Effective June 7, 2026

Privacy Policy

This policy explains what Zuzupui stores, why it stores it, and how users can export or delete data.

Data We Collect

Zuzupui stores the minimum data needed to run a server-scoped virtual economy and customization system.

  • Discord IDs for servers, users, roles, channels, and messages when needed for bot features.
  • Server settings such as currency symbol, prefix, cooldowns, limits, enabled commands, audit-log channel, and safety settings.
  • Virtual economy data such as cash, bank, inventory, stock holdings, stock trades, stock alerts, rewards, role-income claims, cooldowns, confirmations, button clicks, and ledger entries.
  • Admin-created content such as custom replies, shop items, custom embeds, autoresponders, and button responders.

The bot does not intentionally store email addresses, IP addresses, passwords, real-money payment data, or full message logs.

Message Content

Slash commands do not require message content access. Prefix commands, chat-money grants, and autoresponders are disabled by default and must be explicitly enabled with environment variables. When enabled, message content is read only to detect configured commands or triggers and is not stored as a message log.

How We Use Data

Data is used to run balances, transfers, rewards, inventory, shops, stock features, games, cooldowns, leaderboards, anti-abuse settings, confirmations, command permissions, audit logs, custom replies, and dashboard views.

Data is not sold, not used for advertising, and not used to train AI models.

Sharing

Stored data is not shared with third parties except Discord as required for bot operation, the hosting provider chosen by the bot operator, and server staff who can view configured audit logs, leaderboards, dashboard data, or admin command output.

Retention

Event-style records are deleted on startup when they exceed DATA_RETENTION_DAYS. The default is 365 days and the minimum allowed value is 30 days. Balances, inventory, stock positions, server settings, and custom configuration remain until reset, removed, or deleted by request.

User Controls

  • /privacy summary shows what categories of data are stored.
  • /privacy export provides a JSON export for the current server.
  • /privacy delete confirm:true deletes stored bot data for the current server.

Security

Data is stored in the configured SQLite database or future database selected by the bot operator. Bot tokens, dashboard tokens, database files, and backups must be kept private. The dashboard requires a private DASHBOARD_TOKEN before public exposure.

Children

The bot is intended for Discord users who meet Discord's minimum age requirements.

Changes

This policy may be updated as the bot changes. Material changes should be reflected in the public bot listing or support server.