📋 Introduction
Welcome to Novrix's Privacy Policy. Novrix ("we," "us," or "our") operates a Discord bot and accompanying web dashboard (the "Service"). We are committed to protecting your personal information and being transparent about how we handle data.
By using Novrix, you agree to the collection and use of information in accordance with this policy. This policy applies to all users of our bot, dashboard, website, and related services. If you do not agree with any part of this policy, please discontinue use of the Service.
🗂️ Information We Collect
We are committed to collecting only the information reasonably necessary to provide, secure, and improve the Service. This includes:
- Discord Account Information: Your Discord user ID, username, discriminator, and avatar hash — provided through Discord's OAuth2 flow when you log in.
- Server (Guild) Data: Server IDs, server names, member counts, channel IDs, role IDs, and configuration settings for servers where Novrix is installed.
- Moderation Records: Warnings, timeouts, kicks, bans, and notes created through the bot's moderation features, associated with Discord user IDs.
- Usage Data: Command invocations, feature interactions, and dashboard activity — used to improve the Service and detect abuse.
- Economy & Leveling Data: Experience points, levels, virtual currency balances, and transaction histories for servers that have enabled these features.
- Configuration Settings: All per-server settings configured through the dashboard, stored to provide consistent behavior.
- Support Correspondence: Messages and attachments you send to our support team, retained for issue resolution.
We do not store the full content of messages sent in your server unless a specific feature you have enabled requires it (such as message logging), and even then, data is only stored in your designated log channel or encrypted in our database.
🔑 OAuth Permissions
When you sign in using Discord OAuth2, we receive only the information Discord authorizes based on the permissions we request — specifically your Discord ID, username, avatar, and the list of Discord servers you belong to (including which ones you have permission to manage, so we can show you the right dashboard access). We never receive or store your Discord password — authentication is handled entirely by Discord.
You can revoke Novrix's access to your Discord account at any time from your Discord Authorized Apps settings.
🤖 AI Features
Some Novrix features use artificial intelligence to assist with moderation and content safety — for example, detecting scam images and inappropriate content. Where necessary to deliver a feature, content may be processed using trusted third-party AI providers rather than solely in-house systems.
We do not use your data to train public AI models, and we do not share message content with AI providers beyond what's required to evaluate the specific content you've asked Novrix to process (e.g., an image posted in a channel where AI moderation is enabled).
📈 Analytics
Novrix may collect anonymous, aggregated usage statistics to help us understand how the Service is used and where to improve it, including:
- Commands executed and feature usage patterns
- Error reports and performance metrics
- Dashboard interactions (e.g., which pages are viewed)
These statistics are aggregated across many users and servers and are not used to identify or profile any individual user.
⚙️ How We Use Your Data
We use collected information solely to deliver and improve the Service:
- Providing core bot functionality including moderation, automation, leveling, and economy features.
- Authenticating users via Discord OAuth2 to grant access to the dashboard.
- Storing and retrieving per-server configurations so settings persist across sessions.
- Generating analytics and insights visible only to authorized server administrators.
- Detecting abuse, spam, and policy violations to maintain service integrity.
- Sending critical service notifications (e.g., maintenance windows, security alerts).
- Improving the Service through aggregated, anonymized usage analysis.
We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
🔒 Data Security
We implement industry-standard security measures to protect your data:
- Encryption at rest: All sensitive data stored in our databases is encrypted.
- Encryption in transit: All communications between your browser, our servers, and Discord's API use TLS.
- Access controls: Database access is restricted to authorized systems and personnel only.
- Session security: Dashboard sessions use secure, HTTP-only cookies with short expiration periods.
- CSRF protection: All state-changing requests require valid CSRF tokens.
- Regular audits: We review our security practices and dependencies regularly.
- Security monitoring: We continuously monitor our infrastructure for abuse, unauthorized access attempts, suspicious activity, and service health.
While we strive to protect your data, no system is completely immune to unauthorized access. See Security Incidents below for what happens in the event of a breach.
🚨 Security Incidents
If we become aware of unauthorized access to personal data that is likely to pose a risk to affected users, we will notify affected users and applicable authorities where required by law, without undue delay. Notifications will describe the nature of the incident, the data involved, and steps we're taking in response.
📜 Operational Logs
Separate from the moderation logs described above, Novrix temporarily stores operational data to maintain reliability and diagnose problems — including server logs, application logs, API errors, and security events (such as blocked malicious requests). These logs are used for troubleshooting and abuse prevention and are retained only as long as needed for those purposes.
🔗 Data Sharing & Third-Party Services
We do not sell or trade your personal information. Novrix relies on trusted providers to operate the Service, including:
- Discord — authentication and the platform Novrix operates on.
- Cloudflare — content delivery, DDoS protection, and network security.
- Database hosting providers — for storing server configuration and moderation data.
- Payment processors — for handling Premium/Enterprise subscription billing. We do not store your full payment card details.
- AI providers — where applicable, for features like scam and content-safety detection (see AI Features above).
Each provider is contractually required to protect your information and may only use it to provide the service we've engaged them for. We may also share data in these circumstances:
- Legal Compliance: When required to comply with applicable law, regulation, or valid legal process (such as a court order or subpoena).
- Safety: To investigate fraud, protect against security threats, or enforce our Terms of Service.
- Business Transfer: In the event of a merger, acquisition, or sale of assets, data may be transferred to the acquiring entity subject to the same privacy protections.
- Consent: With your explicit consent for any other purpose not listed here.
🍪 Cookies & Local Storage
We use cookies and browser local storage for essential functionality:
- Session Cookies: Maintain your logged-in state on the dashboard. These expire when your session ends or within 7 days.
- CSRF Tokens: Short-lived tokens stored as secure cookies to protect against cross-site request forgery.
- Theme & Language Preferences: Stored in
localStorage to remember your UI preferences (dark/light mode, language). No server-side tracking.
We do not use third-party advertising cookies or tracking pixels. Essential cookies cannot be disabled as they are required for the Service to function.
👶 Children's Privacy
The Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. Discord's own Terms of Service also require users to be at least 13 years old.
If you believe we have inadvertently collected data from a minor, please contact us immediately at novrixofficial@outlook.com and we will take prompt steps to delete such information.
🌍 Data Retention & International Transfers
We retain your data for as long as your account is active or as needed to provide the Service. Specifically:
- Server configuration data is retained while Novrix remains in your server and for 30 days after removal, to allow re-invitation without data loss.
- Moderation logs are retained per your dashboard settings, with a platform maximum of 12 months unless you configure a shorter period.
- Account data is retained until you request deletion or close your account.
Our servers are located in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. We implement appropriate safeguards for such transfers in accordance with applicable data protection law. Residents of certain jurisdictions, including the European Economic Area, United Kingdom, and California, may have additional rights under applicable privacy laws (see Your Rights below).
Novrix is a fully managed cloud service. We do not support self-hosted deployments, and all data described in this policy is processed within Novrix-managed infrastructure and the third-party providers listed above — never on infrastructure you host yourself.
✅ Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and associated data at any time. Deletion requests are generally completed within 30 days unless legal obligations require longer retention. Note that removing Novrix from a server does not immediately delete all associated data — certain records may be retained temporarily to allow recovery or comply with legal obligations, per the retention periods described above.
- Portability: Request an export of your data in a machine-readable format.
- Objection: Object to certain processing of your data.
- Restriction: Request that we restrict processing of your data while a dispute is being resolved.
To exercise any of these rights, please contact us at novrixofficial@outlook.com. We will respond to all valid requests within 30 days. Some requests may be subject to limitations based on legal obligations or legitimate interests.
📝 Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via our Discord support server and with a notice on the dashboard. The "last updated" date at the top of this page will always reflect the most recent revision.
Continued use of the Service after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
📧 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We are committed to resolving privacy concerns promptly and fairly.
