Privacy Policy

Who this is about

Solace Bot is a Discord bot and web dashboard operated by a single individual. "We" below means that operator. Each Discord server that adds the bot decides its own configuration; the operator hosts it.

What is collected

The bot stores only what a feature needs to work:

• Server and channel identifiers, plus role identifiers, so settings and permissions can be attached to the right place.
• Discord user identifiers for people involved in something the bot records: a moderation case, a ticket, an application, an appeal, a giveaway entry, a birthday, a reminder.
• Message content, in two narrow cases. Auto-moderation reads messages as they arrive to decide whether a rule matched, and does not store them unless it acted. A short-lived index of recent messages is kept so moderators can see context around an action; it is deleted automatically after 48 hours by default.
• Content you deliberately submit: ticket messages, application answers, appeal statements, suggestions, poll votes.
• Dashboard activity: which account made which configuration change, so server staff can audit their own server.

What is not collected

• Direct messages sent to the bot are not stored or read. The bot sends DMs (a warning notice, an appeal link, an application confirmation) but keeps no record of anything sent back to it.
• Email addresses, payment details, IP-based location, or analytics profiles.
• Anything from servers the bot is not in, and anything from a server it has left.

Discord login

Signing into the dashboard uses Discord OAuth2 with the identify, guilds and guilds.members.read scopes. That tells us your Discord ID, username, avatar, and which servers you are in, so the dashboard can show you the servers you administrate. The access token is not stored after login. Sessions are a random identifier in a cookie, held for seven days.

How long it is kept

• Recent message context: 48 hours by default, configurable per server.
• Activity log entries: 90 days by default, configurable per server.
• Moderation cases, appeals and audit entries: kept while the bot is in the server. These are the accountability record and are deliberately not pruned on a timer.
• Everything for a server: deleted within 30 days of the bot leaving it. The delay exists so that an accidental kick does not destroy a server's configuration.

Who can see it

Server staff see their own server's data, according to permissions that server configures. No server can see another server's data. The operator has technical access to the database for support and maintenance, and access to a server's data through the dashboard is recorded.

Nothing is sold, and nothing is shared with third parties for advertising. Outbound requests are made to Discord, and to YouTube or Spotify when the music feature is used, to fetch the media requested.

Getting your data removed

Server owners can remove everything by removing the bot from the server. To request deletion of your personal data specifically, or a copy of it, contact the operator through the support server or by email. Requests are answered within 30 days. Some records may be retained where a server needs them for its own moderation history; you will be told if that applies.

Changes

Material changes will be announced in the support server before they take effect. The date at the top is when this page last changed.