Noor — Privacy Policy
This Privacy Policy explains what data Noor collects, why we collect it, who can see it, and how you can access or delete it.
1560959277672439879)This Privacy Policy explains what data Noor (“the Bot”) collects when you add it to a Discord server or use its commands, why we collect it, who can see it, how long we keep it, and how you can access or delete it. It is written to match how the Bot actually works. By using the Bot you agree to this policy. If you do not agree, remove the Bot and stop using it.
1.Summary
- Noor stores the settings and personal lists you create (playlists, favorites, AFK, preferences, Premium status).
- Noor reads message text to run commands and server tools. Ordinary chat is checked in memory and is not stored. Messages that run a command are logged to a private operator log.
- Noor does not record voice audio, does not read presences, and does not sell your data.
- Payments are handled by a payment processor. We never see your UPI ID, card, bank, or phone number.
- You can ask us to delete your data at any time (see Section 9).
2.Data we collect
2.1 Identifiers from Discord
Discord user ID, username/tag, avatar URL, server (guild) ID and name, channel IDs and names, role IDs, and server owner ID and member count. Used to apply settings, check permissions, display profiles, and operate features.
2.2 Data you choose to give us (stored)
| Feature | What is stored |
|---|---|
Playlists (pl-* commands) | Playlist names, track lists, creation time, share codes and expiry |
Favorites (+favorite, like) | Your liked tracks |
+afk | Your AFK reason and the time you went AFK |
+autoresponse | Trigger phrases and replies configured by server admins |
+antilink | Module settings and a whitelist of member IDs |
+247, +setpanel, +engine, +autoplay, prefix, ignore list, node choice | Per-server or per-user preferences (ID + setting) |
Spotify profile link (+login) | Discord ID, Spotify ID, display name, follower count, profile URL, avatar. Database has fields for OAuth tokens, but Bot does not currently use Spotify sign-in to collect them |
| Premium, trial, vouchers | Premium status, plan, expiry, trial-claimed flag, voucher redemptions, and premium logs |
| Profile and statistics | Commands used, listening time in voice, coins, badges, song statistics |
| Blacklist | User or server IDs we have restricted, and the reason |
2.3 Message content (MESSAGE_CONTENT intent)
The Bot reads message text for four purposes: running prefix commands, anti-link and anti-phishing checks, keyword auto-responses, and AFK mention detection.
- Normal messages are analyzed in memory and are not saved.
- A message that runs a command is logged. The operator log receives the full text of that message, your username and ID, the server name and ID, and the channel name and ID (see Section 3).
- Messages sent by bots are ignored. Message content is never used to train or evaluate AI or machine learning models.
2.4 Member data (GUILD_MEMBERS intent)
Used to detect whether any human listeners remain in a voice channel (so the Bot can leave when empty), to run join-time server checks, and to resolve permissions and whitelists. Noor does not request the Presence intent and does not read your online status or activity.
2.5 Direct messages
The Bot may receive direct messages sent to it and may DM server owners for important notices (for example a server join confirmation or a service notice). It does not use DM content for any purpose beyond handling your request.
2.6 Voice
Noor streams audio into a voice channel. It does not record, store, or process the audio of users speaking. It records when you join and leave a voice channel that the Bot is in, to calculate listening time.
2.7 Payments
Premium purchases use FamGateway (UPI). We send the plan, amount, and a placeholder identifier derived from your Discord ID. We do not receive or store your UPI ID, bank account, card number, or phone number. We keep the resulting order, plan, and expiry record.
2.8 Playback, diagnostics and technical data
Track title, duration, source, requester ID, the server where a track plays, queue and player state, error and exception details, command counts, shard/cluster and latency metrics, and join/leave events for servers. We do not collect your IP address through the Bot; Discord does not give it to bots.
2.9 Reports and support
If you submit a report or contact support, we keep what you send and the related user and server IDs.
3.Operator logs
To run and protect the service, the Bot posts events to private Discord webhooks that only the operator team can read:
- Command log: user tag and ID, server name and ID, channel name and ID, full command message text, command count.
- Player log: track title, duration, source, requester, server name and ID.
- Server log: server joins and leaves with server name, ID, owner ID, and member count.
- Error and report log: error details and user-submitted reports with server context.
- Moderation log: blacklist actions.
Webhook messages are stored by Discord under Discord's own policies. We delete or purge old log entries at least every 90 days, and earlier on a valid deletion request.
4.How we use data
We use data to:
- Provide Noor's features and apply your settings.
- Run Premium, trials, and vouchers and process purchases.
- Prevent spam, abuse, raids, fraud, and violations of our Terms (including blacklisting).
- Diagnose errors, improve stability and performance, and show usage statistics.
- Respond to support requests and legal obligations.
We do not sell, rent, or trade your data. We do not use it for advertising or profiling, and we do not use message content to train AI or machine learning models.
5.Legal bases (where applicable)
Where laws such as the GDPR or UK GDPR apply, we rely on: performance of a contract (providing the Bot and Premium), legitimate interests (security, abuse prevention, diagnostics), consent (for example when you link Spotify or enable a feature), and legal obligation. Where India's Digital Personal Data Protection Act, 2023 applies, we process data on the basis of your consent and for the legitimate uses it permits.
6.Who we share data with
| Recipient | What they receive | Why |
|---|---|---|
| Discord | All interaction with the Bot happens on Discord | Platform |
Lavalink audio nodes (including echo.rozhost.in) | Track queries and URLs, plus server and voice-session IDs needed to stream | Audio playback |
| Music & metadata sources (Spotify, YouTube, SoundCloud, lrclib.net) | Search text, track identifiers, or URLs. No Discord user IDs | Search, playback, lyrics |
| Database host (MongoDB Atlas) | Spotify-link records | Storage |
| Hosting provider (RozHost.in) | Server-side files and databases on our infrastructure | Hosting |
| Payment processor (FamGateway) | Plan, amount, placeholder identifier | Premium payments |
| Top.gg | Your Discord ID for vote checks | Vote rewards |
| Authorities | Data required by a valid legal request | Legal compliance |
We may also share data if the Bot or its operation is transferred to another operator, in which case this policy continues to apply unless you are told otherwise. Third parties have their own privacy policies, which we do not control.
7.International transfers
Our servers and providers may be located outside your country. By using the Bot you understand your data may be processed in other countries, which may have different data protection laws. Where required, we use reasonable safeguards for such transfers.
8.Retention
| Data | Kept until |
|---|---|
| Playlists, favorites, AFK, preferences, profile and statistics | You or a server owner delete them, or we delete them on request or after long inactivity |
| Per-server settings | The server owner resets them, or the Bot is removed (see below) |
| Operator logs | Purged at least every 90 days |
| Premium, payment and voucher records | As long as needed for accounting, fraud prevention, and dispute handling |
| Blacklist records | As long as the restriction is needed to prevent abuse |
| Spotify link | Until you unlink it or ask us to delete it |
When the Bot is removed from a server, it deletes that server's prefix, preset, ignore list, Premium record, and 24/7 setting automatically. Any other data tied to that server (such as anti-link and auto-response configuration) is deleted on request, and we may also remove it during routine cleanup.
9.Your choices and rights
- Access, correction, deletion: Contact support@rozhost.in or ask in the support server, from the Discord account concerned, and we will delete your playlists, favorites, AFK data, profile data, and Spotify link, usually within 30 days. We may keep records we must retain for payments, fraud, or abuse prevention.
- Server data: A server owner can reset the Bot's server data with the reset command (
+resetall, owner only) or remove the Bot. - Stop message processing: Admins can disable
+antilink, remove auto-responses, and remove the Bot at any time, which stops all message reading. - Unlink Spotify: Use the Spotify unlink command (
+unlinkspotify) or ask us. - Regional rights: Depending on where you live, you may have rights to access, correct, erase, restrict, or port your data, to object to processing, to withdraw consent, and to complain to a regulator. We will not discriminate against you for using these rights.
To protect your account, we may ask you to verify that you control the Discord account before acting on a request.
10.Children
Discord requires users to be at least 13 years old (or the minimum age in your country). Noor is not directed at children and we do not knowingly keep data from users below that age. If you believe a child's data is held by us, contact support@rozhost.in and we will remove it.
11.Security
We use reasonable technical and organizational measures, including access-restricted servers, private webhooks, and limited operator access. No system is completely secure, and we cannot guarantee absolute security. If a breach affecting your data occurs, we will take reasonable steps to notify affected users and authorities where the law requires.
12.Cookies and tracking
The Bot has no cookies and no advertising trackers. If we publish a website for the Bot, it will be covered by its own notice.
13.Changes to this policy
We may update this policy from time to time. We will post the new version in the support server or on our website and change the effective date above. If a change is material we will make a reasonable effort to notify you. Continued use after the effective date means you accept the update.
14.Grievance and contact
Operator: Pawan
Email: support@rozhost.in
Support server: https://discord.gg/DhackaaJ7m
We aim to reply to privacy requests within 30 days.