Privacy Policy

Effective date: March 10, 2026

This Privacy Policy describes how Upbot ("we", "us", "our") collects, uses, and protects your information when you use our service at upbot.gg.

1. Information We Collect

Data	Source	Purpose
Discord user ID, username, avatar	Discord OAuth	Account identity and display
Email address	Discord (if provided)	Alert delivery, account recovery
Discord guild IDs	Bot join events	Associating services with servers
Service configurations	You (via dashboard)	Running status checks
Status check results	Automated checks	History, alerts, uptime calculation
Payment information	Stripe	Subscription billing

We do not store credit card numbers, bank details, or full payment credentials. All payment processing is handled by Stripe. We only receive a customer ID and subscription status.

2. How We Use Your Data

We use your data solely to operate and improve Upbot. Specifically:

• To authenticate your account and display your profile.
• To run status checks on the services you configure.
• To deliver alerts via Discord, email, or webhooks.
• To process subscription payments through Stripe.
• To respond to support requests.

We do not sell, rent, or share your data with advertisers or data brokers. We do not use your data to train machine learning models. We do not run analytics or tracking pixels on our website.

3. Third-Party Services

Provider	Purpose	Data shared
Stripe	Payment processing	Email, subscription details
Supabase	Database hosting	All app data (encrypted at rest)
Resend	Email delivery	Email address, alert content
Sentry	Error tracking (opt-in only)	Error stack traces, no PII
Discord	OAuth, bot functionality	User ID, guild interactions

These providers receive only the minimum data required for their function.

4. Data Retention

• Account data is retained while your account is active.
• Service configurations are kept after cancellation so you can return and resume.
• Status history is retained for 90 days, then automatically purged.
• If you delete your account, all associated data is permanently removed within 7 days.
• Stripe retains payment records per their own retention policy for legal compliance.

5. Cookies

Upbot uses a single httpOnly authentication cookie to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Your Rights

You have the right to:

• Access your data — request a copy of everything we store about you.
• Delete your data — request permanent deletion of your account and all associated data, completed within 7 days.
• Export your data — receive your service configurations and status history in JSON format.
• Correct your data — request changes to any inaccurate information.

To exercise any of these rights, email support@upbot.gg. We respond within 48 hours.

7. Children's Privacy

Upbot requires a Discord account, which requires users to be at least 13 years old. We do not knowingly collect data from children under 13. If we discover we have, we will delete it immediately.

8. Security

• All data is encrypted in transit via TLS/HTTPS.
• Authentication tokens are hashed before storage.
• API keys are stored as one-way hashes; the raw key is only shown once at creation.
• Access to production infrastructure is restricted and logged.

9. Business Transfers

If Upbot is acquired by or merged with another company, we will notify all users by email at least 30 days before any data transfer. You will have the option to export and delete your data before the transition.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via Discord, email, or a notice on our website at least 14 days before changes take effect.

11. Contact

Questions or concerns about your privacy? Contact us at support@upbot.gg.