Privacy Policy

Yuuri ("the bot", "we") is a Discord bot with an AI chat companion, voice chat, music and server tools (welcome messages and images, reaction roles, role announcements, logs, tickets, auto roles and Auto Mod), plus this website with a dashboard. This policy explains what we store, why, who it is shared with, and how you can see or delete it.

1. What we collect

When you talk to Yuuri's AI

This happens when you say her name, @mention her, reply in a room a server admin set up for her, or talk in a voice channel she joined with /voicechat.

Data	Why	How long
The message you sent her (text, and images attached to it or to the message you replied to)	To write her reply	Your last 10 messages with her, per server
Short notes about you the AI picks out of your messages (your name, likes, dislikes, hobbies, chat style, language)	So she remembers you	Until you or a server admin delete them
A short summary of what you said about other server members	So she understands the people around you	Until deleted
A relationship score (0 to 100) and short reasons for changes	Her personality reacts to how you treat her	Until deleted (last 20 changes kept)
First-seen date and message count	Greeting new people, basic stats	Until deleted
Voice: what is said in the voice channel while she is in it	Turned into text so she can reply; a short summary of the topics is kept per server	Audio is processed in memory and never saved. Transcripts last only for the live session; the topic summary stays until a server admin wipes it

All AI data is kept separately for each server: what you say in one server is never used in another.

Server tools

Settings that server admins choose (channels, roles, welcome message and welcome image design, reaction roles, tickets, logs, auto roles, Auto Mod rules), with server, channel and role IDs.
Logs: if admins turn them on, Yuuri posts events in the server's own log channels: edited and deleted messages (including their text), joins and leaves with the invite used, role and moderation changes, voice activity. Message text is only kept in memory while the bot runs, to show what was deleted; it is not saved by us.
Tickets: when a ticket is closed, a transcript of the ticket channel is posted in the server's ticket log channel. We keep ticket numbers and who opened open tickets.
Auto Mod: checks messages in the server for the rules admins turn on (invite links, banned words, dangerous links, spam). If the NSFW image rule is on, images are sent to the AI provider to be checked. Messages that break a rule are deleted and posted in the server's Auto Mod log.
Welcome image: made from the new member's display name and profile picture and the server's design; it is sent in the server and not stored.
Usage counters: daily numbers of AI requests, tokens and voice minutes per server, with no message content.

What we do not collect

Messages that aren't addressed to Yuuri are not stored, except where a server's admins turned on the tools above (which post into that server's own channels). We don't collect your IP address for tracking, and we don't store card or bank details. We only get your email address if you email us.

2. The website

Log in with Discord

When you log in, Discord gives us your user ID, username, display name and profile picture, and the list of servers you are in with your permissions there (Discord's identify and guilds permissions). We use them to show your account and the servers you can manage, and to check, every time you change a setting, that you are still allowed to. We keep the login (with the access key Discord gives us) for 30 days after your last visit, so you don't have to log in every time. Log out to end it at once.

Cookies

yuuri_session: keeps you logged in (30 days). Needed for the dashboard; set only when you log in. We store only a scrambled (hashed) copy of it.
yuuri_region: remembers whether to show prices in Thai Baht or US dollars (1 year). Set only if you press Accept on the cookie banner. If you decline, prices are shown in dollars and nothing is saved.

We use no advertising or tracking cookies and no analytics.

Contact support chat

When you start a support chat we keep your Discord name, username, profile picture link, the topic, the server you picked (with its plan) and the messages in the chat. Only the Yuuri team can read them. If the team has set up a Discord support channel, the chat is also copied there. Closed chats are deleted 30 days after they close. If someone keeps misusing support, the team can block them from support for a number of days; we keep that block until it ends.

Public Servers list

If a server's owner or an Administrator adds it to the Servers list, its name, icon, member count, description, category, language, tags, invite link, and when it was listed and last bumped are shown to everyone, including people who are not logged in. We don't store who added the listing. It stays until an admin removes it, the team removes it, or Yuuri leaves that server. If the team blocks a server from the list, we keep its server ID so the block stays in place.

Plans (subscriptions) and payments

For each server with a plan we keep the plan, its last day, and, if it was cancelled, the date and the Discord ID of the person who cancelled it. For an auto-renew plan we also keep the Stripe customer and subscription IDs, whether it is monthly or yearly, and its payment status, so we know when it renews. For a Pay once plan we keep the IDs of its recent Stripe payments, whether it is monthly or yearly, and its status. While a payment page is open we keep its Stripe ID and the time it was opened, for up to 2 days, so a finished payment isn't missed. Your payment details (such as your card number, expiry date and security code, or your PromptPay payment) and the email and billing details you give on the payment page go to Stripe only; we never receive or store them.

3. Who we share it with

We do not sell your data or use it for advertising. To work, the bot sends data to these services:

OpenRouter (openrouter.ai), which passes the request to an AI model provider (currently OpenAI and Google models): your message, images, recent chat history, the notes about you, voice audio, and images checked by Auto Mod. If the operator turns it on, requests may instead go directly to OpenAI or Anthropic.
DuckDuckGo: search queries, when Yuuri looks something up for you.
MyMemory (mymemory.translated.net): Thai search queries, translated to English before searching.
Microsoft Edge text-to-speech: the text of Yuuri's own spoken replies in voice chat.
Music sites (SoundCloud, YouTube, Bandcamp, Vimeo, Twitch): the song name or link you ask for with /play. For a YouTube link, YouTube is asked for the video's title and channel name, and those are searched on SoundCloud.
Websites Yuuri opens when you share a link, she searches the web, or a server uses a picture link (for example a welcome image background). Only the page address is sent.
Stripe (stripe.com), our payment provider: when you buy a plan, the plan, price, server ID and your Discord ID, and on its own page your payment and billing details. Stripe uses them to take and renew the payment and to prevent fraud. If you pay with Google Pay, Apple Pay, Link or PromptPay, that service or your bank also handles the payment.
DigitalOcean (digitalocean.com), which provides the cloud server in Singapore where the bot, the website and the data we store are kept. Your data may therefore be stored and handled outside your country.
Discord, which hosts all messages and voice, and handles the website login.

Each service handles data under its own privacy policy.

4. Your choices and rights

You can do all of this yourself, at any time, from any server or in DMs with the bot:

/pr info: a summary of this policy.
/pr mydata: download everything stored about you (a JSON file), in every server.
/pr forget: permanently delete everything stored about you in every server, including what others said about you, your website logins and your support chats.
/pr memory off: Yuuri stops storing anything about you and ignores your voice in voice chat (she can still reply). Turn it back on with /pr memory on.

Server admins can wipe all of Yuuri's AI memory for their server with /ai_forget_server or on the dashboard's Server Data page.

If you can't use the commands, contact us and we'll do it for you. Depending on where you live you may have more rights, for example under Thailand's Personal Data Protection Act B.E. 2562 (PDPA) or the EU GDPR, such as asking us to correct your data or to stop using it. Contact us to use them.

5. How long we keep it

Data stays until you, a server admin, or the operator deletes it, within the limits above.
When the bot is removed from a server, that server's AI data is deleted automatically 30 days later (unless the bot is added back before then).
Website logins end 30 days after your last visit, or when you log out.
Support chats are deleted 30 days after they close.
Daily usage counters contain no personal data and are kept for cost tracking.

6. Security

Data is stored in a database on a private cloud server (see DigitalOcean in section 3). The database can't be reached from the internet, and the website uses an encrypted (HTTPS) connection. Secret keys are kept out of the code and the website, and only a scrambled copy of your login cookie is stored. The website only accepts changes sent from its own pages, and checks your Discord permissions every time. Only the operator can log in to the server.

7. Children

Discord requires users to be at least 13 (or older where local law requires). Yuuri is not meant for children under that age and we don't knowingly collect their data. If you believe a child's data is stored, contact us and we'll delete it.

8. Changes

When this policy changes we update the date at the top. Big changes are announced in our Discord support server.

9. Contact

Questions, or a request to see or delete your data:

Email: Pannatat.aut@gmail.com
Discord support server: discord.gg/SkmTArJ3uQ
On this website: Contact support (needs a Discord login)