Privacy Policy

Last updated: January 18, 2026 | Effective since: August 10, 2023

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Thrivebot, a Discord bot and its associated website at https://www.thrivebot.in. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the application.

👤 Data Controller

Data Controller: This service is operated by an individual developer (Discord: @ocyeanic).

Contact Information:

• Email: support@thrivebot.in
• Discord Support Server: https://discord.gg/bAtV2X8wba
• DMCA Agent Email: support@thrivebot.in

Note: As an individual operator providing a non-commercial service, we do not maintain a public business address. All communication is handled via email and Discord for privacy and security reasons.

📊 Information We Collect

We may collect information that you provide directly to us or that is automatically generated when using our bot, including:

• Personal Information: Your Discord username, user ID, avatar hash, Server ID, Channel ID, birth date (optional, for birthday features).
• Activity Data: Duration of time spent in voice channels (for "Insights" analytics), message counts, command usage statistics.
• Economy Data: Virtual currency balances, inventory items, transaction logs (including amount, type, and timestamp), and daily streak information.
• Ticket Data: If you use our ticketing system, we may indefinitely store transcripts of ticket conversations (including message content, attachments, and user IDs) to allow server administrators to regenerate transcripts for archival purposes.
• Giveaway Data: When you enter a giveaway, we store your User ID and entry count to ensure fair participation and prevent duplicate entries.

Automatically Collected Information

When you use our website or complete server verification, we may automatically collect:

• Browser Type/Version: For debugging errors and ensuring website compatibility.
• Timestamps: To track when actions occur for security and operational purposes.

Legal Basis: Collection of this technical data is based on our legitimate interest in maintaining service security and preventing abuse (GDPR Article 6(1)(f)).

VPN/Proxy Detection

For security purposes, using VPNs or proxies is not allowed during server verification and authentication processes. When you visit our website, we may analyze your IP address and network information to detect VPN/proxy usage. This information is used only during your visit and is not stored permanently.

Legal Basis: Legitimate interest in preventing abuse, fraud, and ensuring service security (GDPR Article 6(1)(f)).

Server Verification Data

When Discord servers enable our captcha verification feature for new members, we collect and process:

• Discord User ID: For role assignment and verification tracking
• Server ID: To identify the verification context
• Verification Timestamp: Exact time in IST when verification occurred
• Temporary Session Tokens: Unique verification links (automatically deleted after 10 minutes or upon use)

⚖️ Legal Basis for Processing (GDPR Article 6)

We process your personal data under the following legal bases:

• Consent (Article 6(1)(a)): You provide explicit consent when using optional features or accepting cookies
• Contractual Necessity (Article 6(1)(b)): Processing is necessary to provide Thrivebot's functionality (e.g., economy system, leveling)
• Legitimate Interests (Article 6(1)(f)): We have legitimate interests in improving our service, analyzing server activity, preventing abuse, and ensuring security
• Legal Obligation (Article 6(1)(c)): Compliance with applicable laws (DMCA, data protection laws)

🔧 How We Use Your Information

We use the collected information for various purposes, including:

• Providing and maintaining the bot's functionality (economy, leveling, moderation)
• Generating server analytics and insights (e.g., most active users, voice activity)
• Responding to your inquiries and requests
• Improving and optimizing the bot's performance and user experience
• Detecting and preventing abuse, fraud, exploits, and violations
• Processing premium subscriptions via our payment processor
• Analytics to understand website usage (only with consent)

📝 Audit Logging Feature

Our bot offers an optional audit logging feature for server administrators. When enabled, we only store configuration data (Server ID, Webhook ID, Channel ID) to facilitate the connection.

Pass-Through Privacy Guarantee: We do not persistently store the content of audit logs (such as message edits, deletions, member changes, or role updates) in our database. The bot acts as a "pipe," instantly forwarding these events from Discord directly to your designated log channel via a webhook. Once delivered, the data is discarded from our bot's memory.

🤝 Third-Party Service Providers

We share your information with the following third-party processors who act on our behalf:

Essential Service Providers

Payment Processing (Premium Features)

Analytics (Only With Consent)

🌐 International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including the United States. For EU users, we rely on Standard Contractual Clauses (SCCs) and service providers' Data Privacy Framework certifications. Discord, Cloudflare, Google Analytics, and Lemon Squeezy are based in the United States, and data transferred to these services is protected by appropriate safeguards.

🍪 Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. For detailed information, please see our Cookie Policy.

Summary: Essential cookies are always active. Analytics cookies are loaded only after your explicit consent. We do not use marketing or advertising cookies.

⏰ Data Retention Periods

We retain your personal data only as long as necessary. Below are the retention periods for different data types:

🤖 Automated Decision-Making

Thrivebot uses automated processing for certain features. This disclosure is provided in compliance with GDPR Article 22.

• Captcha Verification: Automated system to verify users are human (pass/fail decision)
• Economy Anti-Cheat: Automated detection of exploits or abuse

Your Rights: These automated decisions do not produce legal effects or similarly significantly affect you. If you believe an automated decision has incorrectly affected you, contact us for human review.

📤 Disclosure of Your Information

We may share your information with third parties only in the following circumstances:

• With your consent.
• When required by law or to protect our legal rights.

🔒 Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, theft, or misuse, including:

• Encryption in transit using TLS/SSL
• Access controls limiting data access on a need-to-know basis
• Secure hosting infrastructure
• Regular security reviews and monitoring
• Cloudflare DDoS protection and web application firewall

While we take reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

👶 Children's Privacy

Thrivebot is intended for users aged 13 and older, consistent with Discord's Terms of Service.

We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at support@thrivebot.in, and we will delete such information within 72 hours.

For EU Users: The minimum age is 16 in some EU member states. Users under 16 (or local minimum age) must have parental consent to use our services.

✅ Your Privacy Rights

You have the following rights regarding your personal data:

For EU Users (GDPR):

• Right of Access (Article 15): Request a copy of your personal data
• Right to Rectification (Article 16): Request correction of inaccurate data
• Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Request restriction under certain conditions
• Right to Data Portability (Article 20): Receive your data in a machine-readable format
• Right to Object (Article 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Article 7(3)): Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your national Data Protection Authority

Response Timeframe: We will respond to GDPR rights requests within 30 days. Complex requests may take up to 90 days with notification.

For All Users:

• Right to Know: Request disclosure of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Non-Discrimination: We will not discriminate for exercising your rights

🚨 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms:

• EU Users (GDPR): We will notify the relevant supervisory authority within 72 hours and notify affected users without undue delay
• Other Users: We will notify affected users in accordance with applicable laws

🔄 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last Updated" date at the top will be revised. Material changes will be announced via our Discord support server. Please review this Privacy Policy periodically.

📧 Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at bot support server.

👍 Consent

By using our Thrivebot, you consent to this Privacy Policy and agree to its terms.

📂 Requesting Your Data

To request your data from the database, you may choose one of the following options:

• Direct message the bot owner (Username: @ocyeanic).
• Notify any staff member in the support server.
• Use our Data Request Form to request your data.
• Email the owner with your data request, including your user ID and username. Please note that before any action is taken, a staff member or the bot owner will contact you for safety verification.

🗑️ Deleting Your Data

To delete your data from the database, you may choose one of the following options:

• Direct message the bot owner (Username: @ocyeanic).
• Notify any staff member in the support server.
• Email the developer of Thrivebot with your deletion request, including your user ID, username, and reason for deletion. Please note that before any action is taken, a staff member or the bot owner will contact you for safety verification.

⚠️ Data Retention Exceptions

When you request data deletion, certain data may be retained for legitimate business purposes or legal compliance:

• Your bot warning/ban history (to prevent ban evasion)
• In-bot currency transfer history (to track economy stability)
• Captcha completion status
• Server verification records (to prevent re-verification attacks and for security auditing)
• Giveaway participation records (until giveaway completion)
• Premium transaction records (retained for tax/accounting purposes)