Privacy Policy

Information we process

We process information needed to operate Nabu as a hosted Discord bot and web dashboard. The categories below depend on which features a server enables and whether you sign in to our website.

• Discord account and server data. Discord user IDs, usernames, display names, avatars, guild (server) IDs, guild names, channel IDs, role IDs, and membership information that Discord makes available to the bot through Discord's API and the permissions you grant when you invite Nabu or sign in to the dashboard.
• Message content. When Community Safety Alerts or related safety features are enabled, we may process message text and metadata from channels you configure so the bot can detect and respond to configured safety conditions. We do not use the Message Content intent for advertising or unrelated profiling.
• AI conversation data. For /ask and related AI features, we process prompts, replies, tool actions, confirmation batches, and conversation context needed to answer questions and carry out approved actions in your server.
• Configuration and usage data. Guild settings stored in our database (for example welcome and leave messages, role menus, announcements, tool permissions, safety rules, and audit preferences) and operational metadata such as timestamps, request identifiers, and error logs.
• Session and authentication data. When you sign in to our website with Discord or link Patreon, we receive OAuth tokens and profile information from those providers and store encrypted session data so you can manage servers and subscriptions.
• Billing and patron data. If you subscribe through Patreon, we receive membership status, tier information, and related identifiers from Patreon to provision Premium features for eligible guilds.

We do not intentionally collect government ID numbers, payment card numbers, or other highly sensitive categories of personal data through the Service itself. Payments are handled by Patreon under their own terms and privacy policy.

How data is used

We use the information described above to:

• Provide, maintain, and improve bot commands, the web dashboard, and Premium features;
• Run AI-assisted workflows, including routing prompts to our model provider, showing confirmation steps before destructive actions, and maintaining conversation context;
• Deliver configured automations such as welcome and leave messages, announcements, and self-service role menus;
• Operate Community Safety Alerts and related moderation tooling when enabled by server administrators;
• Authenticate dashboard users, enforce access controls, and link Patreon memberships;
• Detect abuse, troubleshoot errors, protect the Service, and comply with legal obligations;
• Communicate about important service changes, security issues, or support requests you initiate.

We do not sell personal information. We do not use Discord message content for targeted advertising.

Retention and deletion

We retain information only as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law.

• Guild configuration is kept while Nabu remains in the server and for a reasonable period afterward so settings can be restored if the bot is re-added.
• Conversation sessions for AI features are stored temporarily in Redis and expire automatically after inactivity or when a thread is closed, unless longer retention is needed for debugging a specific incident you report to us.
• Website sessions and OAuth tokens are retained while your account is active or as needed to maintain linked Patreon benefits, then deleted or rotated according to our security practices.
• Logs may be kept for a limited time for security, abuse prevention, and reliability monitoring. Log contents vary by configuration and may include guild IDs, user IDs, and truncated message excerpts when safety or audit features are enabled.

When Nabu is removed from a Discord server, we stop processing new data for that guild. Server owners and authorized administrators may request deletion of stored guild configuration or account-linked data by contacting us through the support channels listed below. Some information may persist in backups for a limited period or where we must retain records to resolve disputes, enforce our terms, or meet legal requirements.

Third-party services

Nabu relies on third-party platforms to function. Those providers process data under their own policies and may be located in the United States or other countries.

• Discordhosts your server, messages, and account. Nabu interacts with Discord's API according to the permissions you grant. See Discord's Privacy Policy.
• OpenRouter routes AI model requests for /ask and related features. Prompts and model responses needed to generate an answer are transmitted to OpenRouter and the underlying model providers it uses. See OpenRouter's Privacy Policy.
• Patreon processes subscriptions and membership status for Premium tiers. We receive webhook and API data from Patreon to link patrons to Discord accounts and eligible guilds. See Patreon's Privacy Policy.
• Infrastructure providers such as hosting, database, and cache services help us run Postgres, Redis, and the website. They process data on our behalf under contractual safeguards appropriate to the sensitivity of the data stored.

We may disclose information if required by law, to protect the rights and safety of users and the public, or in connection with a merger, acquisition, or sale of assets, subject to this policy or notice to you where required.

Your rights and choices

Your choices depend on your role and location. Server administrators control which Nabu features are enabled, which channels and roles are involved, and whether safety or audit tooling is active.

• You can remove Nabu from a server at any time through Discord's integration settings, which stops new processing for that guild.
• You can sign out of the website and revoke Nabu's access through Discord's authorized applications settings.
• You can manage or cancel Patreon memberships through Patreon's account tools; Premium access may end when a subscription lapses.
• Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. We will respond to verified requests within a reasonable time and as required by applicable law.

Because much of the data we process originates from Discord servers you participate in, some requests may need to be coordinated with a server owner or administrator who controls guild configuration.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Discord requires users to meet its minimum age requirements. If you believe a child has provided personal information to us in violation of this policy, contact us and we will take appropriate steps to delete the information where required.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice through the website, bot status channel, or support server. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy, except where applicable law requires otherwise.

Contact and requests

For privacy questions, data access or deletion requests, or concerns about how Nabu handles information in your server, contact us through our Discord support server linked from the website footer or home page. Please include enough detail for us to verify your relationship to the relevant Discord account or guild.

This policy is provided for transparency about our practices. It is not legal advice, and you may wish to consult qualified counsel for guidance specific to your situation or jurisdiction.