Privacy Policy
Last updated: November 5, 2026
This policy explains what information Possum Bot and the Possum dashboard collect, why, and how you can have it removed. Each Discord server's settings and data are kept separate and are not shown to other servers.
1. What we collect
- Discord identifiers: user IDs, usernames, server (guild) IDs and names, channel and role IDs.
- Server configuration: the settings, templates, automations and feature choices owners set in the dashboard.
- Activity data for enabled features: things like XP and levels, economy and game progress, moderation and security events, audit logs, voice activity durations, tickets and verification state.
- Message content: the bot reads messages in channels it can see in order to run commands, automations, moderation and AI features. Message text is not kept long term unless a feature needs it, such as AI memory, logs or tickets.
- Dashboard login: when you sign in with Discord we receive your Discord ID, name and the list of servers you manage.
- Billing: Stripe customer and subscription identifiers and plan status. We do not see or store full card numbers.
- Custom bot tokens: if you provide one, it is stored encrypted and used only to run that server's bot.
2. How we use it
To run the features your server turns on, secure and moderate communities, show you your dashboard, process payments, prevent abuse, fix problems and improve the service. We do not sell personal data and we do not use it for advertising.
3. Who we share it with
Only service providers needed to operate the bot:
- Discord, which the bot runs on.
- Stripe, for payments.
- Our hosting and database providers.
- Third-party AI providers, when an AI feature is used. The text of the message being answered, along with limited context, may be sent to generate a reply.
4. Separation between servers
Settings, secrets and data are stored per server and are only available to that server's authorised administrators through the dashboard. A server's custom bot token is never used for any other server.
5. How long we keep it
Data is kept while the bot is in your server. If the bot is removed or kicked, the server's stored data and settings are deleted after a short grace period (7 days by default) so a mistaken removal can be undone. Billing records may be kept longer where needed for accounting and legal reasons. Logs and activity history are trimmed over time according to each plan's retention limits.
6. Security
Secrets such as bot tokens are encrypted at rest, the dashboard uses signed sessions, and access is limited to the people who run the service. No system is perfectly secure, so please protect your Discord account with 2FA.
7. Your choices and rights
Server owners can change or disable features and remove stored tokens in the dashboard, or remove the bot to start deletion of the server's data. Any user can ask to see or delete the personal data we hold about them, and you may have additional rights under laws such as the GDPR or CCPA. To make a request, contact us through the Possum Support server on Discord. We may need to verify your Discord identity first.
8. Children
Possum Bot is intended for people who meet Discord's minimum age requirement. We do not knowingly collect data from anyone younger. If you believe we have, contact us and we will remove it.
9. Changes and contact
We may update this policy; the date at the top shows the latest version. For questions or requests, contact us through the Possum Support server on Discord, linked from possumbot.com.