Privacy Policy

1. Who we are

Plair is a Discord bot and website run by the Plair team, based in Norway. We are responsible ("controller") for the personal data described here.

Contact: plaircontact@gmail.com, or our support server on Discord (for data requests, please use email).

Plair is not made by or affiliated with Discord Inc.

2. What we collect

When you log in to the dashboard

With "Log in with Discord", Discord gives us your user ID, username, display name, avatar and the list of servers you're in (with their names, icons and your permissions there). We use this to show the servers you can manage and to check that you're allowed to change them.

This login data is kept in memory for your session only (at most 7 days, or until you log out). It is not saved to disk. Your Discord access token stays on our server and is never sent to your browser.

In servers that use Plair

A server's admins decide which features to turn on. Depending on that, Plair stores:

• Settings for the server's features (channels, roles, messages, FAQ and so on).
• Backups of the server's layout: names, settings and permissions of channels and roles. Backups don't contain messages.
• Tickets: the messages written in ticket channels, with the author's username and Discord user ID, saved as a transcript the server's admins can read. If the server turned on feedback, also the star rating and comment the person who opened the ticket gives after it closes.
• Giveaways: the user IDs of people who entered and how many entries they had.
• Security records: for raids and join raids, the user IDs, usernames and account ages of the accounts involved, and what was deleted or restored.
• Verification: which members are waiting to verify (as a Discord role). Captcha codes are kept in memory for at most 5 minutes.
• Moderation cases: warnings, timeouts, kicks and bans, with the user ID and username of the member and the moderator, the reason and the time.
• Levels (if turned on): per member, their Discord user ID, XP, how many messages they sent and when they last earned XP. Not what they wrote.
• Suggestions (if turned on): the text people post with /suggest, their user ID and display name, and the user IDs of who voted 👍 or 👎.
• Insights: daily counts per server (messages, joins, leaves, active members, messages per hour). To count active members, Plair keeps the user IDs of who chatted today; that list is thrown away when the day ends.
• Voice rooms (if turned on): which voice rooms exist right now and the user ID of each room's owner, until the room is deleted.
• Stream alerts (Premium): the public Twitch / YouTube channel names the server's admins added.

Messages

Discord sends Plair the messages in channels it can see. Plair only stores messages written in ticket channels (and suggestions posted with /suggest). If a server turns on mod logs, edited and deleted messages are posted in that server's own log channel on Discord. Plair doesn't save them itself: while it runs, it only keeps the latest messages of each channel in its working memory (not on disk), so it can show what was deleted.

3. AI answers (Premium)

If a Premium server turns on AI answers, and the FAQ has no answer to a ticket question, Plair sends the following to Anthropic (the company behind Claude) so it can write an answer:

• the latest question and up to 12 earlier messages from that ticket (without usernames),
• the server's FAQ, the "about the server" text its admins wrote, and the names of its channels.

Anthropic processes this under its Commercial Terms, which say it may not train its models on this content. Answers written by the AI are shown in the ticket and saved in the transcript like other messages. Please don't share passwords or other sensitive information in tickets.

4. Payments

Premium is paid through Stripe. You type your card details on Stripe's own page; they go straight to Stripe and never reach Plair. From Stripe we receive only: a customer ID, a subscription ID, which plan you have, its status and its renewal date. We also store the Discord user ID of the person who bought Premium, so only they (or the server owner) can manage billing.

Stripe handles payment data under its own Privacy Policy.

5. Why we use it (legal basis)

• To provide the service that you or your server's admins asked for (logins, settings, tickets, giveaways, backups, Premium). GDPR art. 6(1)(b) and (f).
• To keep servers safe: raid protection, verification and security records. Our and the servers' legitimate interest, art. 6(1)(f).
• Payments and bookkeeping, which the law requires us to keep. Art. 6(1)(b) and (c).

6. Who we share it with

• Discord, the platform Plair runs on.
• Stripe, for payments (see above).
• Anthropic, only for AI answers on Premium servers that turned them on (see above).
• Twitch and YouTube, only for stream alerts: Plair asks them whether the streamers a server added are live. No data about members is sent.
• Our hosting provider, which stores Plair's data on its servers on our behalf.

Some of these companies are based in the USA. When data goes outside the EEA, it's covered by the safeguards those companies use, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

We never sell data and never use it for advertising. We only share more if the law requires it.

7. How long we keep it

• Login sessions: until you log out, at most 7 days.
• Tickets: the newest 100 tickets per server (older ones and their transcripts are deleted automatically).
• Backups: the newest 10 per server (50 on Premium, 100 on Pro).
• Giveaways: running ones, plus the last 50 finished ones.
• Raid and join-raid records: the newest 20 of each per server.
• Moderation cases: the newest 2,000 per server. Suggestions: the newest 1,000 per server.
• Insights: 90 days of daily counts. Levels: until the server's admins reset them.
• When Plair is removed from a server, all of that server's data is deleted after 30 days. Adding Plair back within those 30 days keeps it.
• Premium records (Stripe IDs and plan status) are kept while the subscription exists, and afterwards for as long as bookkeeping law requires.

8. Your rights

Under the GDPR you can ask to see the data we have about you, correct it, delete it, limit how we use it, object to how we use it, or get a copy of it. Email plaircontact@gmail.com with your Discord user ID. We answer within 30 days.

Some data belongs to a server (for example ticket transcripts or security records), so we may check with that server's admins first. You can also always leave a server or ask its admins to remove Plair.

If you think we handle your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

9. Security

Logins use Discord's official login with protection against forged requests. Sessions are signed and can't be read by scripts. Only a server's owner or Administrators can change its settings, which is checked live with Discord. Payment messages from Stripe are only accepted with a valid signature. Card details are never handled by Plair.

10. Children

Plair is for people who are allowed to use Discord (13 or older in Norway). Premium can only be bought by adults, or with a parent's or guardian's permission.

11. Changes

If we change this policy, we update the date at the top. If the change is important, we also say so on the website or in Discord.