Privacy Policy

Effective [EFFECTIVE DATE] · Applies to the hosted ModDog service at moddogbot.com

1. Who this covers

This policy applies to the hosted ModDog bot and the moddogbot.com website, operated by [LEGAL ENTITY] ("ModDog", "we", "us"). When a server administrator adds ModDog to their Discord server, that server operator is the data controller for their members' moderation data and ModDog acts as the processor carrying out moderation on their behalf. We are the controller for the account and billing information of the customer who installs ModDog.

If you run your own self-hosted copy of ModDog, you operate it and this policy does not apply to your instance.

2. What ModDog does not collect

• Message content — never stored. Messages are classified in-process and not written to disk.
• Raw user IDs, usernames, emails, or phone numbers of your members.
• Files or images — attachment checks read only metadata (filename extension, size, and a hash of those); contents are never downloaded, scanned, or stored.

3. What ModDog processes

The only member-derived data ModDog retains is keyed by a salted, one-way hash of the Discord user ID (SHA-256(guild_salt | user_id), truncated). Each server has its own random salt, so the same person produces a different, un-linkable hash in every server — there is no global profile and no cross-server correlation.

• Strikes — a decaying count of recent moderation actions, used for repeat-offender escalation. Auto-expires after the server's configured window.
• Warn opt-out — a flag set when a member opts out of warning DMs.
• Audit log — a content-free record of moderation actions (category, action, confidence, timestamp), identified only by the hash.
• Moderator notes — optional, mod-authored notes about a user, written by your server's moderators. These are stored encrypted at rest and are visible only to your mods; ModDog does not generate or read them for any other purpose.

Some moderation signals are held in memory only and never written to disk: the edit/delete trail for already-flagged messages (a hash, discarded after 24 hours or on restart), and anti-raid / anti-nuke and attachment-flood counters (event counts that self-expire). The verification gate uses nothing but a Discord role — no email, phone, or CAPTCHA.

4. Encryption & security

The limited hashed signals described above are encrypted at rest. Per-server encryption keys are derived from a master key held on ModDog's servers and used solely to operate the service. Because no message content is retained, the most sensitive data simply does not exist in our systems.

5. AI models & training

ModDog classifies messages using its own moderation models. We do not use your server's messages to train or fine-tune models. Model improvements are built from separately sourced, openly licensed datasets. If we ever offer an opt-in program to contribute anonymized moderation data, it will be clearly disclosed and off by default.

6. Website & payments

The moddogbot.com website uses privacy-friendly, cookieless analytics and does not track you across the web. Paid plans (when available) are billed through a third-party payment processor (e.g., Stripe), which handles your card details under its own privacy policy; we do not store full payment card numbers.

7. Your rights & deletion

Because the server operator is the controller, deletion requests are fulfilled per server. Contact an administrator of the server in question; they can remove your data using ModDog's built-in tooling (/moddog erase), which clears your warn opt-out, moderator notes, and audit-log entries in that server.

Active strikes are pseudonymous and may be retained as an anti-abuse measure (a legitimate-interest basis) and self-delete after the server's decay window; an admin can also clear them on request. Depending on where you live, you may have rights to access, correct, or delete your personal data — contact us or the relevant server operator to exercise them.

8. Data retention

Moderation signals self-expire (strikes by the server's decay window; in-memory signals within 24 hours or on restart). Account and billing records are kept as required for the business relationship and applicable law.

9. Children

ModDog is used within Discord and is not directed to children under 13 (or the minimum age required by Discord and applicable law in your region). We do not knowingly collect data from children below that age.

10. Changes

We may update this policy; material changes will be reflected by the effective date above and, where appropriate, announced.

11. Contact

Questions about this policy or your data: hello@moddogbot.com. Governing law: [JURISDICTION].