Privacy Policy

Last updated: February 18, 2026

1. Introduction

KozaCore ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using KozaCore, you agree to the collection and use of information as described in this policy.

2. Data We Collect

We collect only the data necessary to provide and improve our service:

From Discord

  • User IDs — to identify users for features like leveling, economy, infractions, and reminders
  • Guild (Server) IDs — to store per-server settings and configurations
  • Message content — only when explicitly required (e.g., auto-moderation trigger matching, ticket transcripts). We do not log all messages.
  • Usernames and avatars — displayed in the dashboard and notification embeds where relevant

From the Dashboard

  • Discord OAuth2 session — your Discord user ID, username, avatar, and email (if provided by Discord) used to authenticate you on the dashboard. Email is not stored beyond the session.
  • Configuration data — any settings you save (welcome messages, auto-responders, ticket categories, etc.)

From Premium Subscriptions

  • PayPal subscription IDs — to manage your subscription status. We do not store payment card details; all payment processing is handled by PayPal.
  • Payment history — records of subscription transactions for billing reference

3. How We Use Your Data

  • To provide, operate, and improve the KozaCore bot and dashboard
  • To authenticate you when you log into the dashboard
  • To process and manage premium subscriptions
  • To enforce server settings configured by administrators
  • To respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage & Security

Data is stored in a secured MongoDB database hosted on a private server. We implement reasonable technical measures to protect your data from unauthorised access, alteration, or disclosure. However, no method of transmission over the internet is 100% secure.

Dashboard sessions use encrypted cookies managed by NextAuth.js. Session data is not stored in our database.

5. Data Retention

  • Server settings — retained while the bot remains in your server. When KozaCore is removed, settings data may be retained for up to 30 days before deletion.
  • User data (XP, economy, infractions) — retained while associated with an active guild. You may request deletion by contacting us.
  • Ticket transcripts — stored until manually deleted by server administrators.
  • Payment records — retained for a minimum of 7 years for legal and accounting compliance.

6. Third-Party Services

KozaCore integrates with the following third-party services:

  • Discord — we use the Discord API to operate the bot and authenticate users. Discord's Privacy Policy applies.
  • PayPal — used to process premium subscription payments. PayPal's Privacy Policy applies.
  • Lavalink / YouTube — used for music playback. No personal data is shared with these services beyond technical request metadata.

7. Your Rights

You have the right to:

  • Access — request a copy of the data we hold about you
  • Correction — request correction of inaccurate data
  • Deletion — request deletion of your personal data (subject to legal retention requirements)
  • Opt-out — remove KozaCore from your server at any time to stop data collection

To exercise any of these rights, contact us via our Discord support server.

8. Children's Privacy

KozaCore is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when changes are made. We recommend reviewing this policy periodically.

10. Contact

For any privacy-related questions or data requests, please contact us via our Discord support server.