HELIX GUARD ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what data we collect when you use the HELIX GUARD Discord bot and web dashboard, why we collect it, how it is stored, and your rights regarding that data.
By using HELIX GUARD you consent to the data practices described in this policy. If you do not agree, please remove the bot from your server and discontinue use of the dashboard.
We collect only the data necessary to provide the service. The table below lists each data type, its purpose, and how long it is retained.
| Data Type | Purpose | Retention |
|---|---|---|
| Discord User ID | Identify users in moderation records, warnings, economy balances and leaderboards | Until bot is removed from server or data deletion is requested |
| Discord Guild ID | Link all data to the correct server | Until bot is removed from server |
| Username & display name | Display in dashboard and audit log entries (snapshot at time of action) | Same as moderation record lifetime |
| Message count (not content) | Activity statistics and leveling XP calculation | Up to 365 days (rolling) |
| Voice channel duration | Voice activity stats and voice XP (Pro) | Up to 365 days (rolling) |
| Invite codes & usage | Invite tracking — who invited whom | Until invite is deleted or bot removed |
| Moderation actions | Warning history, ban records, audit log | 7 days (Free) / 90 days (Pro) / 365 days (Server Pro) |
| Ticket messages | Ticket transcripts (Pro — only when transcript feature is enabled) | 30 days after ticket closure |
| Economy balances & transactions | Economy module (Pro) | Until bot is removed from server |
| OAuth access token (session) | Authenticate your dashboard session via Discord OAuth 2.0 | 7-day session cookie, not persisted to database |
| YouTube OAuth access & refresh token | Allow the bot to read your YouTube channel's public data (name, avatar, subscriber count, video feed) on your behalf, for display in the Social Feeds module | Until you disconnect the integration or remove the bot. Tokens are stored encrypted in the database and are only used to fetch channel data. |
| YouTube channel data | Channel name, avatar, subscriber count and latest video titles — displayed on the server dashboard and posted to a Discord channel of the server owner's choosing | Cached for up to 24 hours, then refreshed. Deleted when the integration is disconnected. |
| Twitch OAuth access & refresh token | Allow the bot to check whether a linked Twitch channel is live, for automatic live notifications in Discord | Until you disconnect the integration or remove the bot. Tokens are stored encrypted in the database. |
We never collect or store message content. Only aggregate counts per user per day are stored for activity statistics.
Data collected by HELIX GUARD is used exclusively to operate the service. Specifically:
We do not use your data for advertising, profiling, machine learning, or any purpose unrelated to operating the bot.
We do not sell, rent, or trade your data. Limited data sharing occurs only in these circumstances:
All bot data is stored in an SQLite database on our server infrastructure. The web dashboard communicates with this database via an internal API — it is never exposed directly to the internet.
Dashboard sessions use encrypted, server-side session cookies with a 7-day expiry. OAuth access tokens are stored only in the session and are not persisted to the database.
While we implement reasonable technical and organisational security measures, no system is perfectly secure. We cannot guarantee absolute security of your data.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us via our Discord support server. We will respond within 30 days.
When the HELIX GUARD bot is removed from a server, all guild-specific data is scheduled for deletion within 30 days. Individual users may also request deletion of their personal records by contacting us.
Cancelled Pro subscriptions retain data in accordance with the plan's retention limits until the subscription period ends or a deletion request is received.
HELIX GUARD is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. Discord's minimum age requirement of 13 applies. If you believe a child under 13 has provided us data, please contact us and we will delete it promptly.
HELIX GUARD's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through Google APIs is used only for the following purposes, and for no other purpose:
We do not use Google user data to serve advertisements, build user profiles, train machine learning models, or for any purpose beyond the features described above. We do not transfer Google user data to third parties except as necessary to provide those features (e.g. rendering data in the Discord bot).
You can revoke HELIX GUARD's access to your Google account at any time by visiting myaccount.google.com/permissions and removing HELIX GUARD, or by disconnecting the integration from the HELIX GUARD dashboard.
We may update this Privacy Policy at any time. The "Last updated" date at the top of this page will reflect any changes. Continued use of HELIX GUARD following a policy update constitutes acceptance of the revised policy.
For significant changes — particularly those that expand what data we collect or how we use it — we will notify users via our Discord support server at least 14 days before the change takes effect.
For any privacy-related enquiries, data requests, or concerns, please reach out via our Discord support server or by email. We aim to respond to all privacy requests within 30 days as required by applicable law.