Flaw - Privacy Policy

Overview

This Privacy Policy explains what information Flaw ("the Bot") collects, how it's used, and how it's stored when you add the Bot to your Discord server or interact with it. By using Flaw, you agree to the practices described here. If you don't agree, please remove the Bot from your server.

Information We Collect

Flaw is designed to collect only what's needed to provide moderation and ticket features. This includes:

Discord user IDs and guild (server) IDs — used to associate warnings and settings with the right person and server
Warning records — the reason text and count of warnings issued to a user
Ticket system configuration — the panel channel, ticket category, and staff role you set for your server
Bot configuration and moderation settings — your server's welcome, ticket, and command settings

      We do not log or permanently store the content of your messages. Message text is read transiently to interpret a moderation command, then discarded — it is not saved to our database.
    

AI-Assisted Commands

In servers where Flaw's natural-language moderation feature is enabled, messages that mention the Bot with a moderation request (for example, "@Flaw mute @user for spam") are sent to a third-party AI provider so the Bot can interpret the intended action, target user, and reason.

Only the message text and relevant context needed to parse the command are sent — not your full message history
This applies only to messages that directly mention the Bot, in servers with this feature enabled
The provider processes this text to return a structured response (e.g. action: mute, target: user ID) and does not receive your Discord credentials or unrelated server data

      Because this feature sends message text to a third-party API for processing, we recommend not using it in channels where you wouldn't want message content briefly handled by an external service. Standard moderation commands (slash commands) do not use this feature and are processed entirely by the Bot itself.
    

How Data Is Stored

Data collected by Flaw is stored locally on infrastructure operated by the Bot's developer, organized by server (guild ID). We do not use third-party data brokers, analytics trackers, or advertising networks for personal data. Aggregate bot usage stats are retained separately for website display.

Data type	Purpose	Retention
Warnings	Track moderation history per user	Until cleared by staff or the Bot is removed from the server
Server settings	Store your welcome and ticket configuration	Until changed by staff or the Bot is removed from the server
Ticket config	Route and manage support tickets	Until changed by staff or the Bot is removed from the server
Message content	Real-time filtering / command parsing only	Not retained
Aggregate usage stats	Display server count and command usage on the website	Retained as aggregate metrics

Sharing of Information

We do not sell your data. We do not share your data with advertisers or data brokers. Information is shared only in these limited cases:

With our third-party AI provider, solely to process natural-language moderation commands as described above
With Discord, Inc., as an unavoidable part of operating a Discord bot through their platform
If required to comply with a valid legal request, such as a subpoena or court order

Your Choices and Rights

You have control over the data associated with your server:

Server administrators can clear warnings, reconfigure server settings, or remove the ticket setup at any time using the Bot's commands
Removing the Bot from your server stops all further data collection and causes the Bot to delete the server's stored warnings and configuration whenever possible
You may request deletion of stored data for your server by reaching out through the support server listed below
Individual users can request the warnings tied to their user ID be disclosed or deleted by reaching out to server staff or the bot administrators directly

Children's Privacy

Flaw is intended for use within Discord, which requires users to meet Discord's own minimum age requirements. We do not knowingly collect data from children below the age required by Discord's Terms of Service. If you believe a child has provided data to us in violation of this policy, please reach out so we can remove it.

Data Security

We take reasonable measures to protect stored data from unauthorized access, but no system can be guaranteed 100% secure. You acknowledge that you provide data to the Bot at your own risk.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Bot after changes are posted constitutes your acceptance of the updated policy. It is your responsibility to review this page periodically.