Privacy Policy

Last Updated: March 22, 2026

Your digital privacy is our absolute priority. We built Salvor Security Bot specifically to protect communities without invading the privacy of their users. This policy outlines exactly what we collect, why we need it, and how we protect it.

1. The "What We Don't Do" Guarantee

Before we list what we collect, we want to be clear about what we never do:

We do not read, log, or store the contents of your chat messages.
We do not send unsolicited Direct Messages (DMs) to users.
We do not request access to your email address or passwords.
We do not sell your data to advertisers or third-party brokers.

2. Information We Collect

To provide functional security and operate the web dashboard, we collect minimal data directly from the Discord API:

Account Identifiers: Your Discord User ID, Username, and Display Name.
Server Data: Guild IDs, server names, and role IDs necessary for assigning verification statuses.
Dashboard Authentication: When logging into our web portal, we receive a temporary OAuth2 token to verify your administrative access to servers.
Operational Telemetry: CAPTCHA interaction data, including success/failure timestamps, to enforce rate limits and analyze behavioral botting patterns.

3. How We Use Your Information

The data we collect is utilized strictly for the following operational purposes:

To verify users and automatically assign roles upon passing CAPTCHAs.
To temporarily lock out accounts that fail verification too many times, protecting servers from brute-force attacks.
To generate internal audit logs for server administrators.
To manage Premium subscriptions and billing lifecycles.

4. Data Storage and Security

We employ strict, industry-standard security protocols to protect your data. Information is stored securely on encrypted server partitions. Active verification sessions are held entirely in volatile RAM and are permanently destroyed upon completion or timeout. Long-term records (such as blacklist data) are minimized to simple ID mappings.

5. Third-Party Data Sharing

We only share information with trusted third-party sub-processors necessary to run the service (e.g., secure hosting providers, and Stripe for processing Premium subscriptions). We will only disclose user data to law enforcement if required by a valid, legally binding subpoena or court order.

6. Data Deletion & Your Rights

Server Administrators can trigger the deletion of their server's configuration data by permanently removing the bot from their server and canceling any active subscriptions. For explicit GDPR/CCPA data deletion requests regarding individual user history, please contact our support team.

7. Contact Us

For privacy-related inquiries, data requests, or concerns, please send email to contact@velosygnlabs.xyz.