The Architect Privacy Policy
This policy covers The Architect, the Discord app and bot, and its portal at https://architect.synchsupport.org. It adds detail to our main Privacy Policy and GDPR Notice, which cover everything Synch runs and explain your rights and how to contact us. Where this page is more specific, it applies to The Architect.
The Architect is part of Synch ("we", "us"), an unregistered online community. Synch is the controller for the data described here. Synch's leadership team decides how it is used and is responsible for it.
The short version
- The bot keeps your server's structure and settings: roles, channels, permissions and the logo. It never reads the content of messages.
- Backups contain no messages and no member information.
- Verification keeps a small record about each person who presses Verify, for a limited time.
- You sign in to the portal with Discord. We never see your password or email address.
- We don't sell data, show adverts or use it to train AI.
- When the bot leaves your server, everything we keep about that server is deleted after 30 days.
What the bot keeps about a server
| What | Why | Kept for |
|---|---|---|
| Server ID, the role tiers and channel types you set, settings | So the bot can build and check permissions | While the bot is in the server, then 30 days |
| Backups: roles, permissions, channels, logo | Restore and undo | Newest 2 manual and 5 automatic per server (more with Premium), deleted 30 days after the bot leaves |
| Change records: what was planned, applied and by whom (Discord user ID) | Undo, and a record of changes for the server | 30 days after the bot leaves |
| Audit log: actions, who did them (Discord user ID), when | Security, and showing what happened | [DECIDE] suggested 2 years |
| Other bots: ID, name, permissions asked for, tier, who approved them | Bot manager | 30 days after the bot leaves |
| Usage counts: who used a command or button (Discord user ID), in which server, on which day, and how many times | Knowing how many people use the bot, and spotting problems in one server | 2 years |
| Server name, icon, owner's user ID and member count | Support lookups by server ID | While the bot is in the server, then 30 days |
| Where the bot was added from: which of our links was used (website, welcome message, support server and so on), when, the server it was added to, and your Discord user ID if you were signed in to the portal at the time | Knowing which links bring people to the bot | Link visits 30 days; the server's record 2 years |
| Feedback you choose to give: 馃憤 or 馃憥 after a change, why you cancelled one, or why you removed the bot, with any comment you write, your Discord user ID, the server and the change | Finding out what works and what doesn't | 2 years |
| Who added the bot to a server (their Discord user ID, read from the server's audit log when the bot joins) | So that, if the bot is removed, it can send that person (or whoever last used it) one message asking why, with a link to a short form. You get at most one such message a day, and none if you don't share a server with the bot any more | While the bot is in the server, then 30 days; the link expires after 30 days |
| Daily count of messages each bot posts (no content, no people) | Spotting unused bots | 90 days |
Verification
When someone presses Verify, the bot works out a risk score from what Discord sends with the button press: user ID, username, display name, avatar, account creation date, when they joined and Discord's public account flags. It keeps the user ID, username, avatar reference, those dates, the score, the reasons and the decision.
- Verified records are deleted after 30 days. Records still waiting for a moderator are deleted after 30 days. Denied records are kept for 365 days, so moderators can spot the same person coming back.
- To spot possible alt accounts, the bot compares the person with the server's ban list. It reads that list from Discord and keeps it in memory only, for up to an hour. It is never stored.
- The score only flags people for a moderator. No decision is made automatically: in "live" mode, a high score means a moderator looks before the person gets in.
- No IP addresses and no message content are used.
Signing in to the portal
When you sign in, Discord shares your user ID, username, display name and avatar, and the list of servers you're in with your permissions. We use the list only to show the servers you manage and that have the bot. We don't keep the rest.
The marketplace
- Listings show the title, summary and template you published, and your Discord name unless you publish anonymously. We keep your user ID with each listing so you can manage it.
- Ratings and reports are stored with your user ID, so each person can rate or report a listing only once. Other people never see who rated or reported.
- Using a template records which server applied it, the version and who applied it. We use this for install counts, "update available" notices, and to check that people who rate a template have used it. The record is deleted 30 days after the bot leaves that server.
Premium payments
Payments are handled by Stripe. We keep the Stripe customer and subscription IDs, the plan, its status and the server or account it's for. We never receive card details.
Our legal basis (GDPR)
| Use | Legal basis |
|---|---|
| Running the bot and portal for a server that added it | Legitimate interests: providing the service the server asked for |
| Verification scores and records | Legitimate interests of the server and its members: keeping the server safe from spam and abuse, with a person always making the final call |
| Audit log and change records | Legitimate interests: security and accountability |
| Premium billing | Contract, and legal obligations for financial records |
You can object to any use based on legitimate interests (see our GDPR Notice).
Who we share it with
- Discord Inc.: everything the bot does happens on Discord.
- Stripe, Inc.: Premium payments only.
- Our hosting provider [DECIDE: name] and Cloudflare, Inc.: they run and protect the portal.
- The server's own moderators: they see verification records and the bot manager for their server.
Your rights
You can ask to see, correct or delete your data, or object to how it's used. Our main Privacy Policy and GDPR Notice explain how. A server owner can remove all of a server's data at any time by removing the bot. It is then deleted after 30 days.
Contact us
Synch 路 The Architect Discord server: https://discord.gg/DGB2jan7UD