Privacy Policy

This Privacy Policy explains how IUNGO collects, uses, stores, and shares information when you use the IUNGO Discord bot, dashboard, website, API, and related services (together, the Services).

By using the Services, you acknowledge the practices described here. If you use IUNGO in a Discord server, that server’s administrators may also control settings and data relating to their community.

Information we collect

Discord account and server information

When you sign in or interact with IUNGO, we may receive information from Discord that is needed to provide the Services, including:

your Discord user ID, username, display name, avatar, and account details made available through Discord;
the servers you share with IUNGO and your permissions in those servers;
server IDs, channel IDs, role IDs, member IDs, and related Discord metadata; and
OAuth access information used to sign you in and retrieve the servers you are permitted to manage.

We do not receive your Discord password.

Information created through IUNGO

Depending on the features enabled in a server, we may store:

server configuration, command settings, role and channel selections, welcome and logging settings, and moderation preferences;
levels, experience points, rankings, warnings, moderation actions, moderator IDs, reasons, and action dates;
muted-member, ticket, playlist, blog, comment, and profile information;
premium status and IUNGO dashboard access roles;
linked mailbox or integration details; and
other content you intentionally submit through commands, forms, or API requests.

The exact information stored depends on which IUNGO features a server chooses to use.

Music and media information

When you use music features, we process search terms, media URLs, track and playlist metadata, queue state, playback position, volume, voice channel IDs, and the Discord user who requested an action. Music playback requires IUNGO to connect to the selected voice channel. IUNGO does not record or store voice conversations.

API keys and integration activity

If a server owner creates an API key, we store a one-way hash of the key rather than the complete secret, together with its name, permissions, guild assignment, creator, creation date, expiry, revocation state, last-used date, and usage totals. The complete key is shown only when it is created.

For ordinary dashboard and guild API requests, we may record the route, method, response status, duration, authentication type, guild, API key identifier, and time. These records help server owners and IUNGO administrators understand usage and diagnose problems. Requests authenticated with IUNGO’s developer or administrator credentials are excluded from usage metrics.

Website, session, and technical information

When you visit the website or dashboard, we may process your IP address, browser and device information, requested URL, referral information, response status, and request time. We use a session cookie to keep you signed in and protect authenticated pages. The session cookie does not contain your Discord password.

Our pages may load assets from IUNGO’s content delivery network and fonts from Google. Those providers may receive standard connection information such as your IP address and browser details.

How we use information

We use information to:

operate commands, music playback, moderation, levels, tickets, profiles, and other requested features;
authenticate users and determine which servers they may manage;
provide and secure guild-scoped API access;
display dashboards, statistics, activity history, and service status;
prevent abuse, enforce rate limits, investigate faults, and protect users and infrastructure;
maintain, measure, troubleshoot, and improve the Services;
communicate about service, security, support, and material policy changes; and
comply with applicable law and valid legal requests.

We do not sell personal information.

When information is shared

We may share or disclose information in these circumstances:

Discord: to receive interactions and account or server information, send responses, and provide voice and bot features;
Infrastructure providers: to host the website, bot, database, logs, backups, content delivery, and security systems;
Music and media providers: to resolve searches and URLs and stream requested content through Lavalink and its configured sources;
Communication providers: when you ask us to send mail or another supported notification;
Server administrators and integrations: where information belongs to a server, appears in its dashboard, or is requested through a valid guild-scoped API key;
Professional advisers and authorities: where reasonably necessary to obtain advice, enforce our terms, protect rights or safety, or comply with law; and
A successor operator: if the Services or their assets are reorganised, transferred, or acquired, subject to appropriate handling of the information.

Third-party services process information under their own terms and privacy policies.

International processing

IUNGO is operated from Australia, but Discord and some infrastructure or media providers may process information in other countries. Privacy protections in those countries may differ from those in your location. We select and configure providers with security and operational needs in mind and take reasonable steps to protect information under our control.

Retention

We keep information only for as long as it is reasonably needed for the purposes described in this policy:

API request metrics and aggregated operational statistics are retained for up to 90 days;
short-lived rate-limit records generally expire within minutes;
dashboard sessions normally expire after 14 days, or earlier if invalidated;
API key metadata remains while the key exists and may remain after revocation where needed for security and audit history;
server settings, levels, moderation records, playlists, profiles, and similar feature data remain while needed to provide the feature or until they are deleted; and
security logs and backups may remain for a limited additional period under operational backup and incident-response schedules.

Removing IUNGO from a server revokes that server’s API keys. Some server data may remain until deletion or routine cleanup so that accidental removal does not immediately destroy configuration. You may contact us to request deletion.

Security

We use reasonable technical and organisational safeguards, including access controls, guild-scoped authorisation, hashed API keys, limited credential exposure, rate limiting, and logging. No online service can guarantee absolute security. Keep API keys private, rotate or revoke a key if it may have been exposed, and contact us promptly about suspected unauthorised access.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information about you. You can also:

sign out to end the current dashboard session;
ask a server administrator to change settings or records controlled by that server;
revoke an IUNGO API key from the server dashboard;
remove IUNGO from a Discord server you control; and
contact us with a privacy request or complaint.

We may need to verify your Discord identity and authority over a server before acting on a request. Some information may be retained where required for security, dispute resolution, legal compliance, or the rights of other users.

If you are in Australia and are not satisfied with our response to a privacy concern, information about making a complaint is available from the Office of the Australian Information Commissioner.

Children and minimum age

You must meet Discord’s minimum age requirement and any higher minimum age that applies in your country. The Services are not directed to children who are not legally permitted to use Discord. If you believe a child has provided personal information contrary to these requirements, contact us so we can investigate and remove it where appropriate.

Changes to this policy

We may update this policy as the Services, providers, or legal requirements change. The updated date at the top of this page shows when the current version took effect. For material changes, we may also provide notice through the website, dashboard, Discord, or another reasonable channel.

Contact us

For privacy questions, access or deletion requests, complaints, or security concerns, email IUNGO at [email protected]. Include your Discord user ID and the relevant server ID when applicable, never include an API key, Discord token, password, or other secret.