Privacy Policy
Last updated: November 8, 2026
1. Who is responsible for your data
Green-bot, operated by the company identified in our legal notice, is the controller of the personal data processed to run Green-bot: the bots, Custom Bots, the website green-bot.app, the dashboard, the web player and the Discord Activity. Contact: [email protected].
2. What we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Running the bots on your server | Server id, channel and role ids, the settings you choose, the messages, embeds and images you set up, the server language | Contract (our Terms) | As long as the server uses Green-bot; deleted on request |
| Playing music, the queue, the web player and the Activity | Your Discord user id, the voice channel, the tracks you request, the state of the player | Contract | Player state: 10 minutes after playback stops; presence in the player: 6 hours; the “recently added” list (name and avatar): 72 hours |
| Playlists, likes, listening statistics and levels | Your Discord user id, username and avatar, your playlists and likes, tracks played and listening time, message and voice activity used for levels | Contract (playlists); legitimate interest in running the community features chosen by the server (statistics, levels) | Playlists until you delete them; statistics and levels are deleted automatically after a period of inactivity |
| Community features: welcome messages, tickets, giveaways, temporary voice channels, social alerts | Your Discord user id, ticket messages and transcripts, giveaway entries, temporary channels you own, the public channels followed for social alerts | Legitimate interest in running the features chosen by the server | Tickets: 90 days after they are closed; transcripts: 30 days; the rest: until the feature or the item ends |
| Signing in on the website, the dashboard, the web player and the Activity | Your Discord user id, username and avatar, the servers you are in and your roles there, a session cookie | Contract | Session cookie: 15 days; server caches: a few minutes |
| Plans bought on the website | Your Discord user id, the plan, the server chosen, subscription status, invoices and refunds. Stripe also processes your name, e-mail address, country, billing address and payment details | Contract; legal obligation (accounting and tax) | While the plan runs, then the time needed for claims and disputes; invoices and accounting records: 10 years |
| Custom Bots | The bot token and id of your Discord application, its name and avatar, the server it runs on | Contract | As long as your Custom Bot exists; deleted on request once your plan has ended |
| AI features (Beat and AI characters) | Messages sent to Beat or to a character and their replies, display names, character profiles, generated images, reports and the list of blocked members | Contract (Custom Bot owner); legitimate interest (members talking to the bot) | Conversations: 7 days after the last activity, or at once when AI features are removed from the Custom Bot; generated images: 30 days; reports: 90 days; moderation incidents: 1 year; character profiles: 30 days after deletion |
| Patreon supporters from before the relaunch | Patreon user id, name and e-mail address, membership status, the Discord account linked on Patreon | Contract | Until the end of the move to our own plans, except accounting records |
| Support and requests | What you send us by e-mail or on our support server, your Discord user id | Legitimate interest in answering you; legal obligation for requests about your rights | Up to 3 years after our last exchange |
| Security and abuse prevention | Technical logs (IP address, time, request), rate limits, payment disputes | Legitimate interest in protecting the Service; legal obligation | Technical logs: at most 12 months |
We do not sell your data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
3. Public statistics and levels
Listening statistics and levels are public by default: members of the servers you share with Green-bot can see them, for example on leaderboards. You can hide yours at any time with the « Listening tracking » setting in Profile › My listening.
4. Cookies and audience measurement
The website uses one cookie, session_user, which keeps you signed in for up to 15 days. It is strictly necessary and does not need your consent. We use no advertising or cross-site tracking cookies.
We count visits and a few steps of the purchase journey with Plausible Analytics, which uses no cookies and only gives us aggregated figures. It receives the address of the pages you visit, which can contain a server id, but never your Discord id, your username or your e-mail address.
In the dashboard, the web player and the Activity we count, without any identifier or tracking cookie, a few steps of how they are used, the errors shown and loading times. These counts are kept for 30 to 90 days and are only read by our team.
Now and then we ask for optional feedback: a rating, an optional comment, the page area, the app version, the language and your plan. A pseudonymous code (a keyed hash of your Discord id) is only used to avoid duplicates and to erase your answers on request; your Discord id itself is not stored. Answers are kept for 90 days and only read by our team. Nothing is shared with third parties.
Turn the switch off to stop both on this browser; it also erases the answers you already sent. A Global Privacy Control signal from your browser is respected. Your choice is kept in the gb_noa preference cookie.
You can erase the feedback answers you sent us at any time; they are otherwise deleted after 90 days.
Stripe’s payment page sets its own cookies to secure payments and prevent fraud.
5. Who receives your data
Your data is only shared with the providers that run the Service for us, each for its own task:
- Hetzner Online GmbH (Germany): hosting of our servers and databases;
- Cloudflare, Inc. (United States): delivery and protection of the website, storage of backups;
- Stripe (Stripe Payments Europe, Ltd., Ireland): payments and invoices. Stripe is also responsible for its own processing, under its own privacy policy;
- Discord Inc. (United States): the platform the bots and the Activity run on, and seller of purchases made inside Discord;
- Anthropic, PBC and OpenAI, L.L.C. (United States): replies, moderation and images of the AI features, only for messages sent to Beat or to a character;
- Resend, Inc. (United States): service e-mails, such as the message to Patreon supporters;
- Plausible Insights OÜ (Estonia): aggregated audience measurement;
- Patreon, Inc. (United States): memberships of supporters from before the relaunch;
- top.gg (United States): checking votes, with your Discord user id;
- Google LLC (United States), through YouTube API Services: the channel names searched to set up YouTube social alerts. Google processes them under the Google Privacy Policy.
To play music and show lyrics, the bot sends the search text and track identifiers to third-party audio and lyrics services, never your Discord identity. We may also disclose data to authorities when the law requires it.
6. Data sent outside the European Union
Some providers above are based in the United States. Where they are certified under the EU-U.S. Data Privacy Framework, the European Commission’s adequacy decision applies; otherwise we rely on the European Commission’s standard contractual clauses. You can ask us for a copy of these safeguards.
7. Your rights
You can ask to access your data, correct it, delete it, receive it in a portable format, restrict its use or object to it, at any time. You can also give us instructions on what to do with your data after your death. Write to [email protected] or open a ticket on our support server from your Discord account. We answer within one month. We may need to check that the request comes from you.
If you think we do not respect your rights, you can complain to the French data protection authority, the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr), or to the authority of the EU country where you live.
8. Children
Green-bot is for people aged 13 or over, or the minimum age required to use Discord in their country. If you think a child under that age uses the Service, write to us and we will delete their data.
9. Security
Data travels encrypted (HTTPS). Access to our servers and databases is limited to the people who need it to run the Service. Never share your Discord password or your card details with anyone claiming to be from Green-bot: we never ask for them.
10. Changes
We update this policy when the Service changes. The date at the top shows the latest version; for important changes we also tell you on our support server and, if you have a paid plan, by e-mail. See also our Terms of Service.