Jonesy Bot Dashboard
Privacy Policy
This policy explains what information Jonesy Bot (the Discord bot and its web dashboard at https://theexchange.duckdns.org) collects, why, and what you can do about it. The bot is run by Jonesy. We keep this short and plain: the bot only collects what it needs to work, and we never sell your data.
1. Information the bot uses in Discord servers
When you are in a Discord server that uses Jonesy Bot, Discord shares some information with the bot so it can work. Depending on which features the server's staff turn on, the bot uses:
- Basic profile info: your Discord user ID, username, display name, avatar, roles, and when you joined the server and created your account. This is used for welcome messages, role tools, member counts and logs.
- Messages: message text is checked by AutoMod (blocked words, links, spam) and, if the server turned on logging, deleted or edited messages are posted to the server's private log channel. The bot does not save message contents in its own database.
- Voice activity: if voice logging is on, joining, leaving or moving between voice channels is posted to the log channel.
- Your avatar: used briefly to draw the welcome image card, which is then posted in the server.
2. Information the bot stores
The bot saves only the following, in a database on its server:
| What | Why | How long |
|---|---|---|
| Moderation records: your user ID, your username at the time, the action (warn, timeout, kick, ban…), the reason, the moderator and the time | So staff can see moderation history | Until staff delete them |
| Staff notes about a user (user ID and note text) | Private notes for server staff | Until staff delete them |
| Giveaway entries and winners (user IDs) | To pick and show winners | Kept with the giveaway until staff remove it |
| Poll votes (user ID and the option you chose) | To count votes and let you change your vote | Kept with the poll |
| Your roles when you leave (only if the server uses "sticky roles") | To give your roles back if you rejoin | Deleted when you rejoin |
| Timed roles (user ID, role, and when it ends) | To remove temporary roles or give delayed roles on time | Deleted when the timer finishes |
| Server settings, sticky messages, role panels, uploaded welcome backgrounds | To run the server's features | Until changed or deleted by staff |
| Premium status: which server has Premium, the buyer's Discord user ID, the plan, and start/end dates (sent to us by Discord) | To turn Premium features on and off | While the subscription is active, then as needed for records and refunds |
3. The web dashboard
Server staff can log in to the dashboard with Discord. When you log in, Discord shares your user ID, username, avatar and the list of servers you're in and your permissions there (the "identify" and "guilds" permissions). This is used only to show you the servers you're allowed to manage.
- Your Discord password is never shared with us. The login token from Discord is used once during login and is not stored.
- We use one essential session cookie to keep you logged in (up to 7 days). There are no advertising, analytics or tracking cookies.
- Anything staff do on the dashboard (like warnings or bans) is recorded as a moderation record under their name, the same as in Discord.
4. Payments
Premium is bought through Discord's checkout. Discord (and its payment partners) handle your payment details. We never receive or store your card number, bank details or billing address. Discord only tells us that a purchase happened: who bought it, for which server, which plan, and when it starts and ends. We use that to unlock Premium. Discord's handling of your payment is covered by Discord's Privacy Policy.
4b. Creator alerts
If a server sets up live-stream or video alerts, the bot checks public information on YouTube, TikTok or Twitch (channel name, profile picture, live status and newest videos). No information about server members is sent to those sites.
5. Who we share information with
We do not sell or rent any information, and we don't use it for ads. Information only goes to:
- Discord, because that's where the bot runs (for example, posting messages and logs in your server). Discord's Privacy Policy applies there.
- Our hosting provider (Google Cloud, servers in the United States), which stores the bot's database.
- Server staff, who can see moderation records, notes, logs, giveaway entries and poll results for their own server.
- Anyone, if the law requires it.
6. Your choices and rights
- You can ask the server's staff to remove warnings, notes or other records about you. They can delete them from the dashboard.
- You can ask us for a copy of the information stored about you, or to delete it, by contacting us (below). We'll reply within 30 days.
- If you leave a server, the bot stops collecting new information about you there (except sticky roles, if that server uses them).
- When a server removes the bot, its staff or members can ask us to delete that server's data.
- Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or get a copy of your personal information, or to object to how it's used. Contact us to use them. We won't treat you differently for doing so.
- We don't sell personal information and don't share it for advertising.
We use your information only to provide the Service you asked for (including Premium you paid for), keep it safe, and follow the law.
7. Children
Discord requires users to be at least 13 (or older where local law says so). Jonesy Bot is not meant for anyone under that age, and we don't knowingly collect information from them.
7b. Where data is stored
The Service runs on servers in the United States. If you use it from another country, your information will be processed in the US.
8. Security
The dashboard uses HTTPS, only server managers can open a server's dashboard, and the database is not public. No system is perfectly secure, but we take reasonable steps to protect your information.
9. Changes
If we change this policy, we'll update the date at the top of this page. Using the bot after a change means you accept the updated policy.
10. Contact
Questions, data requests or deletion requests: aujonesy29@gmail.com.