Privacy Policy

XenonBots — Palestine — Tulkarm, Palestine is the controller for personal data processed for the XenonBots service. For privacy requests or to exercise your rights, contact [email protected].

If you pay through Tebex, Tebex Limited processes payment data needed for the transaction as Merchant of Record. XenonBots does not receive your full card number or card security code.

XenonBots processes data from Discord, the dashboard, support requests, and payment workflows as needed to provide the service.

We use data to run the bot and dashboard, save server settings, execute commands and features, protect the service from fraud and abuse, manage subscriptions, and respond to support requests.

When you sign in through Discord, we create or update a dashboard account record, its sign-in timestamp and count, and may use the guilds.join permission you approved to add your account automatically to the XenonBots server configured for the service.

Message content is processed only for features configured by a server administrator. Duplicate-message detection keeps normalized recent text in process memory for no more than 120 seconds. Edited or deleted message content is sent only to the Discord log channel configured by that server and is not persisted in XenonBots analytics.

We do not use Discord message content to train machine-learning or artificial-intelligence models.

Where GDPR or similar law applies, our bases include performance of a contract to provide the service, legitimate interests in security, fraud prevention, and service reliability, legal obligations where records must be retained, and consent where it is required by law.

We may use aggregated or de-identified data to improve performance and understand feature usage without trying to identify specific people.

We do not sell data. We may share limited data with service providers needed for operation, including Discord, hosting, databases, storage, operational analytics, and payment providers.

Payment-provider categories include Tebex, Lahza, and Togo when you choose one of them. We limit data sent to what is necessary to create or verify payment or handle a refund or dispute; each provider's own privacy policy applies to its independent processing.

We may disclose data when legally required or when necessary to protect XenonBots, users, or investigate fraud and abuse.

XenonBots runs on Discord, so some data is also governed by Discord's terms and privacy policies. Changes to Discord privacy settings or permissions can affect bot functionality.

The dashboard may use essential cookies for sign-in, session security, and remembering settings. If optional analytics or similar technologies require consent by law, we will request that consent before enabling them where required.

When the bot is removed from a server or permissions are revoked, features may stop immediately, and we may keep necessary records for a limited period for security, compliance, and dispute handling.

We keep data for as long as needed to provide the service, store settings, comply with obligations, or prevent fraud. Some data may be deleted or minimized after cancellation or bot removal when no longer needed.

Operational analytics are automatically deleted after 30 days. The normalized in-memory text used for duplicate-message detection is retained for no more than 120 seconds and is lost when the process restarts.

Feature data such as server settings, member level progress, ticket state, and giveaway entries may remain longer than 30 days while needed to provide the feature. We delete or minimize it when it is no longer necessary or after a verified deletion request, subject to legal and security exceptions.

Security or financial records may be retained longer if needed to protect the service, handle a payment dispute, or comply with law.

We reserve the right to delete or archive inactive server or account data after a reasonable period, especially when the bot has been removed, no subscription exists, or there is no meaningful service activity.

We use technical and organizational controls such as access minimization, environment secrets, limited permissions, and monitoring logs. No internet-connected system is 100% secure.

If we discover a meaningful security incident, we will take appropriate action and notify affected parties when required or appropriate.

You may request access, correction, deletion, portability, objection to certain processing, or restriction of your data where possible and lawful. Not every right applies in every case, especially where data is needed to provide the service, prevent fraud, or comply with law.

To request deletion, email [email protected] with your Discord user ID and, when applicable, the Discord server ID. We may ask for proof needed to verify the requester or server owner before deleting data.

Individual members cannot disable all real-time message processing themselves when a server administrator has enabled a feature. Administrators can disable message-dependent features and configure channel or role exclusions where supported.

If you are in a region covered by GDPR or similar privacy laws, we will try to handle requests under available rights such as access, rectification, erasure, restriction, portability, objection, and withdrawal of consent where processing is based on consent.

We try to respond to privacy requests within a reasonable time, and complex requests may require additional time for identity and ownership verification.

You can remove the bot from a server or revoke its Discord permissions to stop future access to that server's data.

The service is intended for Discord users allowed to use the platform under Discord's terms and applicable law. We do not target children or request sensitive information from them.

Data may be processed in different countries depending on our hosting and infrastructure providers. By using the service, you consent to that transfer as needed to operate XenonBots.

For privacy, deletion, or data questions, contact [email protected]. We will try to respond within a reasonable time based on the request.