Legal
Privacy Policy
Last updated: May 20, 2025
1. Introduction
This Privacy Policy explains what data heal collects, how it is used, and your rights regarding that data. By using heal, you consent to the data practices described here.
2. Data we collect
heal stores the minimum data necessary to provide its features. This includes:
Server configuration
When you configure heal's features, we store:
- Server (guild) IDs, channel IDs, and role IDs tied to your configuration
- Content filter settings (enabled modules, custom blocked words, spam thresholds)
- Anti-raid and anti-nuke settings (thresholds, punishments, whitelisted users)
- Welcome/leave message settings (channel, message template)
- Logging settings (channel, enabled event types)
- Ticket system settings (panel channel, staff role)
- Autorole settings (roles to assign on join)
- XP/leveling settings (enabled state, level role mappings)
- Bump reminder settings (enabled state, reminder role)
- Staff tracking settings (tracked roles)
- Custom prefix
User data
- XP data — User IDs and XP/level values, stored per server
- Timezone — If you set a timezone, your user ID and timezone string are stored
- Warnings — User IDs, moderator IDs, reasons, and timestamps for issued warnings
- Staff activity — User IDs and activity metrics for tracked staff roles
- Giveaway entries — User IDs of participants in active giveaways
- Anti-raid scores — Temporary user IDs and join metadata for raid detection
Message statistics
heal tracks aggregate message counts per server (today, weekly, monthly, all-time) for the >stats command. Individual message content is not stored for this feature.
3. Data we do not collect
- We do not store message content (messages are processed in memory for filtering and discarded)
- We do not store voice data or direct messages
- We do not collect email addresses, IP addresses, or payment information
- We do not use cookies or web tracking on users within Discord
4. How we use data
All stored data is used exclusively to provide heal's features:
- Server configuration data is used to apply your settings (filters, logging, welcomes, etc.)
- User data is used to provide per-user features (XP levels, timezones, warnings)
- No data is used for advertising, profiling, or analytics beyond basic operational metrics
5. Data storage and security
Data is stored in a PostgreSQL database on infrastructure we control. Access to the database is restricted to the bot's runtime process. We take reasonable measures to protect stored data, but no system is 100% secure.
6. Data sharing
We do not sell, rent, or share your data with third parties. heal communicates only with Discord's API to provide its functionality. No other external services receive your data.
7. Data retention and deletion
- Server data — When heal is removed from a server, all configuration data for that server is deleted automatically.
- User data — XP data, warnings, and staff tracking data are tied to the server and are deleted when the server's data is removed. Timezone data (stored globally by user ID) can be deleted by running
>tz remove. - Manual deletion — You may request deletion of your data at any time by contacting us in the Support server.
8. Children's privacy
heal is not intended for use by anyone under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided data through heal, please contact us so we can delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. Changes take effect when posted on this page. We recommend reviewing this page periodically. Continued use of heal after changes constitutes acceptance.
10. Contact
If you have questions about this policy or want to request data deletion, please reach out in our Support server.