What ModSignal stores, why, and how long. Short version: only what alerts require, message content is never read.
This policy applies to the ModSignal Discord bot ("the Bot"), operated from modsignal.visual.rocks, and to the ModSignal website ("the Website"). If you install the Bot on a Discord server, the server owner is the controller of server-related data and ModSignal is the processor.
We collect the minimum information required to deliver alerts.
When a server owner upgrades via Ko-fi, we store the Ko-fi event ID, payment amount, currency, and the claim code used to link the payment to a guild. We do not store payment instruments, billing addresses, or other sensitive payment data — Ko-fi handles that.
Ephemeral logs for diagnostic purposes (errors, command invocations, bot lifecycle events). Logs are retained for at most 14 days.
ModSignal does not request Discord's Message Content Intent and cannot read message bodies.
We do not sell or share your data. The following third parties process limited data as part of delivering the service:
You have the right to access, correct, or delete data we hold about you. Server owners can use /dev premium via the bot-owner account to adjust premium, and to remove the Bot from a guild which triggers automatic cleanup on our end.
For any other request, contact us via the support server linked on the homepage. We respond to data requests within 30 days.
Data is stored on servers we control, with database access restricted to the Bot process. Payment webhooks are verified with a secret token and constant-time comparison. HTTPS is enforced on all public endpoints. We do not guarantee absolute security but follow industry-standard practices.
Material changes will be announced on the support server at least 14 days before they take effect. The "Last updated" date at the top reflects the most recent change.
Reach out via the support server for any privacy-related questions.