Privacy policy

Contact

chae is the controller responsible for the processing described in this policy. Questions, concerns, and privacy requests can be sent to support@chae.win. If anything in this policy seems unclear or inaccurate, please contact us.

Information we process

Guild IDs

Used to find and store configuration for each Discord server.

Channel IDs

Used to associate configured channels with a guild and send messages to the correct channel.

Role IDs

Used to assign configured roles to users within the correct guild.

User IDs

Used where needed to provide bot features, maintain blacklists, handle opt-out requests, and associate avatar archive records.

Message content

Checked against guild autoresponder triggers when that feature is enabled. When a command is invoked, relevant message content may be retained for debugging for up to 14 days.

Temporary email content

Temporary inbox messages received by the chae.win email service are stored so the inbox can display them. These messages expire after 24 hours.

Session data

Where a login or session-based feature is used, chae.win may set a session cookie to keep the service working. Session cookies expire after up to 24 hours.

Why we process it

We process information to provide requested bot and website functionality, keep services reliable and secure, investigate errors, prevent abuse, and comply with legal obligations where applicable.

Depending on the feature, our lawful basis is performance of a contract where applicable, our legitimate interests in operating and protecting chae, consent where specifically requested, or compliance with a legal obligation.

Sharing

We do not sell personal information. Information may be processed by service providers that help us operate chae, such as hosting, database, storage, security, and delivery providers. Discord also processes information when you use the bot or Discord-connected features.

Some providers may process information outside your country. Where required, we take reasonable steps to use appropriate safeguards.

Retention

Temporary email messages and website sessions expire after up to 24 hours. Debugging message content is retained for up to 14 days. Configuration IDs are retained while needed to provide the configured feature, protect the service, or meet legal requirements. We remove information when it is no longer reasonably needed.

Cookies

chae.win uses first-party session cookies where they are strictly necessary to keep login and session-based features working. We do not use advertising cookies. If we add optional analytics or other non-essential cookies, we will request consent where required before setting them.

Your choices

You may ask us to provide, correct, or delete information associated with you. Depending on your location and the circumstances, you may also have rights to restrict or object to processing, request portability, or withdraw consent.

Email support@chae.win with the information you want us to review or remove and enough detail to verify account ownership. We aim to respond to access requests within 7 days and deletion requests within 14 days. Where the GDPR applies, we will respond without undue delay and no later than one month unless a lawful extension applies.

Automated decisions

We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

Children

chae is not intended for children under 13. You must also meet the minimum age required by Discord and the law that applies where you live. Where consent is required for a child to use an online service, a parent or guardian must provide it when applicable. Please contact us if you believe a child has provided personal information through our services.

Complaints

Please contact us first so we can try to resolve your concern. If you are in the United Kingdom, you may also raise a complaint with the Information Commissioner's Office. If you are in the European Union or European Economic Area, you may lodge a complaint with your local supervisory authority. The European Data Protection Board provides a directory.

Changes

We may update this policy when our services or legal obligations change. The effective date at the top of this page will show when the latest version applies. Where a change is material, we will take reasonable steps to provide notice.