Privacy Policy

1. Information We Collect

1.1 Data Collected Automatically via Discord

When you add ClickBot to your Discord server, we automatically collect and store:

• Server (Guild) ID — to identify your Discord server and associate settings
• Channel IDs and names — to configure alert routing and notification delivery
• Role IDs and names — to manage protected roles, auto-assign join roles, and alert role configuration
• Server member information — including user IDs, usernames, avatars, join dates, and assigned roles, used for the protection scanner and moderation features

1.2 Data Collected via Discord OAuth

When you log in to the ClickBot web dashboard, we use Discord OAuth2 to authenticate you. Through this process, we receive:

• Your Discord User ID, username, and avatar
• A list of servers you manage or have access to — so you can select which servers to configure
• An OAuth access token — stored temporarily in your session to make Discord API calls on your behalf; this token is not persisted to our database

1.3 Data You Provide

When you configure ClickBot through the dashboard, you provide:

• Bot configuration settings — alert roles, alert routes, protected roles, protected strings, log channel selections
• User lists — banned user IDs, whitelisted user IDs
• Feature settings — join role assignments, gains tracking configuration, economic calendar notification preferences

1.4 Payment Information

Premium subscriptions are processed through LemonSqueezy, our third-party payment processor. We do not collect or store your credit card numbers, billing addresses, or other direct payment details. We receive and store:

• Subscription status (trial, active, expired)
• Payment plan type (monthly or yearly)
• Subscription ID (from LemonSqueezy)
• Trial and billing dates
• Payment event records (success, failure, cancellation)

2. How We Use Your Information

We use the information we collect to:

• Provide the ClickBot service — delivering alerts, managing roles, running protection features, and sending economic calendar notifications
• Authenticate you — verifying your identity and server permissions through Discord OAuth
• Manage subscriptions — processing trials, activations, renewals, and cancellations
• Improve the service — understanding usage patterns to fix bugs and enhance features
• Prevent abuse — detecting and blocking misuse of the bot or dashboard

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Supabase, a cloud database provider. We implement the following security measures:

• All data is transmitted over encrypted connections (HTTPS/TLS)
• Database access is restricted with role-based access controls
• Discord bot tokens and API keys are stored as server-side environment variables, never exposed to the client
• OAuth tokens are stored only in temporary server-side sessions
• Webhook payloads from LemonSqueezy are verified with HMAC signatures before processing

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

ClickBot relies on the following third-party services, each with their own privacy policies:

• Discord (Privacy Policy) — for bot functionality, OAuth authentication, and API access
• Supabase (Privacy Policy) — for database hosting and user authentication
• LemonSqueezy (Privacy Policy) — for payment processing and subscription management

5. Data Retention

We retain your data as follows:

• Server configuration data — retained for as long as ClickBot is in your server, or until you request deletion
• Subscription and payment records — retained for accounting and legal purposes for up to 3 years after the subscription ends
• OAuth session data — expires automatically after your session ends (30 minutes of inactivity)
• Cached Discord data (channels, roles, members) — not persisted beyond the active session

When you remove ClickBot from your server, your server configuration data will be retained for 30 days in case you re-add the bot, after which it is permanently deleted.

6. Your Rights

You have the right to:

• Access your data — request a copy of the data we hold about you or your server
• Correct your data — update or correct inaccurate information through the dashboard
• Delete your data — request deletion of your server's data by removing ClickBot from your server and contacting us, or by using the dashboard to clear individual settings
• Revoke access — disconnect ClickBot from your Discord account by revoking the OAuth authorization in your Discord settings under Authorized Apps

To submit a data access or deletion request, please contact us via the methods listed in Section 10 below.

7. Children's Privacy

ClickBot is not intended for use by individuals under the age of 13 (or the minimum age required by Discord's Terms of Service in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

8. Discord Permissions

ClickBot requests the following Discord permissions to function:

• Administrator — required for role protection, member scanning, alert delivery, and auto-role assignment
• Bot scope — to operate as a bot within your server
• Application commands — to register and respond to slash commands

OAuth2 scopes used for dashboard login: identify and guilds. These allow us to identify you and list your servers — we do not request permission to join servers, send messages, or modify your Discord account on your behalf through OAuth.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of ClickBot after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, you can reach us at:

• Twitter/X: @GetClickBot
• Discord: Join our support server for direct assistance