Added privacy policy#1566
Conversation
There was a problem hiding this comment.
Pull request overview
Adds a dedicated Privacy Policy document for TechSupportBot to describe what user data is collected (e.g., moderation logs, modmail, XP), how it’s used, retention/deletion options, and contact details.
Changes:
- Added
documentation/privacy_policy.mdwith 10 policy sections (collection, usage, retention, deletion, security, etc.). - Documented modmail/event logging behavior and a restricted
/data_deleteprocess.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - **Modmail threads** allow users to privately contact the moderation team and allow staff to track conversation history | ||
| - **Event logs** are used by administrators to audit server activity and investigate incidents | ||
| - **XP data** is used to reward participation and assign XP-based roles | ||
| - **Application dat**a is used to process membership or role applications |
There was a problem hiding this comment.
| - **Application dat**a is used to process membership or role applications | |
| - **Application data** is used to process membership or role applications |
| We do not sell, share or transfer your data to any third parties. | ||
|
|
||
| ## 4. Data Retention | ||
| - **Moderation records** (warnings, bans, notes, modmail bans) are retained indefinitely unless manually removed by a moderator or deleted by you via the `/data_delete` command (if you have administrator access to the Bot, otherwise please see section 5) |
There was a problem hiding this comment.
I don't understand the "or deleted by you" part. From what I understand only admins can delete the moderation records, right?
| - **Moderation records** (warnings, bans, notes, modmail bans) are retained indefinitely unless manually removed by a moderator or deleted by you via the `/data_delete` command (if you have administrator access to the Bot, otherwise please see section 5) | |
| - **Moderation records** (warnings, bans, notes, modmail bans) are retained indefinitely unless manually removed by a moderator |
Something like this might be clearer?
| - **Moderation records** (warnings, bans, notes, modmail bans) are retained indefinitely unless manually removed by a moderator or deleted by you via the `/data_delete` command (if you have administrator access to the Bot, otherwise please see section 5) | ||
| - **Ban logs** are retained indefinitely for moderation audit purposes | ||
| - **Modmail thread content** is archived (not deleted) when a thread is closed and remains in the modmail forum channel | ||
| - **Event logs** are sent to Discord log channels and subject to Discord's own message retention |
There was a problem hiding this comment.
| - **Event logs** are sent to Discord log channels and subject to Discord's own message retention | |
| - **Event logs** are sent to Discord log channels and subject to Discord's own message retention policies |
| - **Ban logs** are retained indefinitely for moderation audit purposes | ||
| - **Modmail thread content** is archived (not deleted) when a thread is closed and remains in the modmail forum channel | ||
| - **Event logs** are sent to Discord log channels and subject to Discord's own message retention | ||
| - **XP, application, duck hunt, and grab data** are retained indefinitely until manually cleared or until you request deletion via `/data_delete` to the appropriate channel of communication |
There was a problem hiding this comment.
| - **XP, application, duck hunt, and grab data** are retained indefinitely until manually cleared or until you request deletion via `/data_delete` to the appropriate channel of communication | |
| - **XP, application, duck hunt, and grab data** are retained indefinitely until manually cleared or until data deletion is requested |
Might be better to just keep the instuctions for deleting the data in section 5. instead of having them listed multiple times
| - **XP, application, duck hunt, and grab data** are retained indefinitely until manually cleared or until you request deletion via `/data_delete` to the appropriate channel of communication | ||
|
|
||
| ## 5. Your Rights and Data Deletion | ||
| You have the right to request deletion of certain personal data. The Bot provides a built-in `/data_delete` command that allows you to permanently and irreversibly delete: |
There was a problem hiding this comment.
| You have the right to request deletion of certain personal data. The Bot provides a built-in `/data_delete` command that allows you to permanently and irreversibly delete: | |
| You have the right to request deletion of certain personal data. The Bot provides a built-in `/data delete` command that allows you to permanently and irreversibly delete: |
command name has changed
| - Moderation warnings, notes, and ban logs (these can be removed by a moderator upon reasonable request) | ||
| - Modmail thread content (as it forms part of the moderation record) | ||
|
|
||
| To request deletion of data not covered by `/data_delete`, contact the server moderation team via modmail (via Discord server or Reddit modmail). |
There was a problem hiding this comment.
| To request deletion of data not covered by `/data_delete`, contact the server moderation team via modmail (via Discord server or Reddit modmail). | |
| To request deletion of data not covered by `/data delete`, contact the server moderation team via modmail (via Discord server or Reddit modmail). |
| - **Application dat**a is used to process membership or role applications | ||
| - **Fun module data** (duck hunt, grabs) is used for community engagement features | ||
|
|
||
| We do not sell, share or transfer your data to any third parties. |
There was a problem hiding this comment.
This is not true, since data is transmitted to third parties (libera.chat) for the relay, as mentioned on line 89.
| The Bot is self-hosted on infrastructure controlled by the r/TechSupport team. Data is stored in a PostgreSQL database accessible only to authorized server operators. | ||
|
|
||
| While most Bot functionality operates entirely within Discord, certain modules are capable of transmitting content to external third-party services: | ||
| - Paste module (currently active): May send message content to an external paste service when the `/paste` command is used |
There was a problem hiding this comment.
There is no /paste command, it is automatic when your message is too long
|
Moved to its own repo |
Created and added the Privacy Policy for the bot with the following sections: