Privacy Policy

The data controller is the operator of Zymi:

• Operator: azym76, Russia
• Contact e-mail: support@azym76.com
• Terms: Terms of Service

We have not appointed a Data Protection Officer. Write to the address above about anything in this policy.

Zymi works only on Discord servers whose administrators added it. It does not read direct messages and does not record anything said in voice channels.

We do not collect e-mail addresses (unless you write to us), phone numbers, payment details or passwords. You are responsible for any personal data of other people that you post on a Discord server where Zymi works.

The data of a server is shown to that server's staff, and some of it ends up in Discord itself:

• The server's staff see the data of their own server in the dashboard, limited to the permissions its administrators gave them. Access to message text and attachments is restricted by a separate permission and recorded in the audit log.
• Log channels. Where a server has set them up, Zymi posts events there as Discord messages, which may include the earlier text of an edited or deleted message. You may also be told about a timeout, kick or ban by a direct message.
• Ticket transcripts. When a ticket is closed, its transcript may be posted to a channel the server's administrators chose.
• Economy. Your balance and what you bought can be shown in the Discord server to anyone who can use the commands there, for example in the picture of your inventory, which includes your avatar. The staff may also be shown the richest members and the latest operations.
• Uploaded pictures for shop items and ticket panels are served at a public address, since every member is shown them.

Once posted, a log message or a transcript is a message on Discord like any other: Discord stores it, whoever the server lets into the channel can read it, and the server's administrators, not we, decide how long it stays. It is not deleted when our own copy expires, nor when we carry out a deletion request.

• Messages are rated for toxicity and checked against spam rules.
• Archived images, video previews and pictures uploaded in the dashboard are rated for adult content.
• The fingerprint (hash) of each attached file is compared with lists of known malicious files.

A detection is shown to the moderators of the server concerned who hold the required permission. Where the staff have turned it on, a notice is also posted to a channel of that server; it names the member, the channel and the message, not the text of the message.

We look at a detection ourselves in two cases: when a moderator reports it as mistaken, together with the few messages around it, and when the adult-content check is not confident about a file. A file we find to be prohibited is removed from the archive, its fingerprint is kept so that it is not stored again, and we may report it to Discord or to the competent authorities where the law requires or permits it. An uploaded picture that the check flags is not shown until we have looked at it.

The models run on our own servers. No message or file is sent to an external AI provider, and nothing is used to train a model.

A detection is a hint attached to a message, not a score or a label on a member. Zymi takes no moderation action on its own: every action is a person's decision. Nothing is inferred about your health, age, sexual orientation, beliefs or relationships with other people.

• Moderation record, logs, tickets, statistics and automated checks: legitimate interests (GDPR Article 6(1)(f)), namely the interest of a server's administrators in keeping their community safe, investigating breaches of its rules and keeping an accountable record of moderation.
• The dashboard, the shops, the economy and Premium keys: performance of a contract (Article 6(1)(b)): providing the features you or your server chose to use.
• Security and abuse prevention (rate limits, records of failed Premium key attempts, review and removal of prohibited content): legitimate interests in keeping the service safe.
• Counting visits to this website: legitimate interests in knowing how the website is used, without cookies and without identifying you.
• Answering you when you send feedback or write to us: legitimate interests in handling your request.
• Legal obligations and legal claims (Article 6(1)(c) and (f)): we may have to disclose data when public authorities lawfully request it, and may use it in court or in the steps leading to legal action over misuse of the service.

Where we rely on legitimate interests, you may object, giving a reason related to your situation. We then stop unless there are compelling grounds that override your interests, or the data is needed for legal claims.

• Discord Inc. (United States): Zymi works through Discord, which processes its users' data under its own privacy policy, independently of us.
• Cloudflare, Inc. (United States and its location nearest to you): all traffic of this website passes through Cloudflare, which protects it from attacks and delivers it. Cloudflare also counts visits (Cloudflare Web Analytics) on every page of this website, the dashboard included. That service sets no cookie, stores nothing in your browser and does not follow you to other websites. What it receives includes the addresses of the pages visited, which in the dashboard contain the IDs of Discord servers and members; no message text or files. See Cloudflare's privacy policy.
• Our hosting provider (=SPACECORE SOLUTION LTD.): the servers are rented from it. It supplies the infrastructure and does not use the data for purposes of its own.
• Authorities and advisers, where the law requires it or to defend legal claims.

Data from Discord is not sold, is not shared with advertisers or data brokers, is not used to train AI models and is not used to build a profile of you across servers.

This website uses only strictly necessary cookies:

• Session cookie: keeps you logged in to the dashboard, plus a short-lived one during login. Without them the dashboard cannot work.
• Cloudflare security cookies: Cloudflare may set them to tell people from automated traffic.

There are no analytics or advertising cookies, so no consent banner is shown. You can delete or block cookies in your browser; blocking the session cookie makes it impossible to log in.

The data is stored on servers we operate in Germany. Discord and Cloudflare may process data in the United States and other countries outside yours. Where data leaves the EU/EEA, the safeguards of Chapter V of the GDPR apply, such as adequacy decisions and Standard Contractual Clauses.

• Message text, edit history and archived attachments: 90 days by default. A server may choose a shorter period or, where its limits allow it (for example with a Premium key), a longer one of 180 days at most. When those limits become lower, messages older than the period then allowed are deleted.
• Results of automated checks (scores and detections): as long as the message they are about.
• Ticket conversations and their attachments: 365 days.
• Activity statistics per member: 180 days.
• Economy, a server's currency (balances, all-time totals, purchases, deposits): for as long as Zymi is on the server: they are what a member has earned and bought there.
• Economy, the list of operations and the daily sums earned by activity: 180 days.
• Economy, the global currency (balance, all-time totals, purchases): until 365 days have passed without any change to the balance.
• Membership history (joins, leaves, role and name changes) and voice sessions: for as long as Zymi is on the server: they make up each member's journal and the server's statistics.
• Moderation records (bans, kicks, timeouts, notes, purges, markers): for as long as Zymi is on the server: moderating consistently needs the full record of earlier sanctions.
• The dashboard's audit log: for as long as Zymi is on the server: it lets the server's management account for who did what with Zymi.
• Premium keys (who issued and who activated a key, for which server, until when): for as long as Zymi is on the server the key was activated for; a record that the key was used is kept after that.
• Failed attempts to activate a Premium key (who, on which server, when; never the key entered): 30 days.
• Pictures uploaded in the dashboard (shop items, ticket panels), with who uploaded them: until the picture is replaced or its item or panel is deleted. The record of a picture removed as prohibited (who uploaded it, and the file's fingerprint) is kept.
• Dashboard sessions: 7 days, or 24 hours without activity.
• Everything about a server: deleted 24 hours after Zymi is removed from it.
• Visit statistics of this website: as set out by Cloudflare.

Deleting a message in Discord does not delete our copy at once: keeping it available to the server's moderators is what the copy is made for. It is deleted when its retention period ends. A server's administrators may shorten that period at any time.

Databases and archived files are encrypted at rest, the dashboard is served over HTTPS behind Cloudflare, and access to message text and attachments is restricted by permissions and recorded in an audit log. No service is completely secure, but we work to keep yours safe.

To the extent the law that applies to you allows, you have the right to:

• Access your data and get a copy of it.
• Rectify data that is inaccurate.
• Erase your data (see below).
• Restrict its processing in certain cases.
• Port it: receive it in a structured, machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on it.
• Complain to your data protection authority.

Requests are free of charge. We answer as early as possible and always within one month. We may refuse a request that is manifestly unfounded or excessive, in particular a repeated one, and will say why.

This section applies to residents of US states whose privacy laws apply to them, and uses "personal information" and "sale" as those laws define them.

• Identifiers (Discord account data): not sold and not shared. Source: Discord Inc.
• Internet or other electronic network activity (activity on Discord servers; the technical data of visitors of this website): activity on Discord servers is not sold and not shared. The technical data of visitors is available to Cloudflare, Inc., which under the broad definition of some of these laws may count as a sale.
• Audio, electronic, visual or similar information (message text and attached files): not sold and not shared.
• Inferences (the results of automated checks): not sold and not shared.

We receive no payment for any personal information and do not share it for cross-context behavioural advertising. You have the right to know, correct, delete and get a copy of your personal information, to opt out of its sale, and not to be treated differently for using these rights. Make a request as described in section 11.2; an account with us is not needed.

You must be older than 13 to use Zymi, as the Terms of Service say, and must meet the minimum age Discord requires in your country where it is higher. Zymi is not directed at younger children and we do not knowingly collect their data. A parent or guardian who believes we hold data of such a child can write to support@azym76.com to have it deleted.

azym76, Russia
support@azym76.com

More details about how your data is collected or processed can be requested at this address at any time.

We may change this policy by updating this page; the date at the top shows the latest version. Where a change affects processing based on your consent, we will ask for it again where required. This policy was written with the EU General Data Protection Regulation and the Discord Developer Terms of Service and Developer Policy in mind.