> For the complete documentation index, see [llms.txt](https://docs.aicordapp.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aicordapp.com/documents/privacy-policy.md). # Privacy Policy Last updated: 2026.09.15 AICord (“AICord”, “we”, “our”, or “us”) is a Discord AI character platform and SaaS service operated by **AICord LLC**. This Privacy Policy explains what personal data we process, why we process it, how it is used, how long it is retained, when it may be shared with service providers, and the rights available to you under applicable data-protection law, including the General Data Protection Regulation (“GDPR”) where applicable. *** ### 1. Data Controller **AICord LLC** Montana, United States\ **Montana Secretary of State File No.:** C1571306\ **Registered Office:** 1001 S. Main St., Suite 600, Kalispell, MT 59901, United States\ **Privacy & Legal Contact:** The registered office is provided for official and legal correspondence and is not a customer-facing office. AICord LLC is the controller for the personal data processing described in this Privacy Policy, except where another party independently determines the purposes and means of processing. Where applicable law requires AICord to designate a representative or additional contact within a particular jurisdiction, the relevant information will be provided in the manner required by that law. *** ### 2. Personal Data We Process The categories of personal data processed by AICord depend on how you use the service. #### 2.1. Discord and account information When you interact with AICord through Discord or use our dashboard, we may receive or process information such as: * Discord username and display name * Discord user ID * Discord avatar and related profile information made available through Discord * Discord server/guild information relevant to the operation of AICord * Account and authentication information * Character, server, and account configuration * OAuth authorization information where you connect an AICord-supported application or integration We process this information to authenticate users, operate the service, associate configurations with the appropriate account, and provide requested features. #### 2.2. Messages and user-provided content When you communicate with an AICord character, we process the content necessary to generate the requested response and provide related features. This may include: * Messages sent to AICord characters * Conversation history * Character and server context * User-created character information * Uploaded or otherwise user-provided content * Information contained within those messages or materials AICord does **not use user conversations to train its own AI models**. Depending on the feature used, relevant content may be transmitted to third-party AI or infrastructure providers for processing on AICord's behalf. #### 2.3. Subscription and payment information Payments are processed by third-party payment providers such as Stripe. AICord does not store full payment-card numbers. Depending on the payment method and transaction, AICord may receive information such as: * Payment and subscription status * Email address * Customer information * Subscription plan * Transaction information * Country or billing-location information * Fraud-prevention and payment-related metadata Your Discord account may be associated with your subscription or customer account so that we can provide account management and support. #### 2.4. Automatically collected information Depending on how you use AICord, we may process: * Message and feature usage statistics * Request counts and rate-limit information * Performance and latency information * Error and diagnostic logs * Security and abuse-prevention information * IP address when using the web dashboard * Browser, device, and technical information associated with dashboard requests * Authentication and session information IP addresses are not intentionally collected from ordinary Discord bot interactions solely because a user sends a Discord message. #### 2.5. Voice features If you use an AICord voice feature, audio may be processed to provide the requested voice functionality. Depending on the feature, audio may be transmitted to speech-to-text, text-to-speech, voice-processing, or other service providers. Voice data is not retained indefinitely. Where a particular feature requires persistent audio—for example, a voice-cloning reference—such audio is retained only as necessary for that feature and may be deleted in accordance with the applicable feature's deletion controls. #### 2.6. Information received from third parties AICord may receive information from third-party services that you use to access or interact with AICord, including: * Discord * Payment providers such as Stripe * Authentication or integration providers * Services used to provide requested AICord features The information received depends on the permissions, integrations, and features involved. *** ### 3. User-Provided Sensitive or Special-Category Data AICord does not require users to provide sensitive or special-category personal data in order to use the ordinary service. Special categories of personal data under Article 9 GDPR can include information concerning: * Health * Sexual orientation or sex life * Political opinions * Religious or philosophical beliefs * Trade-union membership * Genetic data * Biometric data used for uniquely identifying a person * Racial or ethnic origin AICord does not intentionally request such information as a general-purpose data category. However, because AICord is an interactive user-generated-content platform, users may voluntarily include personal information, including potentially sensitive information, in messages or other content. Users should avoid submitting sensitive or special-category personal data unless the relevant feature requires it. Where AICord processes special-category information contained in user-provided content, the processing is limited to what is necessary for the applicable service functionality and is not treated as a separate commercial purpose such as advertising or sale of personal data. AICord does **not** rely on the mere act of using AICord, silence, or the mere submission of a message as a substitute for an explicit consent mechanism where explicit consent is legally required. Where a feature specifically requires consent as its legal basis, AICord will request that consent through an appropriate affirmative mechanism and provide a means to withdraw it. You may also contact to request deletion of user-provided content, subject to applicable legal or technical limitations. *** ### 4. How We Use Personal Data We process personal data for purposes including: #### Providing and operating AICord * Generating AI responses * Maintaining conversation context and memory features * Operating characters and servers * Maintaining account and character settings * Providing integrations and requested functionality * Authenticating users and maintaining sessions #### Account and subscription management * Creating and managing accounts * Processing subscriptions and payments * Providing customer support * Managing credits, usage limits, and service entitlements * Detecting and preventing payment fraud #### Security and abuse prevention * Detecting abuse, spam, fraud, and unauthorized use * Enforcing service limits * Protecting AICord, users, and infrastructure * Investigating security incidents * Maintaining system reliability #### Service operation and improvement * Diagnosing technical problems * Monitoring system performance * Measuring aggregate service usage * Debugging and improving reliability * Developing and improving AICord features AICord does **not sell personal data** and does not rent personal data to third parties for their own advertising purposes. *** ### 5. Legal Bases for Processing Where the GDPR applies, AICord relies on an appropriate legal basis for each processing activity. Depending on the circumstances, these may include: #### Performance of a contract We process information where necessary to provide the services requested by you or to perform our contractual obligations. Examples include: * Providing AI responses * Maintaining your account * Operating your characters and server configurations * Managing subscriptions and service entitlements #### Legitimate interests We may process information where necessary for legitimate interests pursued by AICord, provided those interests are not overridden by the rights and freedoms of the individual. Examples may include: * Security * Abuse prevention * Fraud prevention * Service reliability * Debugging * Technical analytics * Protecting AICord and its users #### Consent Where consent is required or where AICord specifically chooses consent as the legal basis for an optional feature, we will request consent through an appropriate mechanism. Consent can be withdrawn at any time where processing is based on consent. Withdrawal does not affect processing that was lawful before withdrawal. #### Legal obligations We may process information where necessary to comply with applicable legal obligations, including accounting, financial, tax, fraud-prevention, security, or other legally required recordkeeping. The applicable legal basis depends on the particular processing activity and the circumstances in which the information is processed. *** ### 6. Automated Processing and AI Systems AICord uses automated AI systems to generate responses and operate certain service features. The output generated by an AICord character is not intended to constitute a legal, financial, medical, employment, credit, insurance, or similarly consequential determination about a user. AICord does not use its AI character system to make decisions producing legal effects or similarly significant effects concerning users. Service controls such as rate limits, abuse detection, fraud prevention, account restrictions, and security measures may involve automated or semi-automated processing. Where a decision is subject to applicable data-protection rights regarding automated decision-making, users may contact AICord at . *** ### 7. Data Retention AICord retains personal data only for as long as reasonably necessary for the purpose for which it was collected, taking into account the nature of the data, the functionality involved, security requirements, contractual obligations, and applicable legal requirements. Different categories of data may therefore have different retention periods. #### Conversation and memory data Conversation and memory data may be stored to provide conversation history, character memory, and related functionality. Unless deleted earlier through an applicable deletion mechanism, certain conversation-related data may be subject to AICord's automatic deletion lifecycle, including a retention period of up to **182 days** for applicable stored conversation data. Plan-specific memory limits determine how much information can be retained for a particular character or feature; they do not by themselves constitute a legal retention period. #### Server and character configuration Server, character, and account configuration is retained while necessary to provide the associated service. It may be deleted when the relevant character, account, integration, or server configuration is removed, subject to backups, security records, legal obligations, and other legitimate retention requirements. #### Billing and transaction records Billing and transaction information may be retained for the period required by applicable accounting, tax, financial, fraud-prevention, or legal obligations. Certain financial records may therefore be retained for several years even after an account is closed. #### Security and diagnostic logs Security, abuse-prevention, and diagnostic logs are retained only for as long as reasonably necessary for security, troubleshooting, service integrity, and legal purposes. #### Voice data Voice data is generally processed only for the requested voice functionality and is not retained unless persistent storage is required by a particular feature. Where data is no longer required for the relevant purpose and no legal basis for continued retention exists, it will be deleted or anonymized. *** ### 8. Data Sharing and Service Providers AICord does not sell or rent personal data. We may share or make personal data available to service providers where necessary to operate AICord. Depending on the features used, these may include: #### Discord Discord provides the communication platform through which AICord's Discord functionality operates. Information may be exchanged with Discord as necessary for bot operation, authentication, messaging, and other Discord functionality. #### Payment providers Payment providers such as Stripe process payment and transaction information necessary to process subscriptions and payments. #### Hosting and infrastructure providers AICord uses infrastructure and cloud-service providers to host application servers, databases, networking infrastructure, backups, monitoring, and related systems. #### AI and model providers AICord may transmit relevant user-provided content to AI or model-inference providers when necessary to generate requested responses or provide an AI-powered feature. The data transmitted depends on the feature and provider involved. #### Other service providers AICord may use additional providers for services such as authentication, email, monitoring, security, voice processing, analytics, or other infrastructure. Service providers receive only information reasonably necessary for the services they provide and, where required, are subject to contractual data-protection obligations. AICord selects and manages relevant service providers with regard to applicable data-protection and security requirements. *** ### 9. International Data Transfers Depending on the service, provider, and location of the user, personal data may be processed or made available outside the European Economic Area (EEA). Where the GDPR's rules on international transfers apply, AICord relies on an applicable transfer mechanism under Chapter V GDPR. Depending on the recipient and circumstances, this may include: * A European Commission adequacy decision * Standard Contractual Clauses * Other appropriate safeguards permitted under applicable data-protection law * A legally available derogation where applicable For example, transfers to participating U.S. organizations may be covered by the EU-U.S. Data Privacy Framework where the relevant organization and transfer qualify for that mechanism. Other transfers may rely on Standard Contractual Clauses or another applicable safeguard. The specific transfer mechanism depends on the recipient and processing arrangement. Individuals may contact to request information about the safeguards applicable to a particular international transfer, subject to legitimate confidentiality and security considerations. *** ### 10. Your GDPR Rights Where the GDPR applies, you may have the following rights: * **Right of access** — obtain confirmation as to whether we process your personal data and request a copy. * **Right to rectification** — request correction of inaccurate or incomplete personal data. * **Right to erasure** — request deletion of personal data where the legal requirements for erasure are satisfied. * **Right to restriction** — request restriction of processing in circumstances provided by law. * **Right to object** — object to certain processing, including processing based on legitimate interests in circumstances provided by law. * **Right to data portability** — receive certain personal data in a structured, commonly used, machine-readable format where the legal requirements for portability are satisfied. * **Right to withdraw consent** — withdraw consent where processing is based on consent. * **Right to lodge a complaint** — lodge a complaint with a competent supervisory authority. To exercise your rights, contact: [**legal@aicordapp.com**](mailto:legal@aicordapp.com) We may request information reasonably necessary to verify your identity before fulfilling a request. We generally respond to GDPR rights requests within **one month** of receiving the request. This period may be extended where permitted by the GDPR, particularly where a request is complex or multiple requests have been made. Where an extension applies, we will inform you within the applicable initial period. *** ### 11. Data Security AICord maintains technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or destruction. Depending on the system and service involved, these measures may include: * Encryption in transit using HTTPS/TLS * Access controls * Secrets management * Isolated service or bot environments * Rate limiting and abuse detection * Restricted internal access * Security updates and dependency maintenance * Monitoring and diagnostic controls * Backup and recovery mechanisms No internet-connected service can guarantee absolute security. If AICord becomes aware of a personal-data breach requiring notification under applicable law, AICord will take the required steps under the applicable legal framework. *** ### 12. Cookies and Tracking Technologies AICord uses cookies and similar technologies primarily to operate and secure the web dashboard. #### 12.1. Essential cookies Essential cookies may be used for purposes such as: * Authentication and session management * Security * CSRF protection * Load balancing * Maintaining login state These technologies are necessary for the operation and security of the dashboard. #### 12.2. Functional technologies Where enabled, functional cookies or similar technologies may be used for: * User interface preferences * Dashboard settings * Language preferences #### 12.3. Analytics Where AICord uses optional analytics technologies, they are configured and used in accordance with applicable consent requirements. Where consent is required, non-essential analytics technologies will not be activated before the applicable consent is obtained. #### 12.4. Advertising and tracking AICord does not use advertising cookies for third-party behavioral advertising. AICord does not sell personal data to advertisers. You may manage applicable cookie preferences through the available cookie settings or your browser. *** ### 13. Children's Privacy AICord is not intended for children below the minimum age permitted by Discord and applicable law. Where applicable law establishes a higher minimum age or additional requirements for online services, those requirements apply. AICord does not knowingly seek to collect personal data from children who are not permitted to use the service. If you believe that a child who is not permitted to use AICord has provided personal data, please contact us at . *** ### 14. Third-Party Services AICord integrates with third-party platforms and services. Those services may have their own privacy policies and terms governing their processing of personal data. In particular, your use of Discord, payment services, and other third-party integrations may involve processing directly by those providers. AICord is not responsible for processing carried out independently by a third party acting as its own controller. Where a third party processes personal data on AICord's behalf, AICord seeks to maintain the contractual and organizational safeguards required by applicable law. *** ### 15. Changes to This Privacy Policy AICord may update this Privacy Policy from time to time to reflect changes in the service, processing activities, legal requirements, security practices, or other circumstances. The latest version will be published on this page together with its “Last updated” date. Where required by applicable law, significant changes will be communicated through appropriate channels, which may include the AICord dashboard, email, or Discord. *** ### 16. Contact and Complaints For privacy questions, GDPR requests, complaints, or other data-protection matters, contact: **AICord LLC**\ Montana, United States\ Montana Secretary of State File No.: C1571306\ Registered Office: 1001 S. Main St., Suite 600, Kalispell, MT 59901, United States\ **Privacy & Legal Contact:** EU/EEA users may also lodge a complaint with a competent data-protection supervisory authority where they believe that applicable data-protection law has been infringed. The registered office is provided for official and legal correspondence and is not a customer-facing office.