Privacy Policy

Information we process

• Discord account identifiers, username, display name, avatar, and authentication/session information.
• Discord server identifiers, server names, roles, channels, and configuration data needed to provide the features you enable.
• FiveCore plan status, entitlement dates, service events, security logs, and support records.
• Hosted-bot configuration and bot token data when you voluntarily use hosted-bot features.

Discord data the bot uses

• Server members (Discord's Server Members access): to send welcome messages, give automatic roles, give back the saved roles of members who rejoin (Role Restore keeps the role IDs of a member who leaves), write member join and leave logs, and keep the Levels leaderboards correct.
• Message content (Discord's Message Content access): read only to run the features a server turns on: Auto Moderation (banned words, invites, links and spam), automatic responses and image lines, the answers of chat games, text commands such as !rank, and logs of deleted and edited messages.
• Voice activity: who is in a voice room, for voice XP in the Levels system, temporary voice rooms and voice logs.
• FiveCore does not use presence data (online status or activities).

What happens to message content

• Messages are checked in memory as they arrive and are not saved.
• The text of a deleted or edited message is sent only to the log channel the server chose; FiveCore does not keep it in its database.
• When Auto Moderation acts on a message, up to 500 characters of it are kept so the server's staff can review the violation in the dashboard. Violations are deleted after 30 days.
• Recent messages stay in the bot's memory for about 24 hours and are gone when it restarts.

Why we process it

We process this information to authenticate users, confirm server-management permissions, operate requested features, prevent abuse, provide support, maintain service security, and keep plan access synchronized.

Bot-token protection

Where hosted-bot tokens are stored by FiveCore, the application uses server-side encryption and restricted access. You remain responsible for rotating a token if you believe it has been exposed.

Cookies and sessions

FiveCore uses necessary session and locale cookies so users can remain signed in, protect forms against cross-site request forgery, and preserve language settings.

Sharing

Information is shared only when required to provide the service, such as with Discord for authentication/API operations, infrastructure providers for hosting, or a payment provider for payment processing. FiveCore does not sell personal information to advertisers.

Retention and deletion

Server activity logs are kept for 30 days (the newest 200 entries of each log section may stay longer so the dashboard is not empty) and never contain message text. Levels XP and saved roles are kept while a server uses those features. Other operational data is kept for as long as needed to provide the service, satisfy security and accounting needs, resolve disputes, or comply with law.

A server's settings and data can be deleted on request through FiveCore Support, and where technically and legally possible you may request deletion of data related to your account.

Security

FiveCore applies access controls, CSRF protection, secure session cookies in production, database safeguards, upload restrictions, and encrypted storage for sensitive hosted-bot credentials. No internet service can guarantee absolute security.

Your choices

You can disconnect servers, stop using optional features, rotate credentials, or contact support about access, correction, or deletion requests. Mandatory legal rights in your jurisdiction continue to apply.