Privacy Policy
DRAFT — requires review by a lawyer before Chojio accepts payment. Chojio stores form responses, which contain whatever a member typed into a Chojio form. That is the highest-risk data in the product and this page has to be accurate about it before launch.
What is collected
Server data: server ID, name, owner ID, locale, channel and role IDs, and the configuration you create — panels, forms, ticket categories, reaction role groups.
Form responses: the answers members submit, with the submitting user ID and a timestamp. These may contain personal information, depending on the questions an administrator chose to ask.
Ticket archives: for a closed ticket, the answers given when it was opened, a timeline of what happened (opened, claimed, closed, by whom and when), staff notes, participants, and Chojio’s own messages. Premium servers can export an archive. This is not a transcript: it does not contain what members typed in the channel, because Chojio cannot read that — see “What is not collected” below.
Account data: if you sign in to the dashboard, your Discord user ID and the list of servers where you have Manage Server. Payment details are handled by Stripe and never reach Chojio’s servers.
What is not collected
Chojio does not request the Message Content intent. It cannot read ordinary channel messages, and does not.
Retention
Configuration is kept while the bot is in the server. If it is removed, data is retained for 30 days so a re-install restores the setup, then deleted. Form response and ticket archive retention is set per plan: form responses are kept 30 days on Free and up to 365 days on Premium, and ticket archives are a Premium feature kept up to 180 days.
Subprocessors
Discord (platform), Stripe (payments), and the hosting and database providers. A current list must be published here before launch.
Your rights
You can request a copy of your data or its deletion. A server owner can request deletion of everything tied to their server. Requests made through the dashboard or the support address are actioned within 30 days.
Contact
TODO: data protection contact before launch.