Privacy Policy

Unum is a Discord bot, a web dashboard and the website at unumbot.com, operated by Super Secret Loot LLC, a Texas limited liability company ("Super Secret Loot", "we", "us"). This policy explains what we collect when you use Unum, why, how long we keep it, and what you can do about it.

Unum runs inside Discord servers. The owner and staff of each server decide which Unum features are on there, and those choices decide much of what we process about that server’s members. Server owners are responsible for telling their members how they use Unum.

Visitors

People browsing unumbot.com.

Dashboard users

Anyone who signs in with Discord.

Server members

People in a Discord server where Unum is installed, whether or not they ever sign in.

Stream viewers

People who chat on, or support, a Twitch, Kick or YouTube channel that a server has connected to Unum.

Customers

People who pay for a plan for a server.

What we collect depends on how you use Unum and which features a server turns on.

When you sign in

Your Discord user ID, username and avatar, and the servers you are in with your permissions in each, so the dashboard can show the servers you manage. Discord does not share your email address or password with us.

Linked accounts

If you link a Twitch, YouTube or Kick account: its account ID, username and avatar, and the sign-in tokens the platform issues, which we store encrypted. Twitch also sends your email address when you link; we do not store or use it.

Connected channels

If you connect your own stream channel so a server can use it: the channel ID and name, encrypted access tokens, and the channel data the features need, such as live status, followers, subscriptions, bits and channel memberships.

Server activity

In servers where Unum is installed: members’ IDs, usernames, avatars and roles; how many messages each member sends, their voice time, their invites, and when they join and leave; XP, levels, Credits and a history of every Credits change; and taking part in giveaways, auctions, heists, games and game nights.

Message content

Unum reads messages to run commands, AutoMod, spam detection, XP and custom commands, but stores message text only in three cases. When a server turns on message logging, it stores deleted and edited messages with their attachment names, and briefly caches recent messages so it can log them if they are deleted. When a spam rule triggers, it stores the messages that triggered it. When a ticket closes, it stores a transcript of the ticket conversation.

Moderation and support records

Moderation cases and their reasons, reports members file with any description and evidence, Server Guard incidents, and support tickets.

Stream chat

On connected channels: the usernames and IDs of viewers who chat or support the channel, and events such as follows, subscriptions, memberships, raids and bits, so they can earn XP and Credits and custom commands can answer.

Payments

Our payment processor, Stripe, collects your card details; we never see or store them. Stripe gives us a fingerprint for each card, which identifies the card without revealing it, and we use it to stop people referring themselves. We keep the customer and subscription IDs, the plan, its status and billing period, and which Discord user is the billing contact. When you accept our terms at checkout, we record your Discord ID, the terms version, the time and your IP address, as a record of the agreement.

Files you upload

Images you upload in the dashboard, such as leaderboard banners.

Technical data

A session cookie while you are signed in, and your IP address, which we hold for 60 seconds to limit how often our API can be called.

Messages to us

What you send us when you ask for help.

We do not collect government IDs, precise location, or anything for advertising.

• To run the features a server turns on: moderation, logging, tickets, XP and Credits, games, stream alerts and the rest.
• To show you your servers and settings in the dashboard.
• To take payments, manage subscriptions and trials, and keep financial records.
• To keep Unum secure: limiting requests, preventing abuse and investigating problems.
• To answer your questions.
• To meet our legal obligations and enforce our Terms of Service.

We do not sell personal data, share it for advertising, build advertising profiles, or use it to train AI models. Unum does not send your data to AI services.

Some features act without anyone pressing a button, because that is what they are for: a raid at three in the morning is not waiting for a moderator. A server’s owner and staff choose which of these run, the rules they follow and how severe the response is. We do not set them, and we do not run them across servers.

AutoMod

Applies the rules a server wrote. Depending on the rule, a message is deleted, or the member is warned, timed out or banned.

Cross-channel spam

When the pattern a server set is matched, the tracked messages are deleted and the member is banned or timed out.

Server Guard

Responds to a suspected raid or to bulk destructive changes, which can mean removing a member’s roles or restricting who can join.

Roles given automatically

Verification, level rewards and subscriber roles add or remove a Discord role when their conditions are met.

Your subscription

A payment that fails moves the server to the Free plan, and a trial ends by itself. Nothing else about your account is decided automatically.

Every moderation action of this kind is written down as a case, and a person can undo it: staff reverse it from the alert in Discord or from Recent Incidents in the dashboard, which restores what was removed. If one of these affected you, the server’s staff are the people who can look at it, since it was their rule. You can also email us and we will help, and you can ask us for a copy of what we hold about you.

None of this profiles you for advertising, scores you across servers, or judges you on anything you have not done in the server it happened in.

Two people decide things about the same data, so it is worth being plain about which is which.

Us

We are the controller for the data we decide the use of: your account, your linked accounts, payments, security and the running of Unum itself. Everything in this policy about those is ours to answer for.

The server’s owner

They decide whether Unum is in their server at all, which features are on, what those features record and who on their staff can see it. Where the law treats them as the controller of their members’ data, we act on their instructions, and this policy and our Terms of Service are those instructions.

Discord

Discord is responsible for your Discord account and for the platform itself, under its own privacy policy.

In practice: ask a server’s staff about what that server records and why, and ask us about your account, your data as a whole, or anything they cannot answer. We can act on either.

Where data protection law asks why we may use your data, these are our reasons:

Our contract with you

Running Unum for you, including your account, linked accounts, subscriptions and the tools to download and delete your data.

Legitimate interests

Running the features a server’s owner turns on for its members, keeping Unum secure, keeping moderation records that protect communities, and keeping financial records. We weigh these against your rights, and you can object; see Your choices and rights.

Legal obligations

Keeping tax and accounting records, and answering lawful requests.

• Public leaderboards. A server can publish a leaderboard page; it is off until the server turns it on. It shows members’ usernames and avatars and the stats the server chooses, such as messages, voice time, Credits, XP, level and invites.
• Our homepage lists the largest servers that use Unum, with their name, icon and member count.
• Images uploaded in the dashboard can be viewed by anyone with their link.
• What Unum posts in a Discord channel can be seen by anyone who can see that channel.

Ticket transcripts are not public. Only staff of the server a ticket belongs to can read them, after signing in.

Stripe

Processes payments. Stripe receives your payment details directly and handles them under its privacy policy.

Hosting and network providers

Run the servers, databases and network Unum operates on.

Discord, Twitch, Kick and Google

Receive the requests Unum makes to run features, such as posting a message or checking whether a channel is live. Their own policies apply: Discord, Twitch, Kick and Google.

Accounts a server follows

When a server follows an account with Social Feed, Unum asks the platform that account publishes on for its public posts, the same way any reader would. The request says nothing about your server or its members, and their own policies apply to it.

Whoever referred you

If you use someone’s referral code or link, they can see your Discord username and avatar, when you used their code, and whether you went on to subscribe. If they are a partner, they can also see what they have earned from your payments.

Server staff

People who manage a server in the dashboard can see what Unum records about that server’s members, such as logs, moderation cases, reports and ticket transcripts, within the permissions Discord gives them.

Legal requests

We disclose data when the law requires it, or when we believe in good faith that it is needed to protect someone’s safety or our rights.

A new owner

If Super Secret Loot is merged, acquired or sells Unum, data may move to the new owner, who must keep to this policy or tell you before changing it.

Our own team looks at data only to run, support and secure Unum, and to investigate abuse.

Unum uses YouTube API Services. If you link a YouTube account or connect a YouTube channel, Google’s Privacy Policy applies to that data, and you agree to the YouTube Terms of Service.

We use YouTube data only to identify your account, show your channel, see when you go live and recognise your channel’s members for the features a server turns on. You can remove Unum’s access at any time from Google’s security settings, or by unlinking the account in the dashboard. When access ends, we delete the stored tokens straight away.

Message logs

Deleted and edited messages a server logs are kept 7 days on Free, 90 days on Plus and 365 days on Ultimate.

Message cache

Recent messages cached for logging are kept 24 hours.

Spam incidents

Kept 90 days, with the messages that triggered them.

Everything else about a server

XP, Credits, activity, moderation cases, reports, tickets and transcripts, and settings are kept while Unum is in the server. When Unum is removed, all of it is deleted 30 days later, or when the server’s paid period ends if that is later. Adding Unum back within 30 days restores everything.

Your account

Kept until you delete it.

Linked accounts

Sign-in tokens are deleted as soon as you unlink an account. The account’s ID is kept so the same account cannot be linked again, until you delete your data.

IP addresses

Held for 60 seconds for rate limiting. The one recorded when you accept our terms at checkout is kept with that record.

Financial records

Subscription, referral and checkout records, including your acceptance of our terms, are kept as long as tax, accounting and legal obligations require.

Download your data

Sign in and open Your data to download everything we hold about you as a file. Anyone with a Discord account can, including members who have never used the dashboard.

Delete your data

On the same page. This deletes your account, linked accounts, XP, Credits and their history, your activity, and your part in games, giveaways and auctions. It is permanent, and it does not touch your Discord account. We keep a small record of whether you were referred and by whom, and when you joined and first paid, to stop the referral programme being abused. Nothing else about you is kept.

What servers keep

Servers keep their safety records about you: moderation cases, reports, logs, spam and Server Guard incidents, and tickets with transcripts. They are deleted on each server’s schedule above. We also keep financial records. Your download includes these records, without other people’s details.

When deletion has to wait

We cannot delete your data while you are the billing contact for a subscription that is still renewing, or while you lead a running auction. The page tells you what to do first.

Unlinking and removing Unum

You can unlink accounts in the dashboard at any time. Server owners can turn features off, or remove Unum from their server, which starts the deletion described above.

Your other rights

Depending on where you live, you may have the right to correct your data, to object to or restrict how we use it, and to complain to your data protection authority. Email support@unumbot.com. We answer within 30 days, and may ask you to confirm who you are by signing in with Discord.

If you live in California or another US state with a consumer privacy law, you have the rights to know what we collect, to get a copy, to correct it and to delete it, as described above.

• We collect identifiers (Discord and platform account IDs, usernames and IP addresses), commercial information (subscriptions and payments), internet activity (activity in servers and on our site), and message content in the cases described above.
• We do not sell personal information, or share it for cross-context behavioral advertising.
• We do not use sensitive personal information to infer anything about you.
• We will not treat you differently for using these rights.
• You can use an authorized agent; we will ask them for proof that you gave them permission.

Unum is not meant for children under 13, or under the minimum age to use Discord in their country if that is higher. We do not knowingly collect their data. If you believe we have, email support@unumbot.com and we will delete it.

Data travels over encrypted connections. Sign-in tokens for linked accounts, connected channels and custom bots are encrypted at rest with AES-256-GCM. The dashboard shows each person only the servers they manage, transcripts only to each server’s staff, and our API limits how often it can be called.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

We are based in the United States, and Unum stores and processes data there. If you use Unum from elsewhere, your data is transferred to the United States. Where the law requires safeguards for transfers to our providers, such as the European Commission’s standard contractual clauses, we use them.

We use only what Unum needs to work, so there is no cookie banner.

Session cookie

Keeps you signed in to the dashboard. It is set by our own site, cannot be read by page scripts, and lasts 30 days from your last visit, or until you sign out.

Referral cookie

Set when you follow someone’s referral link. It holds their code, cannot be read by page scripts, and is deleted once the code is applied to your account the next time you open the dashboard, or after 90 days.

Stripe cookies

Set by Stripe on billing pages to prevent fraud, under Stripe’s cookie policy.

Local storage

Remembers how you arranged parts of the dashboard, on your own device.

We do not use analytics or advertising cookies, and we do not load tracking scripts.

When we change this policy, we post the new version here with a new date. If a change matters, we post it at least 14 days before it takes effect.

Super Secret Loot LLC, Texas, United States. support@unumbot.com