Privacy Policy

1. What we collect

• Discord identity (dashboard): your Discord user ID, username and avatar via OAuth (identify scope), and the list of servers you belong to with your permission flags (guilds scope). We never receive your password, email or messages through OAuth.
• Server configuration: settings you configure per server (moderation, security, automod, welcome, tickets, and so on).
• Operational records: moderation cases, security incidents, ticket records, giveaway entries, leveling XP and aggregate daily activity counters, stored per server to provide the features.
• Audit data: configuration changes made through the dashboard, including the acting user ID and IP address, for security accountability.

2. What we do not collect

• We do not store message content except where a feature explicitly requires it (for example, ticket transcripts requested by server staff).
• We do not sell data or share it with third parties for advertising.

3. How data is used

Data is used solely to operate PureXit's features: enforcing your server's configuration, displaying dashboards, and keeping accountability logs. OAuth tokens are stored server-side only, encrypted in transit, and are never exposed to the browser or other users.

4. Retention and deletion

Server data is retained while PureXit is in your server. Removing the bot stops collection. For full deletion of stored data, request it in the support server — requests are honored within 30 days. Dashboard sessions expire automatically after 7 days.

5. Security

Credentials and tokens are kept in server-side secret storage, never in frontend code. Dashboard sessions use signed HTTP-only cookies. Every API operation is authorized against your live Discord permissions.

6. Changes

We may update this policy; material changes will be announced in the support server.