Privacy Policy
Commitment to Data Transparency & Privacy
Kyro (“we”, “our”, or “us”) is committed to handling user information with the highest degree of transparency and security. This Privacy Policy strictly adheres to the Discord Developer Policy, the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).
01Information We Collect
To provide essential Discord bot features, manage server automation, and authenticate dashboard sessions, Kyro collects and processes specific data provided via the Discord API:
- Discord User ID (Snowflake): Needed to identify members, assign experience points (XP), associate tickets, and verify permissions.
- Username & Display Name: Used for leaderboards, welcome banners, ticket transcripts, and audit logs.
- Avatar Hash: Displayed on web dashboard profile cards and generated ranking cards.
- Guild ID & Guild Name: To isolate server settings and permissions in our database.
- Channel & Role IDs: To route notifications, configure logging, apply moderation mutes/bans, and setup tickets.
- Guild Icon: Displayed in the server switcher on the web dashboard.
- Custom Settings: Welcome/Leave templates, Auto-moderation rules, Voice Master defaults, and vanity custom status settings.
- Moderation Case Logs: Case IDs, target user IDs, moderator IDs, timestamp, and optional reason strings.
- Support Ticket Records: Ticket creator ID, claimed staff ID, creation timestamp, and closed state.
- Encrypted OAuth2 Sessions: Session cookies for authenticated dashboard sessions.
- Audit & Security Logs: IP address metadata used exclusively for rate limiting, DDoS mitigation, and fraud prevention.
02Data We Strictly DO NOT Collect
We adhere to strict data minimization principles. To ensure complete clarity during Discord Bot Verification:
Zero Surveillance & Zero Private Messages
We do NOT monitor, record, store, or sell user chat histories. Message content is processed transiently in memory solely when executing an authorized bot command, evaluating an auto-moderation regex filter, or emitting an event to a user-configured logging channel.
We do NOT access, read, or store Direct Messages (DMs) between users, personal email addresses (unless voluntarily provided for support or billing), passwords, or voice channel audio.
We do NOT store or handle financial payment information. All subscription transactions are processed directly by certified, PCI-DSS compliant third-party processors.
03How We Use Collected Information
Collected information is used exclusively to:
- Operate, execute, and deliver bot features (moderation actions, voice channel generation, leveling calculation, and tickets).
- Enable server owners and authorized managers to configure modules via the Kyro Web Dashboard.
- Enforce rate limits, investigate security anomalies, and prevent bot abuse or API flooding.
- Provide customer support, resolve technical issues, and diagnose software exceptions.
We will NEVER sell, monetize, rent, or trade your personal information or Discord metadata to third-party data brokers, marketers, or advertisers under any circumstances.
04Data Storage, Security & Retention
All data is stored in secured, access-controlled databases with industry-standard encryption in transit (HTTPS / TLS 1.3) and at rest.
- Active Guild Data: Server settings, custom role configurations, and leveling points are stored for as long as Kyro remains installed in the respective server.
- Bot Removal / Guild Departure: When Kyro is removed or kicked from a Discord server, server-specific data is flagged for automated deletion and purged within 30 days, allowing a grace period for accidental removals.
- Transient Logs: Temporary operational telemetry and error logs are automatically rotated and deleted every 14 to 30 days.
05Your Rights & Data Deletion Requests (GDPR & CCPA)
Regardless of your geographical location, we provide full data protection rights to all users:
Users and guild owners have the right to request a complete copy of their data or demand immediate and permanent deletion of all stored data associated with their Discord User ID or Discord Guild ID.
Steps to request deletion:
1. Join our official Discord Support Server at discord.gg/wMMFJqAsXH
2. Open a Support Ticket under the “Data Privacy / Deletion” category
3. Provide your Discord User ID (or Server ID if you are the guild owner)
4. Our administrators will verify ownership and purge all records within 14 business days
06Third-Party Service Providers & Subprocessors
Kyro relies on trusted infrastructure partners solely to deliver the service:
- Discord Inc.: For API transmission, WebSocket events, and OAuth2 identity management.
- Cloud Infrastructure & Database Providers: Secure, enterprise-grade cloud compute and managed database storage.
- Payment Gateways: PCI-DSS compliant third-party payment processors for processing premium transactions.
07Children’s Privacy (COPPA)
Kyro strictly complies with the Children’s Online Privacy Protection Act (COPPA) and Discord’s minimum age requirements. The Service is not intended for or directed towards children under the age of 13 (or under 16 in certain European jurisdictions). We do not knowingly collect personal data from children under these age thresholds. If we discover that an individual under the required age has provided us with personal information, we will immediately delete that data from our systems.
08Policy Updates
We may periodically revise this Privacy Policy to maintain compliance with relevant laws and technological standards. When changes occur, the “Last Updated” date at the top of this page will be amended. Significant revisions will be announced in our official Discord community.
Privacy Inquiries & Data Protection Officer
For privacy-related questions, data export inquiries, or verification compliance discussions, please contact the Kyro development and privacy team via our Discord Support Server.