Draft for review. These words are not final yet and don't apply until an effective date is set below.

Privacy

Who looks after your information

DMbot is run by {{OWNER NAME}}, {{OWNER ADDRESS}}. Write to {{CONTACT EMAIL}} about anything on this page.

What we keep

When you sign in to this website

• Your Discord account number and the email Discord gives us. We use the email only to tell you about your account and plan.
• The ids of your Discord servers that use DMbot, so we can show them to you. {{CHECK: confirm with #435 what /me stores}}
• Sign-in uses Discord. We never see your Discord password, and we don't keep your Discord sign-in token after you sign out. {{CHECK: confirm once sign-in is built (#435)}}

When DMbot is in your game

• Your yes. When you press "I consent", we keep the date, the wording you agreed to, and how you agreed. That's how we prove you said yes.
• What was said. The words of people who said yes, written down as text, with the time they were said. Nobody else is ever recorded, and bots are never recorded.
• Your campaign. The names, places and notes your table makes, the game master's notes and settings, and any adventure or rulebook text the game master shares.
• Your voice is not kept. The sound is sent to be written down, then thrown away. It is never saved.{{CHECK: when the re-listen feature ships, say it holds about a minute of sound in memory only}}

When you pay

Payments go through {{PAYMENT PROVIDER: Paddle or Lemon Squeezy, once the owner chooses}}. They are the seller, and they hold your card or PayPal details; we never see them. They tell us your plan, whether it's paid, and when it renews.

Who can see it

• What was said can be read and downloaded by everyone in the Discord server where the game is played (downloads come with paid plans). The question you say yes to tells you this.
• The game master's (DM's) notes: each campaign picks who sees them. Only the game master; players who choose to peek (the usual setting, with a spoiler warning first); or everyone in the server. When a player peeks, the game master can see who peeked.
• Backups of a paid campaign hold the campaign, including the game master's secrets, and anyone in the server may download one.{{CHECK: say whether transcripts are in backups once that is built}} This keeps a campaign safe if its game master leaves.
• Only people in your server can open your campaign in DMbot. Campaigns never share information.

Companies that help us

We share only what each one needs to do its job:

• Discord: where DMbot runs, and how you sign in.
• Deepgram: turns the sound of people who said yes into text.
• Anthropic: the AI that helps with names, rules and story notes. It gets the text it needs, not sound.
• {{PAYMENT PROVIDER: Paddle or Lemon Squeezy, once the owner chooses}}: takes payments.
• Cloudflare: delivers this website. {{CHECK: once the owner sets it up}}
• {{HOSTING PROVIDER}}: the server DMbot and its database run on.{{CHECK: name and country}}

Some of these companies are in the United States. {{CHECK: transfer safeguards for people in the EU and UK}}

We don't sell your information and we don't use it for ads.

If a server uses its own AI or speech key, we keep that key locked (encrypted), use it only for that server, and never show it in full.

How long we keep it

A campaign is deleted this long after its last game:

If a plan stops being paid, its campaigns are kept for 120 days. We message the game master on Discord 14 days and 3 days before anything is deleted. Backups people already downloaded are theirs to keep or delete.

Account details are deleted when you delete your account. {{CHECK: anything payment law says we must keep, such as invoices}}

Your choices

• Stop being recorded at any time: press "Stop recording me" in the message DMbot sends you, or type /consent revoke in Discord.
• Delete your account from My account. This removes your sign-in details, your plan and the campaigns you own, straight away. Lines you said in someone else's campaign stay there, readable by that server, until that campaign is deleted. {{CHECK: what account deletion removes (#435), and update when "Delete my past transcripts" ships}}
• Ask for a copy of what we keep, or ask us to fix it, by writing to{{CONTACT EMAIL}}. {{CHECK: rights under GDPR, UK GDPR and US state laws, and how fast we must answer}}

Cookies

This website uses one cookie, only to keep you signed in. Other websites can't read it. There are no tracking or ad cookies. {{CHECK: confirm with #435}}

Keeping it safe

Everything travels over a locked (encrypted) connection. Keys and secrets are stored encrypted, and our logs hold ids, never what you said or your payment details.{{CHECK: say how the database itself is encrypted on the server}}

Children

You must be at least 13 to use Discord, so you must be at least 13 to use DMbot. {{CHECK: older age where local law requires it, for example 16 in some EU countries}}

Changes

If we change what we keep or who sees it, we'll update this page and tell signed-in users. If the question you said yes to changes, DMbot asks you again before it records you.