Privacy Policy

Contact and responsibility

PrynBot is an unregistered Pryn Team project. Mostafa Eyd is the named operator contact for information processed for PrynBot’s own purposes, including accounts, billing, recruitment and service security. Email [email protected].

Server managers decide how to use server modules and who can access their community’s tickets and records. Contact them for community-specific requests. We will help identify the relevant responsibility and cooperate with a request rather than treating a server’s configuration as permission for unrestricted use of member information.

Information collected

Depending on the features used, information includes Discord account IDs, usernames and avatars; server, channel and role IDs; configuration; support messages, attachments, notes and transcripts; moderation records; XP activity; campaign entries and votes; OAuth credentials and session information; subscription IDs and payment status; application answers and review notes; and technical security and error information.

Sources include you, Discord, server members and authorised staff, and payment-status events from Stripe. We do not ask for your Discord password or full payment-card number.

Purposes and legal bases

We use account and subscription information to provide services you request and administer the agreement with you. We use proportionate service and security information for legitimate interests in preventing abuse, troubleshooting, answering support requests and operating a reliable community service. Recruitment information is used to assess your application and communicate with you, including steps requested before a possible engagement where appropriate. Financial and legal records may be processed to meet legal obligations.

Where consent is required for an optional purpose, we request it separately and you can withdraw it. We do not rely on installing a bot as blanket consent from every server member. Server operators must identify an appropriate basis for their own processing. Our interests do not override your rights; you can object to processing based on legitimate interests.

Recipients and international processing

Authorised Pryn Team members can access information needed for their work. Authorised server staff can see their support cases and community records. Discord provides platform interactions, Cloudflare hosts the public website and encrypted transfer database, Stripe processes payments, and Groq processes selected AI ticket questions and context.

The bot host is in Scotland. These external services can operate internationally; Scotland hosting does not mean all data stays in the UK. Provider processing is subject to their terms, locations and applicable safeguards. Ask us for information about the arrangements relevant to your data. We do not sell personal information.

AI support and automation

AI-enabled tickets send the question, bounded ticket history and selected public server guidance to Groq. Private staff channels and other tickets are excluded from knowledge gathering. AI output can be wrong. You can request a person. Automated moderation and XP rules may also act on server activity; ask server staff to review disputed actions.

Staff applications are reviewed by people, without an AI hiring score or automatic role grant. Read the AI disclosure for the limits of ticket automation.

Staff applications and encrypted transfers

Applications collect your verified Discord identity, chosen position, answers, submission status and timestamps. Authorised Pryn Team reviewers can add private review notes. Application access is limited to the configured team administrators; ordinary server staff and Premium users do not gain access. Supplying essential answers is necessary to assess an application; acceptance is not an automatic role grant or employment contract.

The encrypted transfer service stores encrypted file chunks and metadata in Cloudflare D1, along with identifiers, sizes, expiry, password-session and abuse-prevention records. File contents and names are encrypted before upload. The full link contains the download key in its fragment; the application does not send that fragment to the server. Anyone holding the complete link can download or forward it until expiry. See the data policy for cleanup and backup limits.

Storage and security

Access checks, private channel configuration, encrypted stored OAuth credentials and secure session cookies protect relevant records. File transfers encrypt contents and filenames in the browser. Ordinary support messages are not end-to-end encrypted by PrynBot. No system can guarantee perfect security.

Retention differs by feature, configuration and record purpose. Our data policy distinguishes existing cleanup controls, retention targets, exported copies and backups. We do not claim that all records automatically disappear after 30 days.

Your rights and requests

Depending on applicable law and the processing basis, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent where processing relies on it. Email [email protected] with your Discord ID and the relevant service or server. We may ask for proportionate identity verification and protect other people’s information in a response.

Requests are normally free. For UK data-protection rights we respond without undue delay, normally within one calendar month; any lawful extension or exception will be explained. You can complain to the Information Commissioner’s Office or another competent supervisory authority.

Children and changes

The service is not intended for people below Discord’s applicable minimum age. Do not submit identity documents, unnecessary sensitive information or someone else’s private records in an application or support request. Contact us if information from an ineligible child has been collected. We will update this notice when material processing changes occur and provide notice where required.