Privacy Policy

This Privacy Policy describes how the Discord bots Sentinel, Pulse, and Forge Builder (the "Bots"), operated by Autistic Intelligence Software, handle information. The short version: we minimize what we keep, we never sell data, and sensitive inputs are hashed or discarded — never stored raw.

1. Sentinel

• Threat tallies. When someone verifies through the Sentinel portal, the portal reads non-personal device signals (IP-derived network signals, display language, timezone, currency/locale, enabled settings). Raw values are never saved: the server hashes the fingerprint with a secret salt, increments counters keyed by the resulting opaque hash ("this fingerprint-shape has N scam reports / M good reports"), and discards the raw telemetry within milliseconds. Stored per user: only the opaque hash and Discord user ID — no IPs, no browser details, no raw telemetry on disk.
• Reports and vouches. /report and /vouch store the reporter's Discord ID, the accused's Discord ID, and the report text so moderators can adjudicate and so reporter track records can be scored. False reporters are down-weighted over time.
• Opt-in deep verification. Device-level hashing is strictly opt-in, behind an explicit consent screen, with one-click revoke. Revoking deletes the stored hash.
• Observe mode. Sentinel collects signals only. It never bans, kicks, mutes, or times anyone out on its own.

2. Pulse

• Surveys. Exit surveys and pulse surveys are anonymous: we store aggregate answers and optional free-text detail, but never link responses to a Discord identity in stored results.
• Vibe ratings. /vibe rate stores a one-way hash of the rater (not reversible to the user), the target's ID, the chosen words, and the date. One rating per rater/target/day. No self-ratings; bots cannot be rated.
• Control. Every Pulse feature is off by default per server, and members can opt out of survey DMs at any time.

3. Forge Builder

• Bot tokens. Tokens you provide to host a bot are stored encrypted so your bot can run. Tokens pasted in DMs are auto-deleted after capture; never paste a token in a public channel (if you do, reset it in the Discord Developer Portal immediately).
• Configurations. Your commands, welcome messages, and automod rules are stored so your bot can serve them.

4. What we never do

• We never sell, rent, or share your data with advertisers or data brokers.
• We never store message content beyond what is needed for the features above (e.g. report evidence you submit, mod-log entries your server already made public to its mods).
• We never read your DMs or servers the Bots are not in.

5. Data retention and deletion

Aggregated, anonymized tallies may be kept indefinitely because they cannot identify anyone. Per-user records (reports, vouches, survey opt-outs, hosted bot configs) are deleted on request — contact us through the Sentinel portal. Opt-in deep-verification hashes are deleted immediately when you revoke consent.

6. Children

The Bots are intended for Discord servers whose audiences are 18+. We do not knowingly collect data from children under 13.

7. Changes

We may update this policy; material changes will be noted here with a new "Last updated" date.

8. Contact

Privacy questions or deletion requests: contact us through the Sentinel portal at sentinel.rivaleclipse.dev.