Privacy Policy for Koko Discord Bot

2. Information We Collect

We collect the minimum amount of data necessary to provide and maintain our services:

a) User provided data

• Discord User ID: To associate user settings, profiles, deal histories, and vouches with the corresponding Discord account.
• Payment & Profile Information: Public cryptocurrency wallet addresses, payment identifiers (e.g., UPI IDs, PayPal handles), and vouch/review records submitted directly and voluntarily by the user through bot commands (such as /setaddy, /setupi, /deal, /vouch).

b) Server (guild) data

• Discord Guild ID: To save guild-specific configuration settings (such as custom server prefixes).

c) Temporary in-memory data (not stored)

• Message Content: Used in real-time strictly in-memory to detect prefixes, parse command arguments, and execute user requests. Message contents are discarded immediately after execution and are never recorded, logged, or saved to persistent storage.

3. Information We Do NOT Collect

• We do not store or track message history or chat logs.
• We do not store passwords, private keys, financial credentials, or private personal data.
• We do not track or store user presence (online/offline status or active games).
• We do not record voice channels or voice data.

4. How We Use the Data

The collected data is used exclusively for:

• Executing requested bot commands (e.g., looking up saved payment profiles, fetching balances, recording vouches).
• Maintaining server-specific preferences (e.g., custom prefix).
• Preventing fraud, abuse, and spam through our internal blacklist and safety validation systems.

5. Data Storage and Security

• Stored data is hosted in secured, access-restricted database systems with industry-standard encryption at rest and in transit.
• Only authorized application administrators have administrative access to the database.

6. Data Retention and Deletion Rights

• Retention: Profile information and guild configurations are retained as long as the user or server actively utilizes the bot.
• Self-deletion: Users can remove their saved payment details at any time using in-bot removal commands (e.g., /removeaddy, /removeupi, /removepaypal).
• Requesting complete deletion: You have the right to request full deletion of all your stored data. To request data deletion, contact us directly via our support server or reach out to the developer. All associated records will be permanently erased within 14 business days.

7. Contact Information

If you have any questions, concerns, or data deletion requests regarding this Privacy Policy, please contact us: