Privacy Policy

Cumulina Discord bot · Last updated: 21 October 2026

This policy explains what the Cumulina Discord bot (the “Bot”) does with your information. It covers only the Bot. It does not cover Discord itself, which has its own privacy policy.

1. Who operates the Bot

The Bot is operated by a single individual as a personal project, not by a company. Contact: [email protected].

2. What is collected

Data	Why
Message text you send to the Bot (in a DM or in a channel where it responds)	To generate a reply
Your Discord user ID and username, plus channel and server IDs and message timestamps	To route the reply, keep separate conversation histories, and enforce the allow-list
Files and images you attach	To process them when a task requires it
The Bot’s replies	Conversation history and debugging
Technical logs (errors, timing, connection events)	To keep the service running

The Bot does not collect your email address, phone number, payment details, contacts, location, or messages you send to other people or other bots.

3. Where the data goes

Storage: conversation history and logs are stored in a local database on a private server hosted in the United Kingdom.
Model provider: to produce a reply, the text of your message (together with recent conversation context) is sent to a third-party large-language-model API. The current provider is DeepSeek. The provider processes the text to return a completion and is bound by its own terms and privacy policy.
No other sharing: data is not sold, rented, or shared with advertisers, data brokers, or analytics services. There is no advertising and no user profiling.

4. International transfers

The server is in the United Kingdom and the model provider may process data outside your country, including in jurisdictions with different data-protection rules. By using the Bot you understand that your message text may be transferred to those locations for the sole purpose of generating a reply.

5. How long it is kept

Conversation history is kept so the Bot can remember context across messages. It is kept until you ask for it to be deleted, or until the operator clears it.
Logs are kept for a short period for troubleshooting and then rotated out.
Access to the Bot is restricted to an allow-list; if your access is removed, your stored conversation history is not automatically deleted unless you ask.

6. Security

Access to the server is restricted to the operator, credentials are stored in a protected configuration file, and the Bot connects to Discord over an encrypted connection. No system is perfectly secure: do not send secrets, passwords, API keys, or sensitive personal data to the Bot.

7. Your rights

You can ask to:

see what the Bot has stored about you;
have your stored conversation history deleted;
have your access to the Bot removed.

Write to [email protected] and include your Discord user ID so the records can be located. Requests are handled within a reasonable period, normally within 30 days.

8. Children

The Bot is not directed at children. You must be at least 13 years old — or older where your country sets a higher minimum age for digital services — to use it. Data from a child below that age will be deleted on request.

9. Automated processing

Replies are produced automatically by a language model. There is no automated decision-making that produces legal or similarly significant effects about you, and no profiling for advertising.

10. Changes

This policy may be updated. The “Last updated” date will change and the new version will apply from that date.

11. Complaints

If you are in the UK or EU and are not satisfied with the response, you may contact your local data-protection authority. In the UK this is the Information Commissioner’s Office (ICO).