🔒 Legal

Privacy Policy

Last updated: April 20, 2026

Plain-English summary: We store Discord activity data (who sent how many messages, voice minutes, reactions, etc.) so we can show leaderboards and rank cards. We don't sell your data. We don't handle your payment info directly — Stripe does. If you chat with Luna, those conversations are stored so she can remember you. You can ask us to delete your data at any time.

1. Who We Are

This Privacy Policy describes how Runa ("we," "us," or "our") collects, uses, and shares information when you use the Runa Discord bot, the web dashboard at runabot.xyz, and related services (the "Service").

Runa is operated from Utah, United States. If you have questions about this policy, email support@runabot.xyz.

2. Information We Collect

Discord account data

When Runa is added to a server where you're a member, or when you log into the dashboard via Discord OAuth, we collect:

Your Discord user ID, username, display name, and avatar.
The Discord server ID(s) you share with the bot.
For OAuth login: the list of servers where you have admin or owner permissions (used to show you which servers you can manage).

Server activity data

For each server that has Runa active, we record counts and aggregates of your activity, including:

Number of messages sent and how many media messages.
Voice channel minutes.
Reactions given and received.
Mentions (referral counts, etc.).
Daily activity streaks.
XP and level progression.
Which "star" categories you currently hold.

We do not store the content of your Discord messages for leaderboard tracking. We only record that a message happened and count it toward your stats.

Luna (AI companion) data

If you interact with Luna — our AI companion bot — the contents of those conversations are stored so that Luna can remember context across sessions. This includes:

Message text you send to Luna.
Luna's responses.
Notes and summaries Luna generates about you over time (the "memory" system).

These conversations are also sent to OpenAI to generate Luna's replies. See Section 4 below.

Rank card and profile customization

If you customize your rank card, we store your choices: background image, accent color, bar style, display-name mode, stroke colors, and similar preferences.

Subscription and payment data

Payments are processed by Stripe. We do not see or store your full card number, CVC, or billing address. We do receive and store:

A Stripe customer ID linked to your Discord account.
Your subscription status (active, cancelled, paused, etc.).
Subscription event history (created, renewed, cancelled, with dates and amounts).

Refer to Stripe's Privacy Policy for how they handle your payment data.

Technical data

Our server logs may record basic request information (IP address, user agent, timestamp) for security and debugging. These logs are rotated regularly and not used for advertising or profiling.

Cookies

We use a single session cookie when you log in via Discord OAuth to keep you signed in on the dashboard. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

We use the information above to:

Provide the Service: show leaderboards, generate rank cards, track stars, display dashboard data.
Operate Luna's memory and generate her replies.
Process subscriptions and keep your account in good standing.
Debug issues, prevent abuse, and improve the Service.
Communicate with you about your account or the Service.

We do not sell your personal data. We do not share it for advertising purposes.

4. Who We Share Data With

We share data only with the following third parties, and only to the extent needed to run the Service:

Discord — we interact with Discord's API to read your activity and display messages. Your use of Discord is governed by Discord's Privacy Policy.
Stripe — payment processing. See Stripe's Privacy Policy.
OpenAI — if you chat with Luna, your messages and her memory notes are sent to OpenAI to generate replies. See OpenAI's Privacy Policy.
Hosting provider — the Service runs on a VPS (currently Contabo). Your data is stored on that server's disk.

We may also disclose information if required by law, subpoena, or other legal process, or to protect our rights, safety, or property.

5. Data Retention

We keep your activity data for as long as Runa is active in a server you're part of. If the server's subscription lapses and isn't renewed, we may retain that server's data for a reasonable period in case the owner resubscribes; after that, it may be deleted or anonymized.

Luna conversation memory is retained for as long as the owning server has an active subscription. You can request earlier deletion — see below.

Subscription records (invoices, event history) are retained as long as required by accounting and tax obligations.

6. Your Rights and Choices

You can:

Request a copy of your data — email us and we'll provide a reasonable export of the data we have about you.
Request deletion — email us and we'll delete your personal data within 30 days. Some aggregate leaderboard data may persist in anonymized form. Payment and subscription records may be retained where required by law.
Correct inaccurate data — email us and we'll fix what we can.
Leave the server — when you leave a Discord server that uses Runa, your per-server activity data (stars, XP in that server, etc.) is automatically removed by our bot.
Remove the bot — server owners can remove Runa from their server at any time, which stops new data collection.

To exercise any of these, email support@runabot.xyz from an address associated with your Discord account, or verify ownership some other reasonable way.

7. Children

Runa is not directed at children under 13. Discord itself requires users to be at least 13 (or older in some countries). If we become aware that we have collected personal data from a child under 13, we'll delete it promptly. If you believe a child has provided us data, please contact us.

8. Security

We use reasonable technical and organizational measures to protect your data — encrypted transport (HTTPS), restricted server access, separate databases, and payment handling delegated to Stripe. No system is perfectly secure, however, and we cannot guarantee absolute security.

9. International Users

Runa is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US, which may have different data-protection laws than your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date and, where practical, give notice through the Service. Continuing to use the Service after changes take effect means you accept the updated policy.

11. Contact

Questions, data requests, or concerns? Email support@runabot.xyz.