Privacy Policy

1. Information We Collect

Onyu (hereinafter "the Bot") collects the following information to provide its services.

Discord user ID, nickname, and avatar URL
Discord server (guild) ID and name
Voice channel join/leave times, channel ID, and microphone status
Co-presence records (which members were in the voice channel together)
Newbie mission progress and Sprout hunt records

2. How We Use Information

Providing voice channel activity statistics (dashboard visualization)
Classifying and managing inactive members
Analyzing relationships between members (co-presence patterns)
Providing newbie management and onboarding features
Generating AI-based community analysis reports

3. Third-Party Disclosure

The Bot transmits voice activity statistics (aggregated data that cannot identify individuals) to the Google Gemini API to provide AI analysis features. The transmitted data does not include Discord user IDs or nicknames — only server-level aggregated activity durations are sent.

No personal information is shared with any other third parties.

4. Data Retention and Deletion

Collected voice activity data is retained for a default of 90 days, and data past the retention period is automatically deleted daily.

Users may request deletion of their data at any time. After logging in to the dashboard, calling the DELETE /api/users/me/data API will immediately delete all voice activity records for that user.

5. Cookies

The web dashboard stores a JWT token in an httpOnly cookie for Discord OAuth2 authentication. This cookie expires after 1 hour and is immediately deleted upon logout. No tracking cookies are used.

6. Data Security

All API communications are encrypted via HTTPS
Authentication tokens are protected against tampering with JWT signatures
Database access is restricted to the server's internal network
API requests are protected by rate limiting

7. Contact

For inquiries regarding personal information processing, please contact the administrator of the Discord server where the bot operates.