Privacy Policy

Effective Date: January 24, 2026

BabelBot ("we," "us," "our," or "Service") provides real-time message translation for Discord servers. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By installing or using BabelBot, you agree to this policy.

1. Data Controller & Legal Basis

Data Controller: Bram Suurd, operating BabelBot.

Lawful Basis for Processing: We process server configuration and usage data on the basis of:

  • Contract: Server settings, billing information, and usage quotas are necessary to provide the translation service you have authorized.
  • Legitimate Interests: Aggregated analytics, fraud prevention, and service improvement. We balance these interests against user privacy and do not process data beyond what is necessary.
  • Consent: Website analytics via Rybbit (non-cookie, GDPR-compliant event tracking). Continued use of the website constitutes consent.

2. Information We Collect

2.1 Message Content (Not Stored)

BabelBot does not permanently store message text.

When you send a message in a channel where BabelBot is active, we:

  • Receive the message text in real-time from Discord.
  • Send it to third-party translation and language-detection APIs.
  • Display the translated result in Discord.
  • Discard the original text immediately after processing.

We do not retain message IDs, timestamps, author names (beyond identifying opt-out status), or any message metadata permanently.

2.2 Server Configuration

We store per-guild settings that you configure via bot commands:

  • Guild (server) ID
  • Enabled/disabled status
  • Target translation languages
  • Disabled channel IDs (channels where translation is not active)
  • Opt-out user IDs (users who have used /ignore-me to exclude their messages)
  • Reply mode (reply vs. thread)
  • Translation thread retention settings
  • Bridge and webhook configuration
  • Image translation preference

This data persists as long as BabelBot remains in your server and is necessary for the service to function.

2.3 Usage & Quotas

We track translation counts to manage fair usage and billing:

  • Monthly counters: Total translations per guild per calendar month (UTC). Used for free-tier quota enforcement and billing.
  • Free-trial pool: Count of translations used from the initial free-tier starter allocation per guild (does not reset monthly; carries across months).
  • Daily aggregates: Per-guild daily translation totals by category (normal translations, flag-triggered, bridge relay). No message content attached.

We do not track which specific messages were translated, who sent them, or what languages were involved—only aggregated counts.

2.4 Billing & Payment

For premium plan processing:

  • Guild subscription tier (Free, Pro, Ultra, Lifetime)
  • Polar customer ID and subscription ID (from our payment processor)
  • Lifetime access transfer history (for founder/legacy plans)
  • Updated-at timestamps

We do not store full payment card details. Payment processing is handled entirely by Polar.sh; refer to their privacy policy for payment data handling.

2.5 Diagnostics & Traces

We maintain a limited trace log (approximately 200 recent entries) of translation decisions for each guild. These logs include:

  • Decision outcomes (translated, skipped, rejected)
  • Reason codes (quota exceeded, bot disabled, user opted out, etc.)
  • Timestamps

Trace logs do not include message content or user personal data. They are used for debugging and service improvement.

2.6 Website Analytics

Our marketing website uses Rybbit, a non-cookie analytics platform that is GDPR-compliant and does not use cookies. We collect:

  • Page views and interactions
  • Referrer information
  • Browser/device type (anonymized)

No personally identifiable information is collected via Rybbit. See Rybbit's privacy policy for details.

3. Third-Party Processors & Data Sharing

We rely on the following external services to operate BabelBot. These processors are contractually restricted to process data only as needed for their service.

3.1 Translation & Language Detection

  • OpenRouter: Provides access to AI translation models. Message text is sent in real-time for translation and not permanently stored by us.
  • Google APIs: Used for language detection. Language detection queries are sent in real-time; results are not permanently stored.

Refer to OpenRouter's and Google's privacy policies for how they handle this data.

3.2 Payment Processing

  • Polar.sh: Processes all premium plan subscriptions and founder access payments. We store Polar customer and subscription IDs but not full payment details.

See Polar's privacy policy for details on payment data handling.

3.3 Analytics

  • Rybbit: Non-cookie, GDPR-compliant event tracking for the marketing website.

3.4 Other Disclosures

We do not sell or rent your data. We may disclose information if required by law (e.g., subpoena, court order) or to protect the security and integrity of the service.

4. Data Retention & Deletion

4.1 Server Configuration

Persists as long as BabelBot remains in your server. When removed, configuration is retained for 90 days before deletion to support potential reinstalls or data requests.

4.2 Usage Counters

  • Monthly counters: Retained for the current and previous 12 calendar months for analytics, audit, and billing purposes. Older months are automatically deleted.
  • Free-trial pool: Retained indefinitely until fully consumed or manually reset.
  • Daily aggregates: Retained for 24 months for historical analytics and then deleted.

4.3 Billing Records

Retained for 7 years in compliance with accounting and tax requirements. This includes Polar subscription records, tier changes, and payment history.

4.4 Trace Logs

Limited to the 200 most recent entries per guild. Older traces are automatically discarded.

4.5 Opt-Out Records

User opt-out preferences (ignoredUserIds) are retained as long as the configuration exists to honor your privacy choice.

5. Your Privacy Rights & Opt-Out

5.1 Individual Opt-Out (User Level)

Stop having your messages translated

Use the /ignore-me enable command in any server where BabelBot is active. BabelBot will not process or send your messages to translation APIs. Use /ignore-me disable to opt back in or /ignore-me status to check your status.

5.2 Server-Level Rights (GDPR / CCPA)

If you are a server administrator or data subject, you have the right to:

  • Access: Request a copy of the configuration and usage data we store about your server.
  • Deletion: Request deletion of server configuration and usage records (subject to retention requirements for billing and legal compliance).
  • Portability: Request your data in a structured, commonly-used format.
  • Rectification: Correct inaccurate server settings or billing information.
  • Objection: Object to processing based on legitimate interests (analytics, service improvement).

To exercise these rights, contact privacy@babelbot.xyz. Include your server ID (Guild ID) so we can verify your administrative authority. We will respond to verified requests within 30 days.

5.3 California Residents (CCPA)

California residents have the right to know, delete, and opt-out of the sale or sharing of personal information. BabelBot does not sell personal information. To exercise California privacy rights, contact privacy@babelbot.xyz.

5.4 Removing BabelBot

Remove BabelBot from your server at any time via Discord server settings. No further data will be processed. Existing configuration and billing records may be retained for the periods described in Section 4.

6. Data Security

We implement industry-standard technical and organizational measures to protect data from unauthorized access, alteration, and loss. These include:

  • Encryption of data in transit and at rest
  • Restricted access to data systems
  • Regular security assessments and updates
  • Idempotency and transaction integrity controls

No system is 100% secure. While we use commercially reasonable measures, we cannot guarantee absolute security.

7. Breach Notification

If we discover a data breach that poses a risk to the privacy or security of personal information, we will:

  • Notify affected individuals without undue delay (and where legally required, within 72 hours to relevant supervisory authorities).
  • Provide details of the breach and mitigation steps.
  • Advise you of any actions you should take to protect yourself (e.g., password changes).

8. Children's Privacy

BabelBot is not intended for children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected data from a child, contact us immediately at privacy@babelbot.xyz.

9. International Data Transfers

Data may be processed and stored in different jurisdictions (e.g., where our servers, payment processor, and translation APIs are located). By using BabelBot, you consent to cross-border data transfer and processing in accordance with this policy. Where required by law (e.g., for transfers outside the EEA), we rely on Standard Contractual Clauses or other lawful mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on this page with a new effective date.
  • Announcing major changes through our official Discord and support channels.

Continued use of BabelBot after a privacy policy update constitutes your acceptance of the changes. If you do not agree with any changes, stop using BabelBot.

11. Contact & Data Protection Officer

For questions about this Privacy Policy, data requests, or to report a privacy concern:

We are committed to working with you to resolve any privacy concerns. If you are in the EU and feel your rights have been violated, you also have the right to lodge a complaint with your local data protection authority (e.g., your country's DPA).