Shinobu Bot Privacy Policy

Last Updated: November 14, 2024

1. Legal Framework and Scope

1.1. Legal Framework

This Privacy Policy adheres to regulations such as GDPR, CCPA, COPPA, and Discord Terms of Service.

1.2. Scope and Purpose

This policy outlines the data processing principles and activities performed by Shinobu Bot on the Discord platform.

2. Definitions and Abbreviations

2.1. Key Definitions

  • Bot: Automated software on Discord.
  • Personal Information: Data linked to an individual.
  • Data Controller: Shinobu Bot's legal representative.

2.2. Technical Definitions

  • Prefix: Character sequence for bot commands.
  • Server ID: Unique identifier assigned by Discord.

3. Data Processing Principles

3.1. Core Principles

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization

3.2. Data Minimization Strategy

Only necessary data is collected, ensuring minimal storage and automatic disposal when data is no longer needed.

4. Data Categories and Processing Purposes

4.1. Data Categories Processed

  • Server Identification Number
  • Customized Command Prefix
  • Server Configuration Preferences

4.2. Processing Purposes

Data is used for service quality assurance, system administration, and legal compliance.

5. Technical and Administrative Security Measures

5.1. Infrastructure Security

  • Secure VPS with DDoS protection
  • SSL/TLS encryption for data transmission

5.2. Data Security

  • AES-256 encryption standard
  • Encrypted backup systems
  • Access logging
  • Database isolation
  • Regular security audits

5.2.2. Access Control

  • Role-based authorization
  • Two-factor authentication
  • Automatic session termination
  • IP restrictions
  • Access log maintenance

6. Data Retention and Disposal Policy

6.1. Retention Periods

  • Active Data: 30 days
  • Backup Data: 7 days
  • Log Records: 90 days
  • System Metrics: 180 days

6.2. Data Disposal Methods

6.2.1. Deletion

  • Software deletion
  • Physical deletion
  • Cryptographic deletion

6.2.2. Destruction

  • Physical destruction
  • De-magnetization
  • Overwriting

6.2.3. Anonymization

  • Masking
  • Data derivation
  • Aggregation

7. User Rights and Contact Information

7.1. User Rights

  • Right to access personal data
  • Right to data rectification
  • Right to erasure ("Right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to data processing
  • Right to lodge a complaint with a supervisory authority

7.2. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please contact us at:

Email: support@shinobubot.com

8. Corporate Governance and Responsibility

8.1. Organizational Structure

  • Data Controller
  • Technical Team
  • Security Team
  • Support Team

8.2. Responsibilities and Obligations

  • Ensuring legal compliance
  • Implementing security measures
  • Protecting user rights
  • Maintaining transparent communication

9. Compliance and Auditing

9.1. Internal Audit Mechanisms

  • Regular security audits
  • System log analysis
  • Staff training
  • Process improvements

9.2. External Audits and Certifications

  • Independent security audits
  • Penetration testing
  • Compliance certifications
  • Risk assessments

10. Communication and Support Mechanisms

10.1. Communication Channels

10.2. Support Processes

  1. Ticket System
  2. Priority Support Channel
  3. Bug Reporting System
  4. Feedback Mechanism

Final Provisions

This Privacy Policy and Data Protection Guidelines shall become effective upon publication. Any modifications to the Policy will be effective from the date of update.

Effective Date: November 14, 2024

Version: 3.0

Update Frequency: Every 6 months

This policy has been prepared in compliance with U.S. Federal and State privacy laws and regulations.

© 2024 Shinobu Bot. All rights reserved.

For California Residents: Under California Civil Code Section 1798.83, California residents have the right to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

For EU Users: If you are located in the European Union, you may have additional rights under the GDPR.

For Children Under 13: This service is not intended for users under the age of 13. We do not knowingly collect information from children under 13.