Your data, explained

Astrix ("we," "us," "our") operates the Astrix Discord bot and the astrixbot.com web dashboard. Data is stored in MongoDB Atlas and linked primarily to Discord user IDs and guild IDs.

Account and identity data. Discord user IDs are the primary identifier for members, moderators, and dashboard users. Usernames and display names may appear transiently in bot embeds or logs but are not used as persistent database keys.

Server configuration. When Astrix is added to a Discord server, we store the guild ID and settings configured by administrators: welcome and goodbye messages, leveling (enabled state, XP rate, cooldown), economy (AsterCoins settings), automod rules (banned words, invite/spam/caps/mention filters), ticket categories and staff roles, sentiment alert settings, anti-raid options, AI channel restrictions, and premium tier status including Stripe subscription identifiers.

Community and gameplay data. Per-server records include XP and levels, AsterCoins balances, profile bios, birthdays, moderation cases (type, reason, moderator ID, target user ID, duration where applicable), tickets, polls, giveaways, reminders, custom commands, and roadmap votes (by Discord user ID on astrixbot.com).

Message and content data. Astrix does not maintain a full archive of server chat history. Message content is accessed or processed only when a enabled feature requires it:

• Leveling: eligible messages are evaluated to award XP according to server settings; we store XP totals and cooldown timestamps, not a copy of every message body
• Automod: messages are scanned against configured rules (banned words, spam patterns, caps, mentions, invite links) for real-time enforcement; matched content is not retained as a long-term message log
• Orbit Intelligence: daily activity is aggregated into snapshots (message counts, active member counts, join/leave counts, top channel IDs) and per-member daily totals — not full message transcripts
• Astra AI: when you start an Astra conversation thread, message content within that thread is stored so Astra can maintain context; optional features such as /summarize, sentiment tension checks, and FAQ indexing process only the content needed for each request

Cross-Server Profile data. If and only if you run /crossprofile optin, we store an aggregate profile: trust score, total warnings, total bans, and a count of active servers — not a list of server names or IDs visible to other communities.

Dashboard authentication. When you log into astrixbot.com via Discord OAuth2 (scope identify guilds), we receive your Discord user ID, avatar, and a list of guilds where you have permission to manage the server. OAuth access tokens are handled server-side via NextAuth.js (Auth.js) to verify dashboard access; they are not exposed to browser client code.

Payment data. Paid Pro and Elite plans are processed by Stripe. Astrix stores Stripe customer and subscription identifiers on the guild record (e.g. stripeSubId) to activate premium features — not card numbers, CVV codes, or bank account details.

Additional feature-specific data. Depending on which features your server enables, we may also store:

• Custom Astra AI persona settings (Elite tier only): tone, knowledge context, and behavioral instructions configured by server admins.
• Ask Orbit history: question and answer history, whether asked via Discord or the dashboard.
• Server-wide sentiment classifications: calm, tense, and hostile mood labels stored per-channel and not tied to any individual user's identity.
• AI Server Setup generation history (Elite tier): the full text of what you requested and what was generated, whether or not you approved it.
• Bot identity customization: if a server admin sets a custom nickname or avatar for the bot in their server.
• Webhook event data (Elite tier): if a server admin configures a webhook, relevant event data (bans, level-ups, ticket creation) is sent to the URL they configure. This data leaves Astrix's systems to a third-party endpoint the server owner controls, and Astrix is not responsible for how that owner-configured endpoint handles the data.
• Welcome, Goodbye, and Rank Cards: if enabled, we generate personalized images using your Discord username and avatar.

We use collected data to:

• Provide bot commands and dashboard features enabled by server administrators
• Enforce moderation actions and maintain auditable case history
• Run leveling, economy, tickets, polls, giveaways, and community tools
• Power Astra AI and Orbit Intelligence by sending the minimum relevant content or aggregated statistics to our AI provider (Google Gemini)
• Process subscriptions and premium feature access through Stripe
• Operate the public roadmap, including community feature suggestions and votes
• Improve reliability, prevent abuse, enforce rate limits, and debug errors

AI features send only the content or context required for each specific request. Orbit sends aggregated statistics and digests — not your entire message history — unless you explicitly ask a question that requires deeper context.

We do not use your data for third-party advertising or to build marketing profiles unrelated to operating Astrix.

Cross-Server Profile is opt-in only. The feature is disabled by default (optedIn: false). Users must explicitly run /crossprofile optin to participate. When enabled, other Astrix servers that also use Cross-Server Profile may see aggregate trust scores and moderation totals — never which specific servers you are a member of. You may opt out at any time with /crossprofile optout.

Service providers. We rely on third-party infrastructure to operate Astrix. These providers process data on our behalf under their own terms and privacy policies:

• Discord, Inc. — the platform Astrix runs on; OAuth provider for dashboard login
• MongoDB Atlas — primary database hosting for bot and dashboard data (guild settings, user progression, moderation cases, Orbit snapshots, Astra threads, and related records)
• Google (Gemini) — AI inference for Astra, Orbit natural-language queries, summarization, sentiment analysis, and similar features enabled on your server
• Stripe, Inc. — payment processing for Pro and Elite subscriptions; Astrix never receives raw card data
• Vercel (or equivalent hosting provider) — hosts astrixbot.com and API routes; server-side environment variables hold secrets such as database credentials and OAuth keys
• BetterStack — third-party uptime monitoring service used to verify system availability; does not receive personal user data, only service health check responses

When you use AI features, relevant prompts and context are transmitted to Google's Gemini API for processing. Payment flows redirect to or are handled entirely by Stripe's PCI-compliant infrastructure.

No sale of personal data. We do not sell, rent, or trade your personal information or server data to third parties for their independent marketing purposes.

We may disclose information if required by law, to protect the rights and safety of users, or to respond to valid legal process.

Orbit analytics: Orbit activity data is retained for 7 days on Free tier, 90 days on Pro tier, and indefinitely on Elite tier until you request deletion or downgrade.

Astra conversations: Thread history is deleted automatically when a conversation has been inactive for seven (7) days.

Moderation cases: Case records are retained indefinitely to preserve server moderation continuity and audit trails while Astrix remains in use. Server administrators may request deletion of cases involving specific users through our data-deletion process.

Server configuration and gameplay data: Guild settings, user progression, economy balances, and related records are kept while Astrix remains installed in your server unless deleted through our data-deletion process or when an administrator removes the bot.

Removing Astrix from a server stops new collection but may not immediately erase all historical records. Use /data-deletion to request erasure of data associated with your Discord account.

Closed support tickets are automatically deleted after 30 days. Rejected roadmap suggestions are automatically deleted after 7 days. Shipped roadmap items are archived (hidden from public view but retained) after 30 days.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data we hold about you — including rights under the GDPR, UK GDPR, CCPA/CPRA, and similar laws.

Access. You may contact us to request a summary of personal data Astrix stores about your Discord account.

Correction. Much of your per-server profile data (bio, birthday, etc.) can be updated through Astrix commands. For other corrections, contact us with details.

Deletion. To request deletion of data associated with your Discord account, visit astrixbot.com/data-deletion. You must log in with Discord so we can verify your identity. Submitting a deletion request through /data-deletion creates a pending request. Our team reviews each request and will either approve it (triggering permanent deletion of the selected data categories) or, in rare cases requiring further review (e.g. an active investigation), deny it with an explanation sent to you via Discord DM. You will receive a Discord DM confirming when your data has been deleted.

Server owners who need full guild data removed should remove Astrix from the server and contact us for additional erasure requests.

We will respond to verified requests within a reasonable timeframe as required by applicable law.

Astrix is not directed at children under thirteen (13) years of age, and we do not knowingly collect personal information from children under 13. Discord's Terms of Service require users to meet Discord's minimum age requirements in their region — Astrix inherits that restriction by operating exclusively on Discord.

If you believe a child under 13 has provided personal data through Astrix, contact us at privacy@astrixbot.com and we will take steps to delete that information.

Astrix is operated from the United States and serves Discord communities worldwide. Data is stored in MongoDB Atlas, which may host clusters in regions you select or that we configure for production.

If you access Astrix from the European Economic Area, United Kingdom, or other regions with data-protection laws, you may have additional rights regarding cross-border transfers. Our use of established service providers (MongoDB Atlas, Stripe, Google) is intended to leverage their compliance programs, but you should review their privacy policies for transfer mechanisms such as Standard Contractual Clauses.

By using Astrix, you acknowledge that your information may be processed in the United States and other countries where our service providers operate, which may have different data-protection laws than your country of residence.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be announced on our Discord support server or the status page.

Continued use of Astrix after changes take effect constitutes acceptance of the updated policy, except where applicable law requires otherwise or explicit consent.

Privacy questions, data subject requests, and policy concerns:

• Discord: Astrix support server
• Email: privacy@astrixbot.com
• Data deletion: astrixbot.com/data-deletion
• Security: astrixbot.com/security
• Website: astrixbot.com