Privacy Policy

This Privacy Policy describes how Annie Bot ("Annie", "we", "us", or "our") collects, uses, and stores information when you use our Discord bot and dashboard. By using Annie, you agree to the data practices described in this policy.

Annie is a Discord bot providing economy, music, moderation, social, leveling, community events, image effects and gaming features to Discord servers.

Server administrators who add Annie act as the controllers of their server's data and are responsible for informing their members about Annie's use in line with this policy and applicable law.

Automatically collected. When you interact with Annie we may collect:

• Discord User ID — a unique identifier assigned by Discord
• Discord username and display name
• Guild (server) IDs and names where Annie is present
• Command usage and interaction timestamps

User-generated. Through your use of Annie's features, we store:

• Economy data — per-server aura balance, bank, loans and debt, market holdings and coins you list, shop purchases, black-market items and effects, race standings, and in-bot transaction history
• AI chatbot messages — when you talk to Annie's chatbot (by mentioning her), the text of your message and recent conversation context is sent to a third-party AI provider to generate the reply (see Third-Party Services). We keep short-term conversation context so replies make sense, count usage (server, model, timing) for capacity planning, and — only if a server has turned on member memory — store short notes the chatbot infers about you, which admins can disable and you can ask us to delete
• Appeals — the text of an appeal you submit through Annie's DM button or the website form is stored on the related moderation case and shown to that server's moderators
• Website login — when you sign in to annie.monster with Discord we store your Discord ID, username and avatar, the list of servers you are in (to show you your servers on the site) and an encrypted copy of the Discord login token so the site can refresh that list. You can revoke it at any time under Discord → Settings → Authorized Apps
• Music / listening history — songs played, queue history, and linked music-service data
• Social data — marriage, family tree, relationship records, invite attribution, and profile bios
• Moderation records — warnings, mutes, bans, and case history within servers you belong to
• DM message content — messages sent through Annie's staff /dm feature are logged (sender ID, recipient ID, message text, and server name) for safety
• Game data — linked Valorant accounts, anime/character collections, and game statistics
• Wishlists — characters you wishlist on annie.monster or with -wishlist are stored by the bot against your Discord ID (character key, name, time added) so it can ping you when one spawns; only you see the list, and removing an entry deletes it
• Voice recordings — if a server's staff use the /record feature, the spoken audio of each participant in the voice channel is temporarily captured and stored (see the Voice Recording section below)
• AFK status, cooldown data, and reminders you set
• Email address — the verified address on your Discord account, shared with us when you sign in to the website. Used for a welcome message, premium confirmations and occasional product updates. Every email has an unsubscribe link, and opting out never affects the bot or the dashboard.
• Public profile — everyone who signs in gets a profile page at annie.monster/u/<id> showing their Discord name and avatar, an optional bio and links, counts (servers played, waifus, achievements, reviews), wallets on servers they play in and featured characters. It is on by default and not listed in search engines unless they choose so. Any of it can be hidden or the whole page turned off under Dashboard → Public profile.
• Reviews — the star rating and text you leave on a server's public page, shown with your Discord name and avatar. That server's staff can hide or delete it, and you can remove it yourself.
• Support tickets — the subject and messages of tickets you open under Dashboard → Support, and email replies you send to a ticket's reply address (only the new text of a reply is kept, not the quoted history). Tickets are visible to Annie staff.
• Referrals — if you first signed in through someone's referral link we store who referred you, so they can be credited once you set Annie up on a server.
• Market watchlists and price alerts you set on the website, used to notify you by DM and email when a price crosses your level.
• Developer access — API keys (stored hashed) and webhook endpoints that server owners register under Settings → Developer. When a server owner registers a webhook, Annie sends that owner's endpoint events about members of that server: joins and leaves (user id and tag), new moderation cases (user, moderator, reason) and appeal decisions. The owner's endpoint is outside our control; only data about their own server is sent.
• Custom domains — a hostname a premium server points at its public page, and its verification status.
• Premium & purchase records — your premium status, plan, and a payment/transaction reference (we do not store wallet credentials or private keys)
• Introductions — the answers you submit through a server's introduction form are posted as a card in that server and kept so you can edit them later.
• Events — events you schedule (title, description, time) and your RSVP (going, maybe, can't), whether you attended, and reminders sent to you about them.
• Community games and markets — your tournament sign-ups and results, prediction-market bets and payouts, bounties you post or claim, Guess Who guesses and wins, effect-battle votes, and treasury proposals and votes. Bets and entry fees are virtual aura only.
• Inheritance — the heirs you name with -will and the record of an estate passing on (who received what) when a server has turned inheritance on.
• Server picture templates — images that a server's staff upload for -fxtemplate, stored on the bot's host until staff remove them.
• Effects favourites — the effect names you save with -favfx.

We use collected data solely to:

• Provide and operate Annie's features and commands
• Maintain economy balances, inventories, and leaderboards
• Enforce cooldowns and prevent abuse
• Enable social and gaming features between users
• Log staff DMs sent through the bot for safety and abuse prevention
• Maintain moderation case records for server administrators, including appeals
• Generate AI chatbot replies and keep short-term conversation context
• Show public server pages that a server administrator has chosen to enable (server name, icon, member count, growth, and economy leaderboards with display names and balances — visible to anyone with the link)

We never sell, trade, or share your data with third parties for advertising or commercial purposes.

Annie includes an optional /record feature that lets authorized server staff record a voice channel. Because voice is sensitive personal data, this feature carries additional safeguards:

• What we capture. While a recording is active, the spoken audio of each participant in the voice channel is captured as a separate audio track. We do not capture audio outside an active recording.
• Notice & consent. Starting a recording posts a clear, visible announcement in the channel so everyone present is informed, and Annie joins the voice channel visibly. Recording can only be started by server staff with Manage Server or a role the server has designated.
• Opt out. Any member may exclude their own voice from recordings at any time using /record optout; opted-out members are skipped entirely.
• Where it is stored. Recordings are stored in our access-controlled database and delivered to a channel designated by the server. Unless a server configures its own destination channel, recordings are also delivered to an operator-managed archive channel — meaning the bot operator may have access to them.
• Retention. Recordings are automatically and permanently deleted after the server's retention window (24 hours by default, configurable up to 7 days), or sooner on request.
• Legal basis & responsibility. We process recordings on the basis of consent. Server administrators are solely responsible for obtaining any consent required by participants' local laws — some jurisdictions require the consent of every participant before recording. Do not use this feature where doing so would be unlawful.

Where data-protection laws such as the GDPR apply, we process your data on the following legal bases:

• Performance of a contract — to provide the features and commands you use
• Legitimate interests — to operate, secure, and improve Annie and to prevent abuse, fraud, and spam
• Consent — where you opt in to a specific feature (for example, linking an external account); you may withdraw consent at any time
• Legal obligation — where we must process data to comply with applicable law

Your data is stored in a cloud-hosted MongoDB database. We implement reasonable technical safeguards including access controls and encrypted connections.

However, no system is completely secure. We cannot guarantee the absolute security of your data and are not liable for unauthorized access caused by circumstances beyond our reasonable control.

We retain your data for as long as Annie is active in a server you belong to, or until you request deletion. Data may be kept for a reasonable period after Annie is removed from a server for record-keeping and moderation continuity.

You may request deletion of your personal data through Annie's official support server. Upon a verified request, we will delete your user record within a reasonable timeframe. Some data (such as moderation records) may be retained at the request of server administrators for legitimate moderation purposes.

GDPR & data-subject rights. If you are in the EU or a similar jurisdiction, you also have the right to:

• Access — obtain a copy of your personal data
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion, subject to our operational requirements
• Restrict processing — limit how we use your data
• Data portability — receive your data in a structured, common format
• Object — object to certain uses of your data
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us through our support server. Requests are processed within 30 days or as required by law.

Annie uses Discord's Privileged Gateway Intents to power specific features:

• Message Content — to read message content for prefix commands (e.g. -help), automod scanning, autoresponders, snipe/edit-snipe logging, AFK detection, and sticky messages. Processed in real time and not stored beyond what's described above.
• Server Members — to receive join/leave events powering welcome messages, auto-roles, invite tracking, moderation logging, activity tracking, and boost events.
• Presence — to track game and music listening activity for the activity leaderboard and session tracking. Presence data (game name, track, artist) is recorded as described above and is not shared with third parties.

Annie integrates with the following services, which have their own privacy policies:

• Discord — discord.com/privacy
• Valorant / Riot Games — riotgames.com/en/privacy-notice
• MongoDB Atlas — mongodb.com/legal/privacy-policy
• Cryptocurrency payment processor — used to process Premium purchases. We receive confirmation of your payment (such as a transaction reference and the plan purchased); we do not store your wallet credentials or private keys.
• Razorpay (razorpay.com/privacy) — processes UPI, card and netbanking payments for Premium in INR. Your payment details are entered on Razorpay's checkout and never reach our servers; we receive the order and payment references, the amount and the outcome.
• AI providers used for the chatbot, -ai and AI-assisted games — Groq (groq.com/privacy-policy), Google Gemini (policies.google.com/privacy), NVIDIA NIM (nvidia.com/privacy-policy) and SambaNova (sambanova.ai/privacy-policy). Message text is sent to whichever provider generates the reply; we do not send your Discord ID to them.
• Serper — supplies web-search results when the chatbot decides a question needs a live search; only the generated search query is sent.
• CoinGecko — real cryptocurrency prices for the Exchange; no personal data is sent.
• Email delivery and inbound replies — Brevo (brevo.com/legal/privacypolicy) delivers the mail we send you and receives the replies you send to a support ticket's reply address, which it forwards to us.
• Vercel (vercel.com/legal/privacy-policy) — hosts the website and issues certificates for custom domains that premium servers attach to their public page.
• Cloudflare Turnstile — human verification on the website and for servers using web verification; Cloudflare may process your IP address and browser signals to decide whether you are human.
• ImgBB — hosts images you upload through the dashboard (rank-card and welcome-card backgrounds).
• Image effect APIs — most avatar and picture effects now render on Annie's own server and send nothing anywhere. A few meme-scene commands (for example -clown, -wanted, -caption) are rendered by popcat.xyz, nekobot.xyz, the Noodles API or memegen.link, and jeyy.xyz is a fallback for some effects; the URL of the avatar or picture you point the command at is sent to that service so it can draw on it. No Discord ID or message text is sent.

Annie is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has provided us data, contact us immediately.

Use of Annie is subject to Discord's Terms of Service, which requires users to be at least 13 years old.

Annie's bot does not store cookies. Our website and dashboard use essential cookies only: a session cookie for authentication and, where enabled, a short-lived cookie that remembers you passed the human-verification check. We also keep a few preferences in your browser's local storage (your theme, the server you last picked for games and the market, unsaved drafts). None of this tracks you across third-party websites.

You can disable cookies in your browser, though this may impact the dashboard.

Annie's infrastructure is hosted on servers located globally, including outside the EU. By using Annie you consent to the international transfer of your data, with appropriate safeguards applied regardless of location.

Where required (such as GDPR), we rely on Standard Contractual Clauses and other approved mechanisms for lawful transfers.

For EU users and those subject to similar regulations, a Data Processing Addendum (DPA) outlining our obligations under GDPR Article 28 is available on request through our support server.

In the event of a confirmed breach affecting your personal data, we will notify you and the relevant authorities as required by law (typically within 72 hours for GDPR-covered breaches), including details about the breach, affected data, and recommended protective measures.

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information collected from you
• Opt out of the sharing or selling of your personal information
• Non-discrimination for exercising your CCPA rights

Annie does not sell personal information. To exercise your rights, submit a request through our support server.

We may update this Privacy Policy from time to time. Significant changes will be announced in our support server. Continued use of Annie after changes are posted constitutes acceptance of the updated policy.