Privacy Policy

DRAFT — requires review by a lawyer before Chojio accepts payment. Chojio stores form responses, which contain whatever a member typed into a Chojio form. That is the highest-risk data in the product and this page has to be accurate about it before launch.

What is collected

Server data: server ID, name, owner ID, locale, channel and role IDs, and the configuration you create — panels, forms, ticket categories, reaction role groups.

Form responses: the answers members submit, with the submitting user ID and a timestamp. These may contain personal information, depending on the questions an administrator chose to ask.

Ticket archives: for a closed ticket, the answers given when it was opened, a timeline of what happened (opened, claimed, closed, by whom and when), staff notes, participants, and Chojio’s own messages. Premium servers can export an archive. This is not a transcript: it does not contain what members typed in the channel, because Chojio cannot read that — see “What is not collected” below.

Account data: if you sign in to the dashboard, your Discord user ID and the list of servers where you have Manage Server. Payment details are handled by Stripe and never reach Chojio’s servers.

What is not collected

Chojio does not request the Message Content intent. It cannot read ordinary channel messages, and does not.

Retention

Configuration is kept while the bot is in the server. If it is removed, data is retained for 30 days so a re-install restores the setup, then deleted. Form response and ticket archive retention is set per plan: form responses are kept 30 days on Free and up to 365 days on Premium, and ticket archives are a Premium feature kept up to 180 days.

Subprocessors

Discord (platform), Stripe (payments), and the hosting and database providers. A current list must be published here before launch.

Your rights

You can request a copy of your data or its deletion. A server owner can request deletion of everything tied to their server. Requests made through the dashboard or the support address are actioned within 30 days.

Contact

TODO: data protection contact before launch.