Privacy Policy

Last updated: 2026-04-30

1. Who we are

Chappie is a Discord bot operated by Orel Ohayon. This policy explains what data the Bot collects, how it is used, and how you can control it. Contact: legal@orellius.ai.

2. Data we collect

Discord identifiers: user ID, server (guild) ID, channel ID, message ID. Required for the Bot to associate actions with users and servers.
User-visible profile fields: Discord username, display name, avatar — only when shown in Bot output (e.g. leaderboard, welcome card).
Bot interaction content: the text of slash-command arguments and `@Chappie` mentions sent to the Bot. Used to execute the requested action.
Per-server configuration: settings you set via the Bot or its dashboard (XP rules, role rewards, automod thresholds, custom commands).
AI feature logs: when you use AI features (`/chat`, `/imagine`, `/summarize`, voice transcription), the inputs and outputs are stored in encrypted form for short retention windows (see §5).
Voice channel audio: when an admin invites the Bot to a voice channel, the Bot transcribes speech locally. Audio buffers are held in memory only and never written to disk. Transcripts are stored briefly (see §5).
Operational telemetry: error reports and performance metrics, tagged with server and user ID, used to keep the Bot running.

3. Data we do NOT collect

We do not read regular channel messages by default. The Bot does not request the Discord "Message Content" intent in v0.1.
We do not record voice channels except for short-lived in-memory transcription.
We do not collect IP addresses or device fingerprints from Discord users.
We do not sell or rent personal data to third parties.

4. How we use the data

To execute the actions you request (commands, chat, image gen, etc.).
To enforce per-server rate limits and abuse protections.
To compute statistics local to your server (XP, leaderboards).
To improve the Bot's reliability via aggregate, non-personal metrics.

5. Where the data lives, and for how long

AI inference (LLM, image generation, speech-to-text, text-to-speech) runs on the operator's own hardware. Prompts and outputs are not transmitted to OpenAI, Anthropic, Google, or any third-party AI provider by default.
Configuration and XP data: retained while the Bot is in your server, removed within 30 days of removal.
Chat history (when you use `/chat` or `@Chappie chat`): retained 30 days, then purged.
Generated images: retained 90 days unless pinned by a server admin.
Voice transcripts: retained 24 hours unless flagged for moderation review.
Moderation case records: retained while the Bot is in your server (audit trail).

6. Subprocessors

When enabled by the operator, the following service providers may receive operational data (errors, logs, usage metrics — never message content or AI prompts in plaintext):

Sentry (error monitoring)
Axiom (log aggregation)
Cloudflare (R2 object storage for generated images, Tunnel for the dashboard)
Vercel (dashboard hosting)

7. Your rights

Access & export: run /me data in any server where the Bot is installed; the Bot will DM you a JSON export of your data (available from v0.4).
Deletion: run /me forget to purge your XP, chat history, and AI memory. Server admins can additionally use /server forget user @you.
Server-wide: server admins may suspend or remove the Bot at any time via Discord. Removal triggers a 30-day deletion of server data.
Contact: for any other privacy request, email legal@orellius.ai.

8. Children

The Bot is not directed to users under 13. Discord requires users to be at least 13. If you become aware that a child under 13 has provided personal data, contact us and we will delete it.

9. International users

The Bot is operated from Israel. By using the Bot, you consent to the transfer and processing of your data in Israel.

10. Security

We use commercially reasonable safeguards including TLS for all transit, principle-of-least-privilege access controls, and encryption at rest for sensitive fields. No system is perfectly secure; you use the Bot at your own risk.

11. Changes

Material changes will update the "Last updated" date. Continued use after a change constitutes acceptance.