Privacy Policy - Bertram

1. Information We Collect

Bertram collects only the data necessary to provide its features:

Discord OAuth data: When you sign in to the dashboard, we receive your Discord user ID, username, avatar, and a list of servers where you have "Manage Server" permission. This is provided by Discord's OAuth2 flow.
Server configuration: Settings you configure through the dashboard or bot commands (e.g., welcome messages, moderation rules, enabled modules).
Moderation logs: Records of moderation actions (warnings, bans, kicks, timeouts) including the moderator and target user IDs, reason, and timestamp.
Usage analytics: Aggregate command usage counts, message counts, and activity metrics for the servers where Bertram is installed.
AI conversation data: When using the /chat command, recent messages may be temporarily stored in memory for context. These are not permanently stored.

2. Information We Do Not Collect

We do not read or store the content of messages in your server (except for moderation actions and AI commands where explicitly invoked).
We do not collect email addresses, IP addresses, or personal information beyond what Discord provides via OAuth.
We do not sell, share, or transfer your data to third parties for marketing purposes.

3. How We Use Your Data

To provide and operate the bot features you enable.
To authenticate your access to the dashboard.
To display analytics and moderation data in the dashboard.
To improve the service and fix issues.

4. Data Storage and Security

Data is stored in a PostgreSQL database hosted on Railway. We use parameterized queries to prevent SQL injection, rate limiting to prevent abuse, and HTTPS for all data in transit. Access to the database is restricted to the bot and dashboard application only.

5. Data Retention

Server configuration data is retained as long as Bertram is in your server. Moderation logs are retained for server administrators to review. When Bertram is removed from a server, configuration data may be retained for a reasonable period to allow re-addition. You may request data deletion by contacting us.

6. Third-Party Services

Bertram integrates with Discord's API and may use third-party AI providers (for /chat, /generate-image, and similar commands). When you use AI features, your input may be sent to the configured AI provider. Please refer to the respective provider's privacy policy for details on how they handle data.

7. Your Rights

You can remove Bertram from your server at any time to stop data collection for that server.
You can request a copy of the data we store about your server.
You can request deletion of your server's data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated through the support Discord server.

9. Contact

For privacy-related questions or data requests, reach out via the Bertram support Discord server or through the dashboard.