BOT PRIVACY POLICY

This Bot Privacy Policy explains how RAC (the "Bot") collects, uses, stores, and protects information when the Bot is added to a Discord guild (server) or when You interact with it. It applies in addition to Our general Privacy Policy. By adding the Bot to a guild or interacting with it, You agree to the practices described in this policy.

• "Bot" refers to the RAC Discord application.
• "We", "Us", and "Our" refer to RAC Corp.
• "Guild" refers to a Discord server that has added the Bot.
• "User" refers to any Discord account that interacts with the Bot or shares a guild with the Bot.
• "You" and "Your" refer to any individual interacting with the Bot, including Users and guild administrators acting on behalf of a Guild.
• "Snowflake ID" refers to Discord’s unique, non-sensitive numeric identifier assigned to every user, guild, channel, and message.
• "Service Data" refers to any information the Bot stores in its database.

The Bot receives and stores information needed to provide its features. Discord supplies guild and user information when You interact with the Bot's commands. This may include:

• Discord Snowflake IDs for the guild and user involved in a command interaction, and Your Discord username
• Your previous Discord usernames and avatars, unless You opt out through /settings user -> Privacy (see Section 4)
• guild settings, including AI settings, bot preferences such as command prefixes, moderation, security, and starboard settings; moderation logging settings include the configured channel ID and webhook ID when logging is enabled
• user settings, including AI settings, message-formatting preferences, minigame preferences, time zone, and privacy settings
• guild-only tags, including their names, content, and associated metadata
• reminders, including their content, scheduled time, and associated channel and message
• guild-only command usage counts, recording how many times each command is used, not the command content
• the message ID of a command invocation, used to update or delete the Bot's corresponding reply if You edit or delete the invocation

When You use /ai chat command, the Bot processes and stores the information described in Section 5, including prompts and completions needed to provide chat history.

We do not collect or store messages that are not directed to the Bot. We do not otherwise collect or log message content, including direct-message content, except when You submit it through a Bot command or feature described in this policy. Guild message content may also be collected when message logging under the guild's moderation settings is configured and enabled. When the Scam Image Filter is enabled, images sent in guilds may be temporarily processed in memory to detect known scam images; they are not written to disk, stored in Our database, or retained after scanning. We do not collect email addresses, IP addresses, or payment information through the Bot.

We use the information We collect as follows:

• to store and apply per-user and per-guild settings and provide the Bot's features
• to provide username and avatar history features where enabled
• to provide AI chat, reminders, tags, starboard, moderation, security, and other configured features
• to count command usage for guild-only statistics
• to update or delete the Bot's reply when a command invocation message is edited or deleted
• to perform in-memory comparison of images against known scam images (e.g., cryptocurrency giveaway scams) when the Scam Image Filter is enabled
• to maintain the Bot’s functionality, security, and stability
• to respond to support requests

The Bot provides user-configurable history controls through /settings user -> Privacy. These controls are available to You at any time and apply to Your own account:

• Avatar History Logging: controls whether Your previous avatars are saved. Disabling this restricts You from viewing others' avatar histories.
• Username History Logging: controls whether Your previous usernames are saved. Disabling this restricts You from viewing others' username histories.

Both settings are ON by default. If You disable either setting, We stop saving new entries of that type for Your account. History is mutual-consent based: if either You or the user being viewed has history logging disabled, that user's history cannot be viewed. Existing entries collected while a setting was enabled may be retained unless You request deletion (see Section 8).

The Bot offers a Scam Image Filter, which uses perceptual hashing (pHash) to compare images sent in a guild against a set of known scam images (such as fraudulent cryptocurrency giveaway images) and deletes potential matches. This feature is OFF by default when the Bot is first added to a guild and must be explicitly enabled by guild administrators. When enabled, scanned images are processed entirely in memory and are never stored or retained (see Sections 2 and 6).

If You use the /ai chat command, Your Discord username, prompt, any files You provide, and any replied-to message content (up to one message in the reply chain) are sent through OpenRouter to the provider serving Your selected model. Depending on the model You choose, that provider may be Anthropic, DeepSeek, Google, OpenAI, SpaceXAI (formerly xAI), Xiaomi, or Z.ai. OpenRouter processes the request to route it, and only the selected model provider among those listed receives the prompt and related request content; other listed model providers do not receive it. Chat prompts and completions are stored by the Bot to provide chat history, and You may delete Your AI chat histories at any time using the available Bot controls. Each provider handles data under its own terms of service and privacy policy. Some of them are based outside the United States, including in China. Zero data retention (ZDR) is not guaranteed: retention and use of submitted data, including whether it may be used for model training, depend on OpenRouter's and the selected provider's applicable policies and settings.

RAC Corp. does not use prompts, messages, files, or AI responses submitted through the Bot to train or fine-tune AI models. This statement covers RAC Corp.'s own practices; it does not describe or guarantee the data-use practices of OpenRouter, the selected model provider, or OpenAI's moderation service.

Depending on the command used, AI prompts and completions or /global-chat message content may also be sent to OpenAI's moderation API to check for unsafe content before it is sent. This moderation processing is separate from model routing.

We do not sell or rent Service Data or share it with third parties for marketing purposes. Apart from the feature-specific processing described in Section 5, We do not share Service Data with other guilds, users, or bots, except where a feature explicitly requires it (for example, viewing another user's history, subject to the controls in Section 4), or where required by law or necessary to protect rights, property, or safety.

AI chat histories are retained indefinitely unless You delete them. Global chat histories are retained for 14 days and then permanently deleted. Tags, reminders, command usage statistics, and guild settings are immediately deleted when the Bot is removed from a guild. User settings and user records are retained while needed to provide the service or until deletion is requested. Internally cached data may expire after a limited period, usually about one hour. Images scanned by the Scam Image Filter are held only in memory for the duration of the scan and are never persisted. We may retain anonymized, aggregated data that cannot be linked back to You.

Service Data is stored in a database that is not publicly accessible. Access is restricted to authorized personnel of RAC Corp., and We use reasonable technical and organizational measures to protect it. No method of storage or transmission is completely secure, and We cannot guarantee absolute security.

You may exercise the following rights at any time:

• opt out of previous username and avatar collection through /settings user -> Privacy
• delete AI chat histories, tags, reminders, and messages sent through the Bot's /global-chat commands using the available controls
• request a copy of the Service Data associated with Your Snowflake ID
• request deletion of Your stored history entries or user record
• remove the Bot from a guild You manage, or remove it from Your list of installed Discord user apps

Removing the Bot from a guild immediately deletes that guild's tags, reminders, command usage statistics, and guild settings. Removing the Bot from Your installed user apps stops future processing through that installation. For a full purge of Your data, contact the developers through Our Support Server using the contact information in Section 11. Guild administrators may also contact Us to request deletion of any remaining guild-associated data.

We require users to be 18 or older to use our Service. We do not knowingly collect information from children under this age. If You believe a child under the minimum age has provided Us with information, please contact Us so We can delete it.

We reserve the right to modify this Privacy Policy at any time. You should review this Privacy Policy frequently. If we make material changes to this policy, we may notify you on our Service, by a blog post, by email, or by any method we determine. The method we choose is at our sole discretion.

Questions about the Bot Privacy Policy should be sent to Us via email at privacy@rac-corp.net or sent in Our Support Server on Discord.