Loading
ECHO - Privacy Policy

Privacy Policy

Last Updated & Effective: July 17, 2026.
Privacy Policy: https://echobots.gg/privacy
Terms and Conditions: https://echobots.gg/terms

1. Changes to This Policy

We may update this policy at any time without further notice. Please check regularly to ensure you agree with and understand our current policy.

2. Contact

If you have any questions about our terms or privacy policy, please contact us at [email protected].

3. Bot Data Collection

We store and process the following data:

Channel: Channel ID.
Guild: Guild ID, Guild Icon, Guild Invite, Guild Name.
Messages: Message Content.
Role: Role ID.
User: User ID, Username.

Most of this data is not collected until specifically setup.

This only includes data we store. Other data, such as channel names, role names, and more, is provided by Discord’s API for processing by bots. We do not store this at all, however.

This data is used and stored for legitimate purposes for providing bot functionality.

4. User Presence & Status Data

Our ECHO Vanity application receives presence update events from Discord for
members of servers where a server administrator has enabled it.

What we receive

Discord’s presence update event includes a member’s custom status, activity
information, and online state. We receive this for members of servers that have
installed ECHO Vanity and configured a vanity code.

What we use it for

We read the text of a member’s custom status for one purpose: to check whether it
contains the vanity code or server tag that the server’s own administrator has
configured. That check determines whether the member is granted or removed from
the reward role the administrator has set, and whether a log entry, thank-you
message, or thank-you direct message is sent.

We do not use presence data for any other purpose. We do not use it to determine
who is online, to track activity or game usage, to build behavioural profiles, or
to produce analytics.

What we store

The only presence-derived data we retain is:

  • A record of whether a member currently qualifies for a server’s vanity reward
    role, stored as a true/false value against that member and server.
  • A timestamp of when a thank-you message was last sent to a member, used to
    prevent repeat messages.

We do not store the contents of any member’s custom status. We do not store
activity data, online/offline state, or any history of presence changes. Presence
payloads are processed in memory and discarded.

Retention and deletion

Qualification records are deleted automatically when a member leaves the server,
when the member no longer displays the vanity code, or when the server
administrator removes ECHO Vanity or clears its configuration. Members may remove
themselves from this processing at any time by removing the vanity code from their
custom status.

Sharing

See Section 14 & 17.

Deletion

See Section 18.

5. Website Data Collection

We store and process the following data:

Provided by Cloudflare: Internet Protocol Address, ISO 3166-1 Alpha-2 Country Codes.

Provided by Discord: Avatar, Email Address, ID, OAuth2 Access & Refresh Token (Not Your Account Token!), Username.

This only includes data we store. Other data is provided by Discord’s API and Cloudflare for processing by websites. We do not store this at all, however.

This data is used and stored for legitimate purposes for providing web functionality.

6. VPN Data Collection

Our Virtual Private Networks do not store or log any of your data.

The only data processed and stored is your subscription data.

7. How We Use Your Data

We use your data to contact you, provide you with services, and manage data storage and deletion.

Data is used and stored for legitimate purpose, providing functionality.

8. Data Retention

Data collected from services provided by our Bot(s) (see section 3), is deleted 1 hour from when the bot is removed from your server if it is not added back within that time frame.

All individual member data is deleted if a member leaves the server, besides moderation records (including but not limited to warnings, mutes, and bans) which are are retained for security and integrity purposes.
This information is tied to the unique, publicly available Discord User ID, and is kept to prevent abuse, ensure community safety, and maintain the effectiveness of moderation across our services.

Data collected from services provided by our Website (see section 4), is not deleted without request, please request for your data to be deleted via email at [email protected].
Please note, if you are a customer, all access to your purchased services will be lost.

Data collected from services provided by our VPN(s) (see section 5), is deleted when your subscription ends.

9. Security Measures

To protect your data we implement industry-standard security measures to protect your data from unauthorised access, including encryption, access controls, and secure storage practices.

10. Logs

We log certain data for analytics, support, and debugging purposes.

This includes: bot server adds, bot server removals, and a maximum of the latest 15 commands ran globally.

11. Cookies

Our website uses cookies for service provision, remembering preferences, and managing logins. You can disable cookies through your browser settings, but this may limit some functionalities.

12. Third-Party Policies

Our Privacy Policy does not apply to third-party websites linked on our site.

If you use Discord, refer to Discord Inc’s Privacy Policy.

If you make, or intend to make, purchases on our site via Stripe, refer to Stripe’s Privacy Policy.

If you use PayPal for transactions, refer to PayPal’s Privacy Policy.

13. Children’s Privacy

We do not knowingly collect data from individuals under the age of 13. If you believe your child has provided us with information, please contact us at [email protected].

14. Who Your Data Is Shared With

We do not expose or sell your information to third parties.

15. Email Communications

For customers with memberships, we may send emails for account updates, membership updates, order and subscription updates, and important announcements.

16. International Users

Your data may be transferred, stored, and processed in multiple locations depending on the service used.

Bot data is processed in the United States.
Website data is processed in Germany.
VPN data, whilst not stored, is processed globally in the server location you’re connected to.

We use Cloudflare as a Content Delivery Network (CDN), which may route data through various global locations based on user location.

17. AI & Machine Learning

We do not use your data to train machine learning models. This applies across
every service we operate.

Scope

This covers all of our services, including but not limited to:

  • ECHO, our Discord bot, and any custom-branded bot instances we host on behalf
    of customers
  • ECHO Realms
  • ECHO Vanity
  • ECHOVPN
  • echo.tf, our biolink platform
  • Our dashboard, website, and account systems

What this means

None of the following is used to train, fine-tune, or otherwise develop machine
learning models, whether our own or those of any third party:

  • Message content, message history, or anything sent in a Discord server or
    direct message
  • Member data, presence or custom status data, or profile information
  • Server configuration, logs, or moderation records
  • VPN traffic, connection data, or DNS queries
  • Biolink page content, visitor data, or analytics
  • Account, billing, or support ticket data

We also do not sell, licence, or otherwise provide any of this data to third
parties for the purpose of training their models.

Our use of AI

Some of our features use AI models to generate responses. Where they do, the
model is used to produce an answer to what you send it. Nothing you send is used
to train, fine-tune, or otherwise develop the model.

The models we use are open-weight models, hosted on our own
infrastructure. They are used as-is. We do not train them, we do not fine-tune
them on your data, and we do not send your data to any third-party AI provider
in order to run them.

Where these features are available, they are off by default and must be enabled
and configured by a server administrator before the bot will respond to anything.

ECHOVPN

ECHOVPN operates a no-logs policy. We do not record your traffic, browsing, or
connection contents, so there is no such data available to be used for training
or any other purpose.

18. Deletion

Please note that requests for erasure do not apply to moderation-related data (such as warnings). We retain these specific records based on our legitimate interest in maintaining server security and preventing system abuse. Because Discord User IDs are public identifiers within the Discord ecosystem, these records will persist to ensure the integrity of the moderation history unless the associated Discord account is fully deleted from the platform.

To request deletion of your data, email [email protected]. Please note that records retained for security and integrity purposes, as described above, are exempt from erasure to prevent system abuse.