Privacy Policy

Last Updated: 20th April, 2025

Fylo ("we", "our", or "us") operates Fylo (the "Site" and the "Bot") in the United Kingdom. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you interact with our Site and Bot (collectively, the "Services"), in accordance with all relevant laws.

1. Information We Collect

We collect non-personally identifiable information from you when you use our Site and Bot. This includes your Discord user ID, username, display name, avatar, and any other information you choose to provide. This can include but is not limited to your API access & refresh tokens.

Access & refresh tokens are used to authenticate your API requests. They are not used for any other purpose and cannot be used to access your account or send messages on your behalf. For more information, see Discord's OAuth2 documentation.

Our Services are not intended for individuals under the age of 13. We do not knowingly collect or store personal data from children under 13.

2. How We Use Your Information

We use the data we collect for the following purposes:

3. Data Sharing

We do not share personal information with third parties except as required by law or to enforce our Terms of Use.

4. Data Retention

When the Bot is removed from a Discord server, we will retain the server's data for 30 days before permanently deleting it. This includes all configuration settings, customizations, and any other data associated with the server. After this 30-day period, the data cannot be recovered. If the bot is added back to the server within 30 days of being removed, the data will no longer be in queue for deletion.

For everything else, we retain your data for as long as necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

5. User Rights

Under the GDPR, you have the following rights regarding your personal data:

Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent. You can also exercise your right to erasure if you believe your data has been unlawfully processed. To do so, please utilise Chapter 8 of this Privacy Policy.

Right of Access: You have the right to request access to the personal data we hold about you. This includes the right to know whether we are processing your data, the purposes of the processing, and the categories of data concerned. You may request a copy of your personal data by utilising Chapter 8 of this Privacy Policy.

Right to be Informed: You have the right to be informed about how we collect, use, and share your personal data. This Privacy Policy serves as our transparent communication regarding our data practices. If you have any questions about our data processing, please reach out to us.

6. Security

We take reasonable measures to protect your data from unauthorized access, including industry-standard encryption and access controls. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee the absolute security of your personal information.

7. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If changes are made, you will be notified in our Discord server, and the "Last Updated" text at the top of this page will be updated.

8. Contact Us

If you have any questions about this Privacy Policy, or would like to exercise your rights explained in this Privacy Policy, please contact us at [email protected].