Privacy Policy

Last updated: January 12, 2026

This Privacy Policy describes how Firefly ("we", "us", or "our") collects, uses, and shares information when you use our Discord bot and related services (the "Service").

1. Information We Collect

We collect information in the following ways:

Information from Discord:

• Discord User IDs (unique numerical identifiers)
• Discord Server (Guild) IDs
• Discord Usernames (for display purposes only)
• Message content (only when directly interacting with the bot or using AI features)

Information You Provide:

• Server configuration settings
• Custom messages and content you create through the bot
• API keys you provide for BYOK features (stored encrypted)
• Payment information (processed by Stripe, not stored by us)

Automatically Collected Information:

• XP and leveling data
• Economy balances and transactions
• Command usage statistics
• Music playback history (temporary, session-based)

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Track XP, levels, and economy balances
• Store and apply your server configuration
• Process payments for Premium subscriptions
• Respond to support requests
• Improve and optimize the Service
• Detect and prevent abuse or violations of our Terms of Service

3. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. We may share information only in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: With third-party services necessary to operate (e.g., Stripe for payments, hosting providers)
• Legal requirements: When required by law or to protect our rights

4. Data Storage and Security

We take reasonable measures to protect your information:

• API keys are encrypted using AES-256-GCM encryption
• Data is stored on secure servers with restricted access
• Payment information is handled by Stripe and never stored on our servers
• We regularly update and patch our systems

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data as follows:

• Server settings: Until the bot is removed from the server or you request deletion
• User data (XP, economy): Until you request deletion or leave all servers using the bot
• AI conversation history: Cleared after each session (not permanently stored)
• Music playback data: Temporary, cleared after each session
• Payment records: Retained as required by law (typically 7 years)

6. Your Rights (GDPR)

If you are in the European Union, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Request your data in a portable format
• Right to Object: Object to certain processing of your data

To exercise these rights, contact us at [email protected] or join our support server.

7. Data Deletion

You can request deletion of your data by:

• Using the /privacy delete command in Discord
• Contacting us in our support server
• Emailing [email protected]

When you request deletion, we will remove:

• All XP and level data associated with your user ID
• All economy data (balance, transactions)
• Any stored user preferences
• Any AI memory or facts associated with your user ID

Server-wide settings can only be deleted by a server administrator or by removing the bot from the server.

8. Children's Privacy

Our Service is not intended for users under the age of 13 (or the minimum age required in your country to use Discord). We do not knowingly collect information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information.

9. Third-Party Services

Our Service integrates with or uses the following third-party services:

• Discord: Subject to Discord's Privacy Policy
• Stripe: Payment processing, subject to Stripe's Privacy Policy
• Google (Gemini API): For BYOK AI features, subject to Google's Privacy Policy
• Music Sources: Spotify, Apple Music, Deezer, SoundCloud (for music metadata only)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also send a notification through Discord.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Discord Support Server: discord.gg/U9Vn427Tma
• Email: [email protected]