Back to the dashboard

Privacy Policy for RamaBot

RamaBot ("the Bot", "we", "us", or "our") is operated by Rama Yousef, based in Turkey. This Privacy Policy explains how we collect, process, store, and protect your information when you interact with RamaBot on Discord or use our web dashboard.

Effective September 4, 2026 · Last updated September 4, 2026

1. Information We Collect

We only collect and process data necessary to provide features requested by users and server administrators.

A. Discord Identifiers & Discord API Data

Data Collected: User IDs, Guild (Server) IDs, Channel IDs, Role IDs, and Message IDs.

Privileged Intents Enabled:

  • Message Content: Processed strictly for commands, mini-games, server logging modules, and AI assistant features.
  • Server Members: Processed to track server joins/leaves, roles, and administrative permissions.
  • Presence Intent: Processed strictly where real-time status display features are requested.

B. Public Profile Information

Data Collected: Discord Usernames and Avatar Hashes.

Purpose: Displaying user rankings on web leaderboards and rendering profile cards.

C. Server Activity, XP & Metrics

Data Collected: Numerical message counts, global and server-specific XP, levels, and daily server activity logs. (Note: Message counts are numerical stats, not raw text.)

D. Economy & Transaction Records

Data Collected: Virtual credit balances, transaction logs (sender, recipient, amount, timestamp), purchased shop items, cosmetics, game wins, and profile setups.

E. Moderation Records

Data Collected: Warnings, jail/mute records, moderator case notes, and user appeals (including reason text entered by staff). These records belong to the server issuing them.

F. Explicit User Input

  • Confessions: Stored against a one-way hashed User ID (not directly identifiable to your account).
  • AI Memory: Facts you voluntarily instruct the AI assistant to remember about you.
  • Bot Feedback & Games: Text submitted via .suggest-bot or words recorded in mini-games (e.g., Jinx).

G. Dashboard Sessions & Web Data

Data Collected: Encrypted httpOnly session cookies and Discord OAuth2 access/refresh tokens.

No IP Tracking: We do not log visitor IP addresses or use web tracking analytics on ramabot.xyz.

2. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

  • Contractual Necessity: To deliver the features and services requested by you or your server administrators.
  • Legitimate Interests: To prevent system abuse, enforce blacklists, maintain bot performance, and secure our infrastructure.

3. Subprocessors & Third-Party Services

We do not sell, rent, or trade personal data. Data is processed through the following infrastructure providers solely to operate the bot:

ProviderPurposeLocation
NetcupPrimary Bot Application HostingGermany
SpaceifyWeb Dashboard HostingInternational
TursoDatabase InfrastructureInternational
Cloudflare (R2)Image Asset StorageInternational
Google (Gemini AI)AI Assistant Feature ProcessingUnited States
PatreonSubscription & Donation ManagementUnited States
Pixabay / neko.bestMedia Search & Interactive GIFsInternational

4. Retention & Deletion

  • General Retention: Data is retained for as long as the bot remains in your server or until an account deletion request is processed.
  • Automated Expiry: Global transaction ledgers maintain roughly the last 40 entries per direction. Web dashboard session tokens expire after 24 hours.
  • Server Removal: Server configurations are kept temporarily after bot removal so server settings are not lost if the bot is re-added.

5. Your Data Rights & Deletion Requests

You have the right to Access, Rectify, or request Permanent Deletion of your personal data.

How to Request Deletion:

  1. Contact us via email at rmrmrama069@gmail.com or open a ticket in our Support Server.
  2. Requests must originate from the Discord account associated with the User ID.
  3. Requests are fulfilled within 30 days. (Note: Moderation records are owned by the issuing server staff and may require admin approval to modify.)

6. Children's Privacy

RamaBot is not intended for users under the age of 13 (or the digital age of consent in your jurisdiction). We do not knowingly collect data from children under 13.

7. Contact Information