Privacy Policy

This Privacy Policy explains how JenBot processes information in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). We believe in transparency and giving you absolute power over your digital footprint.

1. Data Controller

JenBot is operated by its developer, aviatorlaw (the “Data Controller”).
For privacy-related inquiries, you may contact: dev@jenbot.xyz

Infrastructure Provider: JenBot is hosted using the infrastructure provided by fps.ms. Consequently, any data processed by JenBot is physically located on servers managed by fps.ms. While fps.ms provides the hosting environment, they act as a Data Processor and do not access or scan specific user data stored within JenBot’s internal database unless required for platform security or by law.

2. Personal Data Processed

To provide features like the server economy, suggestion boards, and perk management, JenBot persistently stores limited data in an internal database.

2.1. Categories of Personal Information Processed

Under GDPR and CCPA definitions, this data includes:

• Identifiers: Discord User IDs, Discord Server (Guild) IDs, Role IDs, and Channel IDs.
• Web Dashboard Authentication: When you log into our web dashboard, we temporarily process your Discord profile (username, avatar) and your list of mutual servers via Discord's secure OAuth2 API to verify your administrator permissions. We use secure HTTP-only cookies to manage your session.
• User-Generated Content: Message content explicitly submitted to JenBot via modals or commands (such as Suggestion Board titles and details, or custom Mayarama words).
• System Progression Data: Virtual economy balances (Mayacoins), minigame win/loss counts, historical role claim logs, temporary VIP perk configurations, and XP Blacklist histories.

JenBot does NOT:

• Store general chat histories or monitor channels outside of directly executed application commands or designated Mayarama game channels.
• Log or store connecting IP addresses.
• Employ tracking scripts or external web behavior analytics on the dashboard.
• Sell, trade, rent, or lease platform data to third-party entities.
• Engage in profiling or automated decision-making pipelines that generate significant legal consequences for individuals.

3. Legal Basis for Processing

Under Article 6(1)(f) GDPR, all processing of personal identifiers, configuration records, and user-initiated system actions is executed based on Legitimate Interest. This encompasses the interest of server administrators in running customized engagement systems, tracking user progression milestones, fixing broken server configurations, displaying requested server feedback, and preserving moderation systems chosen for their digital spaces.

4. Purpose of Processing

Data processing tasks are deployed strictly to:

• Preserve persistent virtual ledger totals tied to local server activities (Mayarama economy, chains, and shops).
• Maintain, format, update, and close thread-based community suggestion panels based on active community upvotes, downvotes, and staff verdicts.
• Automate temporary role structures (Perk Management) and log timed leveling restriction penalties (XP Blacklist).
• Provide a secure, authenticated web dashboard experience to server administrators.

5. Data Sharing and Sale of Personal Information

JenBot maintains a strict data minimization model and does not sell or distribute processed details. Data resides on computing hardware assigned by fps.ms. All platform commands and OAuth2 web logins route through Discord's unified API; Discord Inc. operates as an independent data controller under its own distinct security policies.

6. International Data Transfers

JenBot does not orchestrate global data movements independently. Cross-border transmissions are handled entirely by Discord's primary framework beneath their corresponding global legal safeguards.

7. Data Retention

Data lifecycles are constrained strictly to active structural requirements:

• Economy & Perks: User records, claim logs, and virtual token balances are preserved securely to maintain continuous system functionality unless an explicit deletion request is registered.
• Suggestions: Submitted content strings are retained within the data layer to preserve active board entries. If you use our privacy tool, the data isn't deleted but anonymized to prevent breaking forum threads.
• Security Exceptions (Moderation/Active Buffers): Active XP Blacklist entries and ongoing/pending Perk Management timers (grace periods) are held strictly until their designated countdowns expire. They cannot be deleted early to prevent malicious moderation or system bypasses.

8. Security Measures

JenBot uses rigorous organizational standards to safeguard records. Datastores are isolated locally on protected filesystems with restricted, non-public access controls. No internet-exposed connection endpoints to the raw database architecture are permitted. All dashboard interactions are routed over HTTPS and secured via CSRF validation.

9. Your Rights & The Data Erasure Interface (/privacy)

Jen empowers you to exercise your "right to be forgotten" autonomously. We have built a dedicated interface to manage your footprints across our network. Simply send JenBot a Direct Message containing the /privacy command to launch the Data Erasure Interface.

Using this tool, you can request:

• Granular Scoping: Choose a Global Network Wipe (erase your presence across all connected Jen servers) or a Server-Specific Purge (wipe your data from just one specific community).
• Economy Wipes: Delete your Mayarama wallet balances, total wins, losses, and active link history.
• Suggestion Anonymization: Your submitted suggestion boards will remain intact for community flow, but your User ID will be wiped and your username replaced with "Anonymized User." All your associated votes will be dropped.
• Perk Logs: Delete your historical 30-day claim logs.

Note: Because database deletions are permanent, all requests are securely queued and manually verified by the Data Controller to ensure they are not being used to evade active XP blacklists or exploit temporary perk timers.

If you have further questions regarding your rights under GDPR (such as the right to access, rectify, or restrict data), you may contact the Data Controller directly via Discord (aviatorlaw) or email dev@jenbot.xyz. Complaints can be escalated to the Irish Data Protection Commission or your respective national supervisory authority.

10. California Privacy Rights (CCPA/CPRA)

California residents maintain explicit rights regarding data transparency and deletion requests. JenBot does not sell data, share details for behavioral advertising, or collect sensitive biometric information. California residents may utilize the /privacy command detailed above, or submit manual requests by contacting: dev@jenbot.xyz

11. Children’s Privacy

JenBot does not knowingly harvest data from individuals below 13 years of age or the relevant threshold of digital consent within their domestic territory. If the Data Controller discovers that records from an underage user have been inadvertently entered into the database, those records will be immediately and permanently destroyed.

12. Changes to This Policy

This privacy declaration may see revisions to mirror database adaptations. For substantial changes impacting user rights, prominent warnings will be published inside JenBot's support networks prior to deployment.