Privacy Policy
Last updated: 8 July 2026
This Privacy Policy explains what data ngbot processes when it is added to a Discord server, why we process it, who we share it with, and the choices and rights you have. We aim to collect only what we need to run the service.
Who we are
ngbot is operated by ngbot ("ngbot", "we", "us", or "our"), a business based in Saudi Arabia. We are the controller of the personal data described in this policy. You can reach us at hello@ngbot.ai.
Information we collect
We collect the following categories of data to provide the ngbot service:
| Category | What it includes |
|---|---|
| Discord data | Discord guild (server) IDs and names, channel IDs, and user IDs and usernames of members who interact with the bot. |
| Content you provide | Message content that is processed for AI answers, moderation, or the knowledge base; knowledge-base entries you teach the bot via /learn (stored as text chunks and embeddings); support ticket contents; and custom command definitions. |
| Usage & derived data | Per-user memory summaries, XP and levels, engagement and health scores, churn-risk signals, feature usage counts, and similar metrics we derive to run community-intelligence features. |
| Payment data (via Paddle) | When you buy a paid plan, Paddle processes your payment as our Merchant of Record. We receive limited transaction data (such as plan, order reference, and status). We do not store your card or payment details. |
How we use your information
We use the data above to:
- Provide and operate the bot's features (AI chat and memory, knowledge base, moderation, XP, welcome messages, reaction roles, starboard, custom commands, tickets).
- Generate community-intelligence insights such as engagement and health scores, churn-risk detection, weekly reports, and daily digests.
- Enforce usage limits, prevent abuse, and keep the service secure and reliable.
- Manage subscriptions and billing (through Paddle) and provide support.
- Improve and maintain the service, diagnose problems, and comply with legal obligations.
AI processing & subprocessors
To generate AI responses and moderation decisions, message content sent to features like /ask, /learn, moderation, and digests is transmitted to third-party AI providers that process it on our behalf:
- Groq — our primary large-language-model inference provider.
- Anthropic (Claude) — used as a fallback for inference.
We also rely on these service providers to operate ngbot:
- Paddle — payment processing as our Merchant of Record.
- Cloudflare — DNS, CDN, and email routing.
- Cloud VPS hosting — where the ngbot application and its database run.
Data sharing
We do not sell your data or share it for advertising. We share data only with the subprocessors listed above, and only as needed to run the service. We may also disclose data if required by law, to protect our rights or the safety of users, or in connection with a business transfer (in which case this policy will continue to govern your data).
Data retention
We keep your server's data while ngbot is in your server and for as long as needed to provide the service. When you remove the bot, or when you request deletion, we remove the associated data. You can also ask us to delete specific data (such as particular knowledge-base entries) at any time by emailing hello@ngbot.ai.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. This includes GDPR-style rights (for users in the EU/UK) and CCPA-style rights (for California residents), such as the right to know what we collect and the right not to be discriminated against for exercising your rights. To exercise any of these:
- Email us at hello@ngbot.ai, or
- Remove the bot from your server to stop collection and trigger deletion of its data.
Data security
We use reasonable technical and organizational measures to protect data, including access controls, encryption in transit, and limiting data access to what is necessary to operate the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incidents.
International transfers
ngbot operates from Saudi Arabia and uses service providers that may process data in other countries. As a result, your data may be transferred to and processed in jurisdictions with different data-protection laws than your own. Where required, we take steps to ensure such transfers are subject to appropriate safeguards.
Children
ngbot is used through Discord, which requires users to be at least 13 years old (or older where local law requires). ngbot is not intended for children under that age, and we do not knowingly collect data from them. If you believe a child has provided data to us, contact hello@ngbot.ai and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Please review this page periodically.
Contact
For any privacy question or request, contact us at hello@ngbot.ai.