely to:

• Provide and operate Annie's features and commands
• Maintain economy balances, inventories, and leaderboards
• Enforce cooldowns and prevent abuse
• Enable social and gaming features between users
• Log staff DMs sent through the bot for safety and abuse prevention
• Maintain moderation case records for server administrators

We never sell, trade, or share your data with third parties for advertising or commercial purposes.

Annie includes an optional /record feature that lets authorized server staff record a voice channel. Because voice is sensitive personal data, this feature carries additional safeguards:

• What we capture. While a recording is active, the spoken audio of each participant in the voice channel is captured as a separate audio track. We do not capture audio outside an active recording.
• Notice & consent. Starting a recording posts a clear, visible announcement in the channel so everyone present is informed, and Annie joins the voice channel visibly. Recording can only be started by server staff with Manage Server or a role the server has designated.
• Opt out. Any member may exclude their own voice from recordings at any time using /record optout; opted-out members are skipped entirely.
• Where it is stored. Recordings are stored in our access-controlled database and delivered to a channel designated by the server. Unless a server configures its own destination channel, recordings are also delivered to an operator-managed archive channel — meaning the bot operator may have access to them.
• Retention. Recordings are automatically and permanently deleted after the server's retention window (24 hours by default, configurable up to 7 days), or sooner on request.
• Legal basis & responsibility. We process recordings on the basis of consent. Server administrators are solely responsible for obtaining any consent required by participants' local laws — some jurisdictions require the consent of every participant before recording. Do not use this feature where doing so would be unlawful.

Where data-protection laws such as the GDPR apply, we process your data on the following legal bases:

• Performance of a contract — to provide the features and commands you use
• Legitimate interests — to operate, secure, and improve Annie and to prevent abuse, fraud, and spam
• Consent — where you opt in to a specific feature (for example, linking an external account); you may withdraw consent at any time
• Legal obligation — where we must process data to comply with applicable law

Your data is stored in a cloud-hosted MongoDB database. We implement reasonable technical safeguards including access controls and encrypted connections.

However, no system is completely secure. We cannot guarantee the absolute security of your data and are not liable for unauthorized access caused by circumstances beyond our reasonable control.

We retain your data for as long as Annie is active in a server you belong to, or until you request deletion. Data may be kept for a reasonable period after Annie is removed from a server for record-keeping and moderation continuity.

You may request deletion of your personal data through Annie's official support server. Upon a verified request, we will delete your user record within a reasonable timeframe. Some data (such as moderation records) may be retained at the request of server administrators for legitimate moderation purposes.

GDPR & data-subject rights. If you are in the EU or a similar jurisdiction, you also have the right to:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion, subject to our operational requirements
• Restrict processing — limit how we use your data
• Data portability — receive your data in a structured, common format
• Object — object to certain uses of your data
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us through our support server. Requests are processed within 30 days or as required by law.

Annie uses Discord's Privileged Gateway Intents to power specific features:

• Message Content — to read message content for prefix commands (e.g. -help), automod scanning, autoresponders, snipe/edit-snipe logging, AFK detection, and sticky messages. Processed in real time and not stored beyond what's described above.
• Server Members — to receive join/leave events powering welcome messages, auto-roles, invite tracking, moderation logging, activity tracking, and boost events.
• Presence — to track game and music listening activity for the activity leaderboard and session tracking. Presence data (game name, track, artist) is recorded as described above and is not shared with third parties.

Annie integrates with the following services, which have their own privacy policies:

• Discord — discord.com/privacy
• Valorant / Riot Games — riotgames.com/en/privacy-notice
• MongoDB Atlas — mongodb.com/legal/privacy-policy
• Cryptocurrency payment processor — used to process Premium purchases. We receive confirmation of your payment (such as a transaction reference and the plan purchased); we do not store your wallet credentials or private keys.

Annie is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has provided us data, contact us immediately.

Use of Annie is subject to Discord's Terms of Service, which requires users to be at least 13 years old.

Annie's bot does not store cookies. Our website and dashboard use essential session cookies for authentication and functionality — these do not track you across third-party websites.

You can disable cookies in your browser, though this may impact the dashboard.

Annie's infrastructure is hosted on servers located globally, including outside the EU. By using Annie you consent to the international transfer of your data, with appropriate safeguards applied regardless of location.

Where required (such as GDPR), we rely on Standard Contractual Clauses and other approved mechanisms for lawful transfers.

For EU users and those subject to similar regulations, a Data Processing Addendum (DPA) outlining our obligations under GDPR Article 28 is available on request through our support server.

In the event of a confirmed breach affecting your personal data, we will notify you and the relevant authorities as required by law (typically within 72 hours for GDPR-covered breaches), including details about the breach, affected data, and recommended protective measures.

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information collected from you
• Opt out of the sharing or selling of your personal information
• Non-discrimination for exercising your CCPA rights

Annie does not sell personal information. To exercise your rights, submit a request through our support server.

We may update this Privacy Policy from time to time. Significant changes will be announced in our support server. Continued use of Annie after changes are posted constitutes acceptance of the updated policy.