Last updated: October 29, 2026 | Effective since: August 10, 2023
Individual Operator Acknowledgment:
This service is operated by an individual developer, not a registered business entity. References to "we," "us," or "our" refer to the individual operator.
โ WE DO NOT SELL YOUR PERSONAL INFORMATION
We never sell, rent, or trade your personal data for advertising or marketing. Data is shared only with service providers (Discord, Cloudflare, Google Analytics, and our payment processor) that help us operate the service. Optional analytics providers receive data only after you consent.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Thrivebot and its associated website (https://www.thrivebot.in). If you do not agree with these terms, do not access the application.
Data Controller: This service is operated by an individual developer (Discord: @ocyeanic).
Contact Information:
Note: As an individual operator providing a non-commercial service, we do not maintain a public business address. All communication is handled via email and Discord for privacy and security reasons.
We may collect information you provide directly or that is automatically generated when using our bot, including:
| Data Category | Data Collected | Purpose |
|---|---|---|
| Personal Information | Discord username, user ID, avatar hash, Server ID, Channel ID, birth date (optional) | Core functionality & birthdays |
| Activity Data | Voice channel duration, message counts, command usage | Analytics and Insights |
| Ticket Data | Transcripts, messages, attachments, form answers, feedback ratings | Admin archival and support quality |
| Giveaway Data | User ID, entry count | Ensure fair participation |
| Levelling Data | User ID, Server ID, XP, Level, Prestige, XP event metadata (amount, source, timestamp) | Calculate levels and leaderboards |
| Trivia Game Data | User ID, points, wins, losses | Leaderboards |
| Website Analytics | Page paths (query strings removed), sanitized referrer, UTM campaign fields, coarse country, device type, browser, operating system, language, random session ID | Understand website usage (only with consent) |
When you use our website or complete server verification, we may automatically collect:
sessionStorage for the current tab session. This identifier is not linked to your Discord account.Legal Basis: Website analytics is based on your consent (GDPR Article 6(1)(a)) and is only collected after you accept analytics. Security logging is based on our legitimate interest in maintaining service security and preventing abuse (GDPR Article 6(1)(f)).
For security purposes, using VPNs or proxies is not allowed during server verification and authentication processes. When you visit our website, we may analyze your IP address and network information to detect VPN/proxy usage. This information is used only during your visit and is not stored permanently. Our website analytics does not store raw IP addresses.
Legal Basis: Legitimate interest in preventing abuse, fraud, and ensuring service security (GDPR Article 6(1)(f)).
When Discord servers enable our captcha verification feature for new members, we collect and process:
Purpose
To verify that new server members are human and to protect Discord communities from bot raids, spam, and malicious actors.
Legal Basis
Legitimate interest in server security and fraud prevention (GDPR Article 6(1)(f)). Server administrators enable this feature to protect their communities.
Retention
Temporary tokens are deleted after 10 minutes or upon use.
We process your personal data under the following legal bases:
We use the collected information for various purposes, including:
Our bot offers an optional audit logging feature for server administrators. When enabled, we only store configuration data (Server ID, Webhook ID, Channel ID) to facilitate the connection.
Pass-Through Privacy Guarantee: We do not persistently store the content of audit logs (such as message edits, deletions, member changes, or role updates) in our database. The bot acts as a "pipe," instantly forwarding these events from Discord directly to your designated log channel via a webhook. Once delivered, the data is discarded from our bot's memory.
Our bot includes a Levelling system that rewards users with Experience Points (XP) for chatting and participating in voice channels.
Content Privacy Guarantee: We do not store or analyze the contents of your messages to calculate Levelling XP. Our system only registers the metadata (that a message was sent by a specific user at a specific time) to award XP and enforce anti-spam cooldowns. No message text is ever saved to the database.
We share your information with the following third-party processors acting on our behalf:
Discord Inc. (Discord API)
Cloudflare Inc.
Lemon Squeezy (Lemon Squeezy LLC)
Note: We do not store your payment card information. All payment data is processed directly by Lemon Squeezy.
Cloudflare Analytics Engine (Cloudflare Inc.) - Optional
Google Analytics (Google LLC) - Optional
Website analytics is pseudonymous and is not linked to your Discord account. Analytics events are not deleted when you delete your account; instead, they expire automatically after the retention periods above.
Your personal data may be transferred to and processed in countries outside your country of residence by our third-party service providers. For EU users, we rely on Standard Contractual Clauses (SCCs) and service providers' Data Privacy Framework certifications. Data transferred to these global services is protected by appropriate safeguards.
We use cookies and similar tracking technologies on our website. For detailed information, see our Cookie Policy.
Summary: Essential cookies are always active. Cloudflare Analytics Engine and Google Analytics load only after your explicit consent. We do not use marketing or advertising cookies. We honor Global Privacy Control (GPC) and Do Not Track (DNT): if either signal is enabled, optional analytics stays off.
You can change or withdraw your consent at any time through the cookie preferences link in the footer or on our Cookie Policy page. Withdrawing consent stops analytics, deletes analytics cookies, and clears the analytics session identifier.
We retain your personal data only as long as necessary. Below are the retention periods for different data types:
| Data Type | Retention Period | Reason |
|---|---|---|
| Ticket Transcripts | Indefinitely, or per the server's configured retention period | Server admin archival and privacy policy |
| Verification Session Tokens | 10 minutes or upon use | Security |
| Giveaway Entries | Indefinitely | Fair participation |
| Premium Transaction Records | Indefinitely | Tax/legal compliance |
| Warning/Ban History | Indefinitely | Prevent ban evasion |
| Analytics Data (Cloudflare Analytics Engine) | 90 days | Edge analytics retention limit |
| Analytics Data (Google Analytics) | 14 months | Google Analytics retention setting |
| Cookie Consent Preferences | 6 months | Remember your choice and consent version |
| Trivia Stats | Indefinitely | Persistent leaderboards |
Thrivebot uses automated processing for certain features. This disclosure is provided in compliance with GDPR Article 22.
Your Rights: These automated decisions do not produce legal effects or similarly significantly affect you. If you believe an automated decision has incorrectly affected you, contact us for human review.
We may share your information with third parties only in the following circumstances:
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, theft, or misuse, including:
While we take reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Thrivebot is intended for users aged 13 and older, consistent with Discord's Terms of Service.
We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, contact us immediately at support@thrivebot.in, and we will delete such information within 72 hours.
You have the following rights regarding your personal data:
Response Timeframe: We will respond to GDPR rights requests within 30 days. Complex requests may take up to 90 days with notification.
In the event of a personal data breach that poses a risk to your rights and freedoms:
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last Updated" date at the top will be revised. Material changes will be announced via our Discord support server. Review this Privacy Policy periodically.
If you have any questions about this Privacy Policy or our data practices, contact us at:
Send us a message directly through our website.
Reach out to us via email.
Join our community for fast help.
By using Thrivebot, you consent to this Privacy Policy.
To request your data from the database, you may choose one of the following options:
To delete your data from the database, you may choose one of the following options:
When you request data deletion, certain data may be retained for legitimate business purposes or legal compliance:
Individual Operator Acknowledgment:
This service is operated by an individual developer, not a registered business entity. References to "we," "us," or "our" refer to the individual operator.