AiGuild
← Back to home

GDPR

Privacy Policy

Last updated: 2 November 2026

01Data controller

The data controller is Sacha, publisher of the AiGuild Service. Contact: via the official Discord server discord.gg/69EQkxUKE9.

02Data collected

We collect what the Service needs to work:

  • Account — Discord ID, username, avatar, chosen language.
  • Servers — IDs of the servers the bot is on, their structure (channels, categories, roles, permissions) and their settings.
  • Billing — plan, credit and transaction history, Stripe customer ID. No card details ever pass through our servers.
  • Requests sent to the AI — the text you write to generate a server, an announcement or a configuration is kept in shortened form, to track costs and diagnose failures.
  • Activity — message and voice-time counters (numbers, never content), which invite was used and who invited whom, XP and levels.
  • Counts for the audit — on every server where the bot is present: the number of messages per channel and per hour, members joining and leaving, and for a new member the date of their first message and of accepting the rules. Only numbers and dates: the bot neither reads nor keeps the text of messages. Deleted after 90 days.
  • Referrals — if you use a referral link: the account that added the bot and the server (provided by Discord), a technical fingerprint of your browser (random identifier, cookie ag_nav) and your IP address truncated then hashed (never the address itself), and, on the referred server only, the ID of members who write there and the day (never the text). This data is used only to fight referral cheating and is kept 30 days at most.
  • Published content — templates, directory profiles, reviews, custom commands and profile text you choose to make public.
  • Custom bot — for the Premium customers concerned, the token of their Discord application, encrypted at rest, with a key kept outside the database.
  • Technical — error and security logs, needed to keep the Service stable.

Reading messages: only the features below, which an administrator controls.

The bot reads message content (Discord's “Message Content” permission) only for the features below, on the servers where they are turned on. XP is counted without reading messages.

  • Tickets with the AI assistant — when tickets open as a conversation (the default for servers that set up their tickets after this feature goes live; an administrator can switch back to a form at any time, and servers already set up keep their setting), the AI reads the messages written in the ticket to answer the member, who is told so when the ticket opens. These messages are deleted from our servers when the ticket closes, and after 7 days at most. A summary of each ticket can be produced for the team (Premium).
  • Right hand — an anonymous weekly report on public channels, turned on by a Premium administrator. An announcement informs members, with a button to exclude their messages. Private channels, tickets and NSFW channels are never read; authors are replaced by a hash; messages are deleted as soon as they are summarised, after 7 days at most.
  • Ticket transcript — when a ticket is closed, a transcript of the conversation may be posted to your server's log channel. This can be turned off in the ticket settings; the transcript stays with you, we do not keep it.
  • Answers learned from staff (VIP/Premium) — when a ticket closes, the AI can suggest a question/answer entry drawn from what the staff replied. It is used in the AI's replies only after a staff member validates it, only on that server, as context (never to train a model). Entries are kept until an administrator deletes them from the dashboard, and are deleted when the bot leaves the server.

For these features, the text is sent only to Anthropic (Claude models), which does not use it to train its models. We never use it to train AI, and we never sell it. When the bot leaves a server, everything it kept for these features is deleted.

03Purposes of processing

  • Providing the Service: generating, reshaping and running your server.
  • Managing accounts, credits, subscriptions and billing.
  • Tracking AI costs and diagnosing generation failures.
  • Preventing abuse, credit fraud and vote manipulation.
  • Publishing what you choose to publish: directory, templates, profiles.
  • Measuring site audience, in aggregate form.

04Legal basis

  • Performance of the contract — account, servers, credits, subscriptions, requests sent to the AI, custom bot.
  • Legitimate interest — security, abuse prevention, technical logs, cost tracking.
  • Consent — audience measurement, and publishing your content to the directory or the library.
  • Legal obligation — retention of accounting records.

05Data retention

  • Account data: until the account is deleted, immediately with the “Delete my account” button (backups: 5 weeks).
  • Server data: for as long as the bot is present, then 30 days after it is removed.
  • Requests sent to the AI: 12 months. After that, the text is deleted; only the cost of the request is kept, for our accounts.
  • Messages read by the ticket AI or the Right hand: 7 days at most. Anonymous Right hand summaries: 35 days; ticket summaries: 90 days.
  • Counts for the audit (messages per channel and per hour, members joining, newcomers' first message): 90 days.
  • Referrals (anti-cheat): technical fingerprint and hashed IP, list of active members of the referred server: 30 days at most.
  • Technical and security logs: 12 months.
  • Custom bot token: erased immediately on cancellation or deletion of the bot.
  • Published content: until withdrawn by you or by moderation.
  • Accounting records: 10 years, as required by the French Commercial Code.

06Processors and sharing

We do not sell your data. It is entrusted to the following providers:

  • OVH SAS (France) — hosting of the website, the bot and the database.
  • Stripe (Ireland / United States) — payments and subscriptions.
  • Discord (United States) — the platform itself: sign-in, servers, bot messages.
  • Anthropic (United States) — Claude AI models. Anthropic receives the text of your request and the structure of the server concerned, never your billing history.
  • PostHog and Google Analytics — site audience measurement, with anonymised IP address.

Transfers outside the European Union rely on the European Commission's standard contractual clauses. We may also disclose data when required by a judicial authority.

07Your rights (GDPR)

You have the following rights over your data:

  • Access, rectification and erasure.
  • Portability: receiving your data in a machine-readable format.
  • Objection to, and restriction of, processing.
  • Withdrawal of consent at any time, for the processing that relies on it.

One-click erasure: the “Delete my account” button in your dashboard (Administration → My account) immediately erases your account data (profile, credits, generations, published templates, closed tickets, conversations with the AI…); your analytics profile follows within 30 days at most. As stated above, the following remain: accounting records, anonymised, for 10 years; sanctions and ticket blacklists, which protect against abuse; settings of servers you own; a ticket that is still open, erased once it is closed. An ongoing subscription, auto-vote or custom bot must be cancelled first. Backups disappear on their own within 5 weeks. Step by step: How to delete your AiGuild account and data and How to cancel your AiGuild subscription.

For the other rights, or if you cannot access the dashboard, write to us at discord.gg/69EQkxUKE9. We reply within 30 days at most. Removing the bot from your servers triggers erasure of server data within the period stated above.

If our answer does not satisfy you, you may lodge a complaint with the CNIL (3 place de Fontenoy, 75007 Paris) or the supervisory authority of your country of residence.

08Minors

The Service is not intended for people under 15 in France, or below the digital-consent age of their country. If we learn that an account belongs to someone below that age, it is deleted.

09Security

Traffic is encrypted in transit (HTTPS). Bot tokens entrusted by Premium customers are encrypted at rest, with a key stored outside the database. Access to production data is restricted to the Publisher. No system is infallible: in the event of a breach posing a risk to your rights, you will be informed in accordance with Article 34 GDPR.

10Hosting

The Service is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. The database is stored within the European Union.

11Cookies and audience measurement

Cookies necessary for the site to work — authentication session, chosen language — cannot be disabled: without them there is no way to sign in. Audience measurement (PostHog, Google Analytics) is performed with an anonymised IP address. No third-party advertising cookies are set.

12Changes to this policy

This policy may change along with the Service. Any substantial change is announced on the official Discord server and on the dashboard. The date at the top of the page indicates the version currently in force.

AiGuild — Support Discord