This Privacy Policy explains how Xova Bot (“Xova Bot”, “we”, “us”) collects, uses, stores, and protects information when you add our Discord bot to a server or use our web dashboard at https://xovabot.com. By using Xova Bot, you agree to this policy. Xova Bot is not affiliated with or endorsed by Discord Inc.

We only collect the data needed to provide the bot's features:

• Discord identifiers — server (guild) IDs, channel IDs, role IDs, user IDs, and message IDs.
• Server configuration — settings you choose in the dashboard (welcome messages, auto-roles, moderation rules, tickets, notifications, etc.).
• Moderation records — warnings, strikes, timeouts, and case history (target user ID, moderator ID, reason, timestamp) for servers that enable moderation features.
• Engagement data — leveling/XP counts per user, per server, where the leveling feature is enabled.
• Message content — processed in real time to power AutoMod, custom commands, and edit/delete logging. Message content is held only briefly in memory to support these features and is not used for any other purpose. We do not sell or mine message content.
• Dashboard login data — when you log in we use Discord OAuth2 with the identify and guilds scopes to identify you and show your servers. Your access token is stored only in a secure, http-only cookie. We never see or store your Discord password.
• Billing data — if you purchase premium, payments are processed by Square. We do not receive or store your card details; we store your purchase/entitlement tier, license keys, and the associated Discord user ID.
• Custom bot tokens — if you run Xova Bot as your own branded (multi-)bot, we store the bot token you provide so we can operate that instance on your behalf.

We use the information solely to operate and improve the service — for example, to send welcome/goodbye messages, assign roles, run moderation and security features, deliver notifications, process premium purchases, and display your servers and settings in the dashboard. We do not sell your data or use it for advertising.

Data is stored on our private servers. Configuration and feature data is retained while the bot is in your server. When the bot is removed from a server, its associated configuration is no longer actively used and is removed during routine maintenance. Moderation logs and audit data may be retained for a limited period to support server administration, then deleted. You may request earlier deletion at any time (see Section 8).

Xova Bot integrates with third parties only as needed to provide features:

• Discord — the platform the bot operates on (see Discord's Privacy Policy).
• Square — processes premium payments. Card data is handled entirely by Square.
• Social / feed providers (e.g. Instagram or RSS feeds you configure) — used only to fetch the public posts you ask us to relay to your server.
• Bot listing sites (e.g. top.gg) — only if you choose to vote for the bot through them.

Our dashboard uses strictly necessary cookies for authentication (a secure, http-only session cookie and a short-lived login-security cookie). We do not use third-party advertising or tracking cookies.

We take reasonable measures to protect your data, including encrypted (HTTPS) connections, http-only authentication cookies, write-only handling of sensitive tokens, and restricted internal access. No method of transmission or storage is 100% secure, but we work to safeguard your information.

You may request access to, correction of, or deletion of your data at any time. Server administrators can reset or disable features from the dashboard, and removing the bot from a server stops further data collection for that server. To request deletion of your personal data, contact us at support@xovabot.com.

Xova Bot is not directed to children under 13 (or the minimum age required by Discord in your country). We do not knowingly collect data from anyone below that age.

We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date above. Continued use of Xova Bot after changes constitutes acceptance.

Questions about this policy or your data? Contact us at support@xovabot.com or through our support server.