Privacy Policy

Last Updated: 28 August 2026
Effective Date: 28 August 2026

This Privacy Policy explains how AniFan ("Bot Owner", "we", "us") collects, uses, stores, shares, and deletes information when you use the AniFan Bot Discord application (the "Bot").

This Policy is incorporated into our Terms of Service. By using the Bot, you acknowledge the practices described here. If you do not agree, discontinue use of the Bot and remove it from any server you control.

The Bot is an independent third-party application and is not affiliated with, endorsed by, or sponsored by Discord Inc. Discord's own handling of your data is governed by the Discord Privacy Policy, which is separate from this Policy.

1. Who Is Responsible for Your Data

The data controller (or "data fiduciary", depending on your jurisdiction) for information processed by the Bot is:

AniFan
support@anifan.az

2. What We Collect

We collect only what is necessary to provide the Bot's stated functionality. Depending on which features you and your server use, this may include:

Category	Examples	Why we need it
Discord identifiers	User ID, server (guild) ID, channel ID, role ID	To associate settings, permissions, and records with the right user and server
Command usage	Which commands were run, when, with what parameters, and the response	To execute commands, apply cooldowns and rate limits, and diagnose errors
Server configuration	Prefixes, enabled modules, channel assignments, permission settings	To store how each server has configured the Bot
Feature-specific data	Records created by features your server enables (for example settings, logs, or other feature state)	To operate those specific features
Message content	Text you send to the Bot through commands, or messages the Bot must read to function	Only where a feature requires it, such as executing a command you sent to the Bot
Technical logs	Error traces, timestamps, latency, API responses	Security, abuse prevention, and debugging

Message content intent. The Bot processes message content only when that content is required for a feature you or your server administrators have chosen to use (for example, a command you send to the Bot). We do not use ordinary channel messages unless a feature requires it. We do not use message content obtained through Discord's APIs to train machine learning or AI models.

What we do not collect. We do not collect passwords, Discord authentication tokens, payment card details, government identification numbers, health information, or other special categories of personal data. Never send these to the Bot. We do not knowingly collect data from anyone below the minimum age set out in Section 9.

3. How We Use Your Data

We use data solely to provide the Bot's stated functionality, including to:

Execute commands and deliver the features you request;
Store your and your server's settings between sessions;
Enforce rate limits, cooldowns, and anti-abuse measures;
Diagnose errors, maintain security, and investigate misuse;
Respond to your support requests and reports;
Comply with legal obligations.

We may use data to improve the Bot only where it has been aggregated or de-identified so that it cannot be linked back to any individual.

We do not:

Sell, rent, license, or otherwise commercialize your data;
Share it with data brokers, advertising networks, or monetization services;
Use message content obtained through Discord's APIs to train machine learning or AI models, including large language models;
Use your data to build profiles of you, your identity, or your relationships with other users;
Use your data for eligibility decisions such as employment, housing, insurance, or benefits;
Attempt to re-identify or de-anonymize data;
Target you with advertising, or contact you outside Discord using data obtained through the Bot, without your explicit permission.

4. Legal Bases for Processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

Contract (Art. 6(1)(b)) — processing necessary to provide the Bot you have chosen to use;
Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, error diagnosis, and maintaining service integrity, balanced against your rights;
Consent (Art. 6(1)(a)) — for any optional feature that asks you to opt in. You may withdraw consent at any time;
Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required by law.

5. Who We Share Data With

We share data only in these circumstances:

Service providers acting on our behalf and under equivalent contractual obligations — currently hosting, database, and infrastructure providers. They may access data only to provide services to us and for no other purpose;
Where required by law, regulation, court order, or lawful request from a public authority;
Where you expressly direct us to share it with a third party;
To Discord Inc., only as inherent to operating through Discord's APIs.

If we stop using a service provider, we require them to cease access and delete any data they hold.

6. Data Retention and Deletion

We retain data only as long as necessary for the purpose it was collected. Our retention periods are:

Data	Retained for
Server configuration	Until the Bot is removed from the server, or 90 days of inactivity
Feature data	Until the Bot is removed from the server, or until deletion is requested
Command usage logs	30 days
Error and security logs	30 days
Message content	Only as long as needed to complete the command or feature; not retained afterwards unless a feature you enabled requires it

We delete data promptly when any of the following occurs:

It is no longer necessary for the Bot's functionality;
You request deletion;
The Bot is removed from your server (that server's associated data is deleted);
We stop operating the Bot, or our access to Discord's APIs ends;
Discord requests deletion;
Deletion is required by applicable law.

Backups are rotated on a 30-day cycle; data deleted from live systems is purged from backups within that window. We may retain the minimum necessary where the law requires longer retention.

7. Your Rights and How to Exercise Them

You can request the following at any time:

Access — a copy of the data we hold about you;
Correction — rectification of inaccurate data;
Deletion — erasure of your data;
Restriction or objection — to certain processing;
Portability — your data in a machine-readable format;
Withdraw consent — where processing is based on consent.

How: contact us at support@anifan.az or https://discord.gg/anifanaz.

We respond within 30 days, or sooner where required by law. We do not charge for these requests and will not discriminate against you for making one. If you are in the EEA or UK you may also lodge a complaint with your local supervisory authority; if you are in India you may complain to the Data Protection Board of India.

Depending on where you live, you may have rights under the GDPR, UK GDPR, CCPA/CPRA and other US state privacy laws, Brazil's LGPD, Canada's PIPEDA, or India's Digital Personal Data Protection Act, 2023.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve months.

8. Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your data, including:

Encryption of stored data at rest and encryption in transit;
Access restricted to those who need it to operate the Bot;
Secret management and least-privilege access to systems that store Bot data.

No system is perfectly secure. If a breach affects your personal data, we will notify affected users and the relevant authorities within the timeframes required by applicable law, and will notify Discord as required under its Developer Terms.

9. Children's Privacy

The Bot is not directed to, and may not be used by, anyone under 13 or under the minimum age required to use Discord in their country, whichever is higher. We do not knowingly collect data from such users. If you believe we hold data belonging to someone below that age, contact us at support@anifan.az and we will delete it.

10. International Data Transfers

The Bot is operated from Azerbaijan and data may be stored or processed in the regions of our hosting and infrastructure providers, which may include the European Union and the United States. Where data is transferred out of the EEA, UK, or another region with transfer restrictions, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or adequacy decisions to safeguard it. You may request a copy of the relevant safeguards at support@anifan.az.

11. Automated Decision-Making

The Bot does not make automated decisions producing legal or similarly significant effects about you.

12. Changes to This Policy

We may update this Policy. Material changes will be announced through our Discord server and this page, and reflected in the "Last Updated" date above, with reasonable notice before they take effect unless the change is urgent or legally required. Continued use of the Bot after changes take effect constitutes acknowledgement of the updated Policy.

13. Contact

Questions, requests, or complaints about this Policy:

Email: support@anifan.az
Support server: https://discord.gg/anifanaz