Privacy Policy

Version 2026-11-02 · Last updated November 2, 2026

This policy explains what Elliott Beaty (d/b/a UberBot) (“UberBot”, “we”) collects when you use UberBot, why, who we share it with, and your choices. Short version: we use only what we need to do what you ask, we don’t sell personal information, and we don’t use your data to train AI models.

1. What we collect

Discord account basics when you sign in with Discord: your user ID, username and display name, and the list of servers you’re in, which we use to show servers you can manage. The Discord sign-in token is used once and revoked immediately; we don’t keep it.
Server data UberBot reads to do its job: server, channel and role names and settings, member lists and roles, and permissions. This is fetched from Discord when needed, mostly not stored, and short-term cached (minutes).
Message content, only when a feature needs it:
- requests you send to UberBot (mentions, /ask, /setup, help-desk questions), and UberBot’s replies;
- messages a tool reads at your request (for example “summarize #general”);
- if a server enables AI moderation, new messages from non-moderators in that server, so they can be checked against the server’s rules;
- if a server enables the AI help desk, questions posted in its help channels.
Records of actions: what UberBot changed, who asked, when, and how to undo it; audit and security logs; and AI usage counts.
Connections to AI apps (Claude, ChatGPT, …): which app, which servers you granted, and tokens (stored only as one-way hashes).
Billing: handled by Stripe. We receive your Stripe customer ID, plan and payment status, but never your full card number. We also record which version of these policies you accepted, when, and from which IP address.
Website: standard server logs (IP address, browser, pages) for security and reliability. We use only essential cookies (a signed sign-in session and short-lived security cookies), with no advertising or analytics trackers.

2. How we use it

To provide the Service (carry out requests, enforce Discord permissions, show previews and undo, run automations, moderation and the help desk), to bill and prevent abuse, to keep the Service secure and reliable, to provide support, and to meet legal obligations. Our legal bases (where GDPR applies) are performing our contract with you, our legitimate interests in running a secure service, and legal obligations. Server owners who enable moderation or the help desk decide that their members’ messages are processed for those purposes.

3. Who we share it with

We share data only with service providers that process it for us under contract:

Anthropic, which runs the AI models. It receives the content needed for each AI request. Under Anthropic’s commercial terms, API data isn’t used to train its models.
Amazon Web Services, for hosting and our database in the United States.
Stripe, for payments.
Discord, because everything UberBot does happens through Discord’s API.

When you connect a third-party AI app such as Claude or ChatGPT, that app receives the results of the requests it makes, under its own privacy policy. We may also disclose information if the law requires it, or to protect people or the Service. We don’t sell or rent personal information, and we don’t share it for cross-context behavioral advertising.

4. How long we keep it

Chat and help-desk conversations: deleted 90 days after the last message.
Undo history: 90 days.
Action and security logs: 1 year.
Moderation decisions: not stored by us beyond the report posted in your server.
Billing records: as long as tax and accounting law requires.
Connections: until you revoke them, or 30 days after their last use.

When UberBot is removed from a server, that server’s settings are kept for 30 days in case it’s re-added, then deleted on request.

5. Your choices and rights

You can revoke AI-app connections at /connections, remove UberBot from a server at any time, and server owners can switch AI moderation and the help desk off in the admin portal. Depending on where you live (for example under GDPR or California law), you may have the right to access, correct, delete or export your personal information, or to object to processing. To make a request, ask in our support Discord server, or write to us through uberbot.gg. We’ll respond within 30 days. You can also complain to your local data protection authority.

6. Children

UberBot isn’t directed to children under 13, and Discord doesn’t allow them. If you believe a child under 13 has given us personal information, contact us and we’ll delete it.

7. Security

We use encryption in transit, encrypted secrets, hashed tokens, least-privilege access checks on every request, and logging. No system is perfectly secure. If a breach affects you, we’ll notify you as the law requires.

8. International transfers

We process data in the United States. Where required, we rely on appropriate safeguards, such as our providers’ standard contractual clauses.

9. Changes

We’ll post updates here with a new date, and notify paying customers of material changes.

10. Contact

Elliott Beaty (d/b/a UberBot) — ask in our support Discord server, or write to us through uberbot.gg.