Privacy Policy

This Privacy Policy explains how Eternity (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you use the Aeon Discord bot, website, dashboard, APIs, and related services (together, the “Service”). It should be read in conjunction with our Terms of Service and Cookie Policy.

1. Who We Are & Role Breakdown

The Service is operated by Eternity. For any privacy requests or inquiries, contact contact@aeonbot.org.

Under data protection laws (including UK GDPR and EU GDPR):

• Independent Controller: We act as an independent Data Controller for account authentication, subscription billing, dashboard security, fraud prevention, verification anti-abuse infrastructure we operate platform-wide, direct user communications, and service analytics.
• Data Processor: When we process Discord server configurations, moderation case logs, tickets, custom embeds, verification match alerts for a specific guild, and user-generated content solely on your instructions as a server administrator, we act as a Data Processor. The server owner/administrator acts as the Data Controller for their community data.

2. What We Collect

We collect information directly from you, automatically through your use of the Service, and via third-party platforms (Discord and Stripe).

A. Account & Discord Identifiers

• Discord User IDs, usernames, global display names, and avatar URLs (provided via Discord OAuth).
• Server (Guild) IDs, role IDs, channel IDs, and permission bitmasks configured for bot execution.

B. Server Configurations & Operational Data

• Server configuration settings saved via the dashboard or bot commands (e.g., automated moderation triggers, ticket categories, custom prefix, log channel selections, AI Builder allow-lists).
• Moderation records generated by staff or automations (e.g., warnings, mutes, bans, notes, quarantine logs, and appeal histories).
• Ticket transcripts and metadata (subject to the retention settings enabled by the server administrator).

C. Billing & Payment Information

• Purchases are processed securely via Stripe.
• We do not store full payment card numbers or bank details on our servers. Stripe collects and processes payment details directly.
• We store only billing metadata returned by Stripe, such as payment transaction IDs, subscription status, billing country/postal code, and customer identifiers.

D. Artificial Intelligence (AI) Features

• Prompts, server layout configuration snippets, and metadata submitted when using tools such as AI Builder.

E. Verification, Device Cookies & Digital Fingerprints

When a Discord server enables hosted / fingerprint verification, when you submit a ban appeal through our hosted appeal flow, or on related login flows that mint a device id, we may collect and store:

• A long-lived HTTP-only device cookie (for example, aeon_vid) that identifies the same browser across visits.
• Keyed HMAC-SHA256 digests of IP addresses (and, where used, network/prefix signals) and of client fingerprint material (including user-agent and canvas / WebGL / audio / fonts / math digests). We store these keyed digests for matching, not raw IP or user-agent strings for ongoing display.
• Client fingerprint signals collected from the browser: timezone, languages, platform, screen characteristics, canvas / WebGL / audio / fonts / math hashes, webglRenderer, colorDepth, hardwareConcurrency, deviceMemory, storageQuotaGb, automationScore, and fingerprintBlocked. Soft signals stored in plaintext (unhashed) include timezone, languages, platform, screen, and webglRenderer.
• Server-derived network signals such as ASN number, ASN organization name, and IP class (ipClass, e.g. residential, hosting, VPN, or mobile). ASN organization and ipClass are stored in plaintext for matching quality.
• Linkage outcomes used for alt-account and abuse detection (for example, shared device cookie, shared IP/network, or scored fingerprint similarity), which may be shown to Discord server staff in verification / alt-detection tooling.

Hosted verification and ban-appeal captures feed a mandatory network-wide anti-abuse pool shared across Aeon servers. There is no per-server opt-out of this global pool: when a server uses hosted fingerprint verification (or when an appeal is submitted through our hosted appeal flow), captures are included. Other servers using hosted fingerprint verification may use those signals to flag likely alternate accounts. Staff of a given server may see matched Discord user ids and risk scores for moderation on their server; they do not see which other server contributed a matching signal. These signals are used only for security and anti-abuse, not for advertising or marketing profiles. More detail on cookies and storage appears in our Cookie Policy.

F. Diagnostic & Usage Data

• Command usage statistics, feature performance metrics, error diagnostics, API latency metrics, and IP addresses (for rate-limiting, security logging, and anti-abuse).

Note on Message Content: Aeon does not store or read general channel message bodies except where a specific, user-enabled feature strictly requires it to function (e.g., auto-moderation spam/link filters, command execution, or ticket logging).

3. Artificial Intelligence (AI) Processing

When you interact with AI-driven tools (e.g., AI Builder):

• Subprocessors: Prompts and necessary context are transmitted via secure APIs to our LLM model subprocessors to generate requested layouts or suggestions.
• No Model Training: Prompts and context submitted to AI subprocessors are processed solely to deliver the feature and detect abuse; they are not used to train third-party foundation models.
• Human Confirmation Required: Structural changes generated by AI tools require human confirmation in the dashboard prior to applying changes to your Discord server.

4. How We Use Your Information & Lawful Bases

We process your personal data under the following legal bases pursuant to UK/EU GDPR:

We do not sell, rent, or trade your personal data.

5. Sharing & Third-Party Subprocessors

We share data only with trusted subprocessors necessary to deliver the Service:

• Discord Inc.: To execute bot commands, API actions, and authenticate via OAuth.
• Stripe Inc.: Payment gateway provider for processing payments, managing subscriptions, and preventing payment fraud.
• Google LLC (Perspective API): Optional toxicity / abuse signal scanning on messages when a server enables that premium security feature.
• Google LLC (Safe Browsing API): Optional URL safety checks when a server enables that premium security feature.
• Sightengine: Optional NSFW / adult-content image and avatar scanning when a server enables that premium security feature.
• Resend: Transactional email delivery for staff alert emails when a server enables that premium feature.
• AI Model Providers: Cloud API providers (e.g., OpenAI, Anthropic) used exclusively to process prompts for AI features.
• MaxMind (GeoLite2-ASN): Local ASN database used to derive ASN / organization / IP-class signals for verification anti-abuse. Lookups run against data we host locally; MaxMind is not contacted on each verify request for this purpose.
• IPinfo: Optional IP / ASN enrichment when configured (IPINFO_TOKEN). If enabled, the request IP may be sent to IPinfo to improve ASN and IP-class classification for verification anti-abuse.
• Cloud Infrastructure & Hosting: Database hosts, CDN providers, and server infrastructure located in secure data centers.
• Legal & Professional Advisers: When required by applicable law, court orders, or to defend legal claims.
• Business Transfers: In connection with a merger, sale of assets, or corporate reorganization under equivalent privacy safeguards.
• Server staff (verification): When hosted verification is enabled, match and risk signals derived from the mandatory network-wide fingerprint pool (device cookies, keyed digests, and soft signals) may be visible to administrators of that Discord server so they can moderate alts and abuse. Staff are not shown which other Aeon server contributed a matching signal.

6. International Data Transfers

Our infrastructure and subprocessors operate globally (including in the UK, EEA, and United States). Where data is transferred outside the UK or EEA to a country not recognized as providing an adequate level of data protection, we ensure appropriate safeguards are implemented, such as the UK International Data Transfer Agreement/Addendum or Standard Contractual Clauses (SCCs).

7. Data Retention & Deletion

• Server Data: Configurations, tickets, and moderation logs remain stored while the bot is present in your server or until cleared in the dashboard.
• Verification fingerprints: Device-cookie ids, keyed HMAC-SHA256 digests of IP / fingerprint material, soft signals stored in plaintext, ASN / organization / ipClass, and related match history in the mandatory network anti-abuse pool are retained for 90 days from capture (then automatically pruned), or until deleted pursuant to a valid erasure request (subject to legal holds). Capture records remain associated with the server where verification or appeal occurred for operational provenance. Ban appeals submitted through our hosted appeal flow may also create a fingerprint capture that enters the same pool and retention window.
• Bot Removal: If you remove Aeon from your server, workspace data is marked inactive and queued for automated purging in accordance with our system lifecycle (or upon written request from the server owner).
• Pending AI Plans: Unconfirmed AI-generated layout previews expire and are deleted within product default timelines.
• Financial & Billing Data: Billing records are retained as required by statutory accounting, tax, and anti-fraud regulations (typically up to 6–7 years).

8. Your Rights

Depending on your jurisdiction (such as the UK, EEA, or certain US states), you have rights regarding your personal data:

• Access & Portability: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure (“Right to be Forgotten”): Request deletion of your account data, subject to legal retention obligations. There is no self-serve dashboard control that erases verification fingerprint records today. To request erasure of fingerprint / device-cookie / related anti-abuse records linked to your Discord user id, email contact@aeonbot.org from a contact we can match to that Discord account (or include your Discord user id). We will verify identity and, where required by law and not subject to a legal hold, delete those platform-held fingerprint records. Clearing cookies on your device alone does not remove records already stored in our systems. Guild-scoped moderation or appeal case text remains under the server administrator’s control as Controller.
• Restriction & Objection: Object to or restrict certain data processing activities based on legitimate interests.
• Supervisory Authority Complaint: The right to lodge a complaint with a data protection authority (e.g., the UK Information Commissioner’s Office, ICO).

Note for Server Community Members: If your request concerns moderation records, ticket transcripts, verification/alt-detection records, or messages within a specific Discord server, please contact the server administrator directly, as they act as the Data Controller for that community data. You may still contact us for platform-level account or billing data we control.

To exercise your rights, email us at contact@aeonbot.org. We may require verification of your Discord identity prior to fulfilling requests.

9. Security

We implement technical and organizational measures to safeguard your personal data, including encrypted database connections (TLS/SSL), access restrictions, and least-privilege administrative controls. Keyed HMAC-SHA256 digests reduce exposure of raw IP and fingerprint material in storage (soft signals such as timezone and platform remain in plaintext), but no internet transmission or electronic storage is completely secure; we cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for or directed at children under the age required to use Discord in their country (13 in the US/UK, up to 16 in certain EU member states). We do not knowingly collect personal data from children under these age limits. Server administrators must not configure verification or other features to target or profile children unlawfully.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The “Last updated” date at the top will be updated accordingly. Significant updates will be highlighted via our dashboard, website, or Discord server announcements.

12. Contact Us

For privacy requests, Data Processing Agreements (DPAs), or legal questions:

Email: contact@aeonbot.org

Product: Aeon | Operator: Eternity