Privacy Policy
The Privacy Policy for Fenrai.
Effective: July 26, 2026.
Last updated: August 28, 2026.
This policy describes what Fenrai stores, where it stores it and how long it keeps it. It covers the bot, the dashboard, the website and the public transcript viewer. We do not sell data and we do not use your data or your members' messages to train models of our own.
1. What we store about you as a dashboard user
When you sign in with Discord, we store:
- your Discord user ID, username and avatar reference, and the email address Discord returns for your account;
- your Discord OAuth access and refresh tokens, so the dashboard can list the servers you manage without asking you to sign in again;
- your role in Fenrai (regular user or administrator) and the account creation date;
- Stripe customer and subscription identifiers once a paid plan is involved.
Session cookies hold the sign-in tokens that keep you logged in, plus a cookie remembering which server you last selected in the dashboard. They cannot be read by scripts in your browser, they are required for the dashboard to work, and they are not used for advertising.
2. What we store about your server
Per server, we store the server ID, the plan and subscription state, and the configuration you save: log and updates channels, moderation rules, ticket settings, role persistence lists, auto-publish channels, timezone nickname settings, streamer alert follows and bot presence.
Feature data we store when you enable the matching feature:
- Warnings and moderation cases: the member ID, the moderator ID, the reason and timestamps.
- Tickets: the ticket channel ID, the member who opened it, participants and timestamps.
- Ticket transcripts: the archived messages of a closed ticket, kept with our file storage provider.
- AI credit ledger: what each AI call was spent on, which rule asked for it and how many tokens it used, kept for 90 days and then deleted.
- Timezone preferences: the timezone a member set for the nickname feature.
- Streamer alerts: the followed channel on Twitch, YouTube or Kick, the channel and role to announce with, your message template and whether that channel is currently live.
- Server backups: a copy of the server's structure and settings, described in section 3.
Message content is not archived beyond this and beyond the backups described below. Automated moderation evaluates messages as they arrive and keeps only the outcome, for example a case entry in your log channel.
3. Server backups
A backup is a copy of a server taken on request, or on a schedule you switch on, and stored with our file storage provider so the server can be rebuilt later or on a different server. A backup always contains:
- the server's settings, its roles and their permissions, its channels, categories and permission overwrites;
- custom emojis, automod rules, onboarding and the welcome screen;
- your Fenrai configuration for that server.
Roles and permissions name the members they apply to, so a backup contains the Discord user IDs those settings refer to. Nothing about a member is stored beyond the IDs the settings themselves contain.
Message content is only ever included if you ask for it. The option is off by default, is available on the Pro plan only, and is chosen per backup. When it is on, a backup keeps the last 100 messages of each text channel: their text, their attachments' file names and links to Discord's copies, and each author's Discord user ID, display name and avatar reference. Attachments are not copied to our storage. Scheduled backups never include messages. Restoring such a backup reposts those messages as copies through a webhook, which is visibly not the original author.
How long a backup is kept:
- A server keeps its four most recent backups. Making a new one replaces the oldest.
- A backup is deleted once it is older than its plan's retention window, currently 180 days on Standard and 60 days on Pro.
- A copy taken automatically just before a restore, so the destination can be recovered, is deleted after 7 days.
- Removing the bot from a server marks that server's backups for deletion 30 days later, so an accidental removal is survivable and a real one does not leave the data with us.
- Deleting a backup from the dashboard removes the stored copy immediately.
You can download any backup from the dashboard as a file, which is also how you obtain a copy of what it holds. Server owners can delete any backup of their server at any time.
4. Processors we use
- Discord provides the accounts, the gateway and everything the bot sees in your server.
- Cloudflare R2 stores ticket transcript files.
- Stripe processes payments and holds the payment details. We only receive identifiers and subscription status.
- OpenAI powers the dashboard assistant and the AI checks inside moderation rules. The assistant sends the question you type and the server configuration needed to answer it. An AI check sends the rule the server owner wrote, the message that triggered the rule and, if that check is set to use it, up to five of the author's recent messages in the same channel. Nothing else about the member is sent, and no request carries conversation history.
- Vercel Analytics collects aggregate page views on the website. It does not build cross-site profiles.
Discord message content reaches OpenAI in one case only: a server whose moderation rules contain an AI check, and only for the messages those rules act on. A server with no AI check in any rule sends no message content anywhere. OpenAI does not train on what we send, and the verdict is cached on our side for a short period so the same message is not sent twice.
5. Public transcripts
Ticket transcripts are private by default and only visible to people who manage the server. If you turn public transcripts on for a server, its transcript links become readable by anyone who has the link. That link contains a random identifier, but it is not otherwise protected. Turning the setting on is a deliberate publication decision, so consider what your tickets contain before you do it.
6. How long we keep things
- Ticket transcripts follow the server's plan: 7 days on Free, 14 days on Standard, 30 days on Pro. Anything older than that is deleted automatically.
- Configuration and warnings are kept while the bot is in the server.
- Server backups follow the rules in section 3.
- Your account is kept until you delete it.
Removing the bot from a server stops all processing for that server. Deleting your account from the settings page removes your user record, including the stored Discord tokens. Database backups are rotated, so a copy can survive for a short window after deletion.
7. Your rights
You can ask for a copy of the data tied to your Discord account, ask for corrections, or ask for deletion, by writing to [email protected] from an address we can tie to your account, or by contacting us on our Discord support server. Server owners are the ones who decide what Fenrai processes on their server, so requests about a specific server's data are handled together with that server's owner.
If your request is about a message of yours held inside a server backup, tell us the server and we will ask its owner to delete the backups in question, which removes the stored copies. The owner can do this from the dashboard at any time, and every backup expires on its own as described in section 3.
8. Security
Traffic to the dashboard and the API is encrypted. Our internal systems are not reachable from the public internet and require authentication. Access to production data is limited to the people who operate Fenrai. No system is perfectly secure, and we do not claim otherwise. If a breach affects your data, we will report it on our support server and, where the law requires it, to the relevant authority.
9. Children
Fenrai follows Discord's minimum age requirements. We do not knowingly store data about anyone below the minimum age for their country. If you believe we do, contact us and we will delete it.
10. Changes
We may update this policy. The "Last updated" date reflects the current version, and material changes are announced on our support server.