Privacy Policy

1. Information We Collect

We collect only the information necessary to operate the bot, manage subscriptions, and comply with Discord and Stripe requirements.

1.1. Discord Account Information

When you log in with Discord or interact with the bot, we receive and store:

• Discord user ID
• Username
• Discriminator
• Avatar
• Email (if provided by Discord OAuth)
• The list of servers (“guilds”) you belong to (cached)

This data is written to our database during login and periodically refreshed.

1.2. Billing & Subscription Information

Handled through Stripe.

We store:

• Stripe customer ID
• Stripe subscription ID
• Plan code (free, plus, ultra, etc.)
• Subscription status
• Billing period start/end
• Cancellation state

This data is updated via Stripe webhooks and during subscription management actions.

We never store full payment details. Payments are processed entirely by Stripe.

1.3. Guild (Server) Information

To attach subscriptions and track usage per server, we store:

• Guild ID
• Guild name
• Guild icon

Guild entries are created/updated when you link a guild to a subscription or when the bot fetches guild metadata.

1.4. Guild Sponsorships

If you apply your subscription to a server, we store:

• Guild ID
• Subscription ID
• User ID (owner of the subscription)

This enforces “one subscription per guild” and determines which server gets paid-tier features.

1.5. Usage Metrics

To enforce usage limits and provide dashboard analytics, we store:

• User ID
• Guild ID and guild name
• Daily message counts
• Daily persona counts
• AI request identifiers, token/cost totals, allowance reservations and delivery outcomes
• Period start date
• Timestamps

Daily AI usage is attributed to the responsible subscriber or server when each request starts. Resetting a scene, deleting a persona or unlinking a server does not clear usage already consumed. These accounting records do not contain conversation text.

1.6. Persona Data

Prism allows creation of custom personas for your servers. We store:

• Persona attributes (e.g., name, description, settings)
• Whether a persona is active
• Guild ID they belong to

Naming an eligible persona starts a channel scene from the latest 50 messages. Prism then stores human messages and character replies, including speaker IDs, names, reply references, and attachment metadata, for six hours after the last human message naming a persona. This includes paused conversation. Longer scenes are compacted into summaries and memories kept separately for each persona and channel. After inactivity, the next mention starts fresh from the latest 50 messages and previously filed memories. Server lore is shared across that server’s scenes. A separate buffer keeps the last 40 delivered exchange messages per character and channel, including existing V1 conversation history, for continuity between sessions. Scene reset or that character’s memory reset clears this buffer. New exchange records retain Discord message IDs so received source edits and deletions can update them.

Message context, character descriptions, lore, and memories are sent through OpenRouter to AI model providers to generate replies and compact scenes. Supported image attachments are downloaded temporarily for image understanding; Prism stores their descriptions and metadata, not the image files. Model usage records contain token counts, cost, timing, and identifiers rather than prompt or response text.

Uploaded persona avatars are stored as public images and sent to Discord. Replacing an avatar or deleting a persona does not delete earlier avatar uploads.

Scene transcripts remain stored as source records until the scene is reset, including after inactivity stops their use as live context. Resetting a scene clears its transcript, summary, and learned memories without deleting Discord messages or server lore. Forgetting or resetting a persona’s stored memories does not erase the shared scene. Discord message edits and deletions invalidate affected stored context when Prism receives those events.

2. How We Use Your Information

We use your information to:

• Authenticate you through Discord
• Display your servers and account data in the dashboard
• Provide paid features based on your subscription plan
• Enforce message/persona usage limits
• Enable server sponsorships
• Maintain bot functionality and security
• Comply with Discord’s API Terms and Stripe’s requirements
• Communicate service-related updates

We do not sell your data. We do not use your data for advertising.

3. How Your Data Is Stored

All persistent data is stored in an externally managed PostgreSQL database. We use standard security controls including:

• Encrypted connections (TLS)
• Row-level access control in server code

OAuth scopes are used only to read your basic Discord profile and guild metadata. We do not request unnecessary scopes.

4. Third-Party Services

4.1. Discord

We operate under Discord’s Developer Terms and API Policies. Discord provides your OAuth information and relays all bot interactions. Discord may independently collect or store data; refer to their privacy policy.

4.2. Stripe

Stripe handles all payment information. We receive only customer IDs, subscription IDs, and billing state. Stripe never shares your full payment card data with us.

5. Data Retention

We retain:

• Account records: until your account is deleted
• Guild metadata: updated when fetched
• Usage metrics: retained for analytics and limit enforcement
• Subscription history: as required for financial compliance

If you delete your Discord account, we remove personally identifiable data from our database unless retention is legally required (e.g., billing records).

6. Your Rights

Depending on your location (GDPR, CCPA, etc.), you may:

• Request a copy of your data
• Request deletion
• Request correction of inaccurate data
• Opt out of data processing (with limits, since some data collection is required for functionality)

To make a request, contact: support@prismbot.net. We may require identity verification (Discord ID ownership).

7. Children’s Privacy

Prism is not intended for children under 13 or users otherwise prohibited by Discord’s Terms. We do not knowingly collect information from such users.

8. Security

We use reasonable technical and organizational safeguards, including:

• Encrypted database connections
• Restricted access to credentials
• Secure webhook and authentication handling

No system is perfectly secure, but we actively monitor for vulnerabilities.

9. Changes to This Privacy Policy

We may update this Policy as the service evolves. The “Last Updated” date reflects the latest version. Continued use of Prism constitutes acceptance of changes.

10. Contact

For privacy concerns, data requests, or general inquiries:

Email: support@prismbot.net

Website: www.prismbot.net