Scope and transparency
This policy describes the current Kirzen Discord bot and dashboard data practices. It is intended to provide clear information about processing and user rights; it is not a substitute for individualized legal advice. Where a mandatory law gives you stronger rights than this policy states, those rights remain applicable.
Who is responsible for the service?
For personal data where Kirzen determines the purposes and means of processing, Kirzen acts as the data controller to the extent required by applicable law.
When a Discord server administrator configures Kirzen to process member or server data for moderation, logging, warnings, greetings, embeds or similar features, the administrator may determine the purpose of that processing. In those situations, Kirzen may act as a service provider or processor on the administrator's instructions, where that legal relationship applies.
Privacy requests and questions can be sent to support@kirzen.net.
Information we may process
- Discord account data: Discord user ID, username, global display name, avatar and information returned by Discord during OAuth authentication.
- Server access data: the Discord servers available to the authenticated user and information needed to determine which servers the user can manage.
- Server configuration: server IDs, channel IDs, role IDs, language, command settings, moderation settings, logging configuration, greeting configuration, custom embeds and related administrative settings.
- Moderation and log data: event type, user IDs, target IDs, channel IDs, timestamps and event details when a server enables features that record those events. Message-edit and message-delete logging may include message content or excerpts.
- Discover data: information voluntarily submitted for a public server listing, including description, purpose, category, tags, server ID, owner ID and an invite URL. Published listings can be visible to other users.
- Feature interaction data: command and dashboard interactions may be processed while needed to execute the requested feature, troubleshoot failures, maintain security and prevent abuse.
- Session and cookie data: authentication session information and the browser preference needed to remember cookie choices.
What we use information for
We process information only for legitimate and disclosed purposes, including providing the bot and dashboard, authenticating users through Discord, applying server configuration, processing moderation and automation requests, delivering requested messages, operating Discover listings, securing the service, preventing abuse, diagnosing errors, responding to support requests, complying with legal obligations and defending legal rights.
We do not use Discord account or server data for unrelated advertising profiles. We do not sell personal information for money and, as currently implemented, we do not use personal information for cross-context behavioral advertising.
Legal bases
Depending on the processing and the jurisdiction, the legal basis may include performance of a requested service or contract, legitimate interests such as security and service operation, compliance with legal obligations, exercise or defense of legal claims, or consent where consent is required. Consent is not used to justify processing that is necessary for the core operation of the service when another lawful basis applies.
Under the LGPD, processing is performed under the applicable legal bases in Lei nº 13.709/2018. For users covered by the GDPR or equivalent laws, processing is tied to an applicable legal basis under those laws, including contract, legitimate interests, legal obligation and consent where appropriate.
Cookies and local storage
Kirzen uses an essential browser session cookie to keep the dashboard authenticated and working. The application also stores your cookie preference locally in the browser. The current dashboard does not deploy a third-party analytics platform through this consent mechanism.
Essential session storage is used because it is necessary to provide the dashboard you requested. If non-essential tracking or analytics is introduced in the future, we will update this policy and provide the controls required by applicable law before relying on consent where consent is required.
Discord and other service providers
Kirzen integrates with Discord's API and OAuth system. Discord is an independent third-party platform and may process information under its own terms and privacy policy. Authentication and requested Discord operations necessarily involve sending or receiving the data required by Discord's APIs.
We may also rely on hosting, infrastructure, database, email or security providers where necessary to operate the service. Where a provider processes personal data on our behalf, access should be limited to the information needed for the service and subject to appropriate confidentiality and security obligations.
International transfers
Because Discord and infrastructure providers may operate internationally, personal data may be processed or transferred outside Brazil or the country where you live. Where a law requires transfer safeguards, Kirzen will use the applicable mechanisms required for the relevant transfer, which may include adequacy decisions, contractual safeguards or another legally recognized mechanism.
Retention and deletion
We keep information only for as long as reasonably necessary for the purpose for which it was collected, including operating configured features, maintaining security, resolving disputes, complying with legal obligations and exercising or defending legal claims.
- Dashboard authentication sessions are designed to expire after seven days, unless ended earlier by logout or session invalidation.
- Server configuration, moderation records and other feature data may remain while the relevant feature or server requires them and subject to applicable retention duties.
- Public Discover listings remain available while published and may contain information intentionally made public by the listing owner.
- Deletion is subject to technical limits and legal exceptions. We may retain limited information when necessary for legal compliance, security, fraud prevention or the establishment, exercise or defense of legal claims.
Your privacy rights
Depending on where you live and the law that applies, you may have the right to request confirmation of processing, access, correction, update, deletion or restriction of data, data portability, information about sharing, objection to certain processing, and withdrawal of consent where consent is the legal basis. Some rights are subject to exceptions and conditions established by law.
Brazil - LGPD: rights include access and confirmation, correction, anonymization/blocking/deletion in applicable cases, portability under regulation, information about sharing, revocation of consent, objection and other rights provided by the LGPD.
EU/EEA and other GDPR-covered users: depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent and lodge a complaint with a competent supervisory authority.
California: where the CCPA, as amended by the CPRA, applies, consumers may have rights to know, delete and correct personal information, limit the use or disclosure of sensitive personal information in applicable cases, opt out of qualifying sale or sharing, and receive equal treatment for exercising privacy rights. We currently do not sell personal information for money or operate cross-context behavioral advertising.
To make a request, contact support@kirzen.net. We may request reasonable information to verify the request and protect against unauthorized access. We will not use verification information for unrelated purposes.
Security
We use reasonable technical and organizational measures appropriate to the nature of the information and risks involved. These may include access controls, server-side sessions, restricted database access and operational safeguards. No internet transmission or storage system can be guaranteed to be completely secure.
If a security incident creates a notification obligation under applicable law, Kirzen will take the required steps, which may include notifying regulators and affected individuals where legally required.
Children and sensitive information
Kirzen is not intended to encourage children to provide personal information. Users must comply with Discord's age requirements and any stricter requirement imposed by applicable law. Do not submit unnecessary sensitive personal data, government identifiers, passwords, payment credentials or other highly confidential information into Kirzen fields or messages.
If we learn that personal information has been collected in circumstances that require a different treatment under applicable children's privacy laws, we will take the steps required by that law.
Public Discover listings
Discover is an optional public directory. When a server administrator publishes a listing, the submitted description, purpose, category, tags and invite information may be displayed to other users. Do not publish personal, confidential or sensitive information in public listing fields. Removing or unpublishing a listing may affect only Kirzen's publication of that listing and does not remove copies or information that other users or third parties may have already accessed.
Changes to this policy
We may update this Privacy Policy when the service, technology, law or processing practices change. We will publish the current version in the dashboard. When required by law, we will provide additional notice or request consent for material changes. The effective date shown above identifies the version currently published.
Applicable frameworks
This policy is designed with reference to the Brazilian Lei Geral de Proteção de Dados (LGPD), the EU General Data Protection Regulation (GDPR) where applicable, and the California Consumer Privacy Act as amended (CCPA/CPRA) where applicable. These references do not limit any other mandatory privacy law that may apply to you.
LGPD (Lei nº 13.709/2018) GDPR (Regulation (EU) 2016/679) California CCPA / CPRA information
Privacy requests
For privacy requests, complaints or questions, contact support@kirzen.net. You may also use the official support page for service-related assistance.