Privacy Policy - Tán Tiêu Hội

⚠️ DISCLAIMER

English: Tán Tiêu Hội is a free-to-use Discord bot provided "as-is" with no warranties of any kind. The developers expressly disclaim all liability for data input by users, third-party security breaches, or any damages arising from use of the Bot. By using this Bot, you acknowledge and accept all associated risks.

Last Updated: May 13, 2026

1. Data Controller & Contact

The "Data Controller" is the development team of Tán Tiêu Hội ("we," "us," or "our"). We are responsible for how your data is collected, used, and stored.

Contact for privacy requests:

Submit a data request via the /forget-me command within any server the Bot is active in.
For formal legal inquiries, contact us through the Bot's official support server.

We will respond to verifiable data requests within 30 days.

2. Data We Collect

We collect only the minimum data necessary to operate the Bot:

Category	Examples	Purpose
Account Identifiers	Discord User ID, Server ID, Channel ID (Snowflake format)	Core functionality, configuration
Technical Data	Usernames, avatar hash/URL metadata, server settings	Display, customization
Telemetry	Command usage logs, timestamps, error/crash logs	System stability, bug fixes
User-Generated Content	Text submitted to Bot commands (e.g., economy actions, moderation notes)	Feature execution

We do not collect passwords, email addresses, payment information, or any data outside the Discord API scope.

3. Purpose of Processing

Your data is processed exclusively for:

Facilitating core Bot functions (e.g., leveling, economy, moderation tools).
Preventing abuse, spam, and fraudulent activity.
Maintaining and improving technical stability.
Complying with legal obligations.

We never sell, rent, trade, or otherwise commercialize user data to any third party.

4. Sub-Processors & Third-Party Services

We engage the following sub-processors. By using the Bot, you acknowledge that your data may be processed by these entities under their own privacy policies:

Sub-Processor	Role	Privacy Policy
Discord Inc.	API communication, authentication, message delivery	discord.com/privacy
Cloud/Hosting Infrastructure	Secure database and server hosting	Subject to the provider's policy (available upon request)
AI API Providers (if AI features are enabled)	Processing natural language text prompts	Subject to the provider's policy (e.g., OpenAI)

Regarding AI features: Text submitted to AI-powered commands is transmitted to a third-party API for processing. We anonymize data where technically feasible. We do not consent to use of this data for external model training. If you do not wish your input to be processed by an AI API, do not use AI-enabled commands.

We will update this list if sub-processors change and provide notice as described in Section 10.

5. Children's Privacy (COPPA / Under-13 Policy)

Tán Tiêu Hội is not directed at children under the age of 13. We do not knowingly collect, store, or process personal data from children under 13 years of age. Discord's own Terms of Service prohibit use by persons under 13.

If we become aware that we have inadvertently collected data from a child under 13, we will delete that data immediately. If you believe a minor under 13 has provided data to the Bot, please contact us immediately via the support server.

6. Law Enforcement & Legal Compliance

We will only disclose stored data to law enforcement or government authorities when:

Presented with a valid legal warrant, subpoena, or court order issued by a competent jurisdiction; or
Required to do so by applicable law.

We will, to the extent legally permissible, notify affected users of such requests before complying. We do not proactively monitor, scan, or report user-inputted data to any authority absent a lawful order.

7. Security Measures

We implement reasonable and industry-standard technical and organizational measures to protect stored data, including:

Access controls limiting data access to authorized developers only.
Encrypted connections (TLS) for data in transit.
Routine security reviews of infrastructure.

However, no method of data transmission or storage over the internet is 100% secure. We cannot guarantee absolute protection against unauthorized access, hacking, or data breaches. Users provide data at their own risk, as acknowledged in the disclaimer above.

8. Data Breach Notification

In the event of a confirmed data breach that is likely to result in a risk to user rights or freedoms, we will:

Take immediate steps to contain and assess the breach.
Notify affected users via the Bot's official support server and/or announcement channels within 72 hours of becoming aware of the breach (where feasible).
Describe the nature of the breach, data affected, likely consequences, and steps taken to mitigate harm.

9. Data Retention & Your Rights

Retention Periods

Active server data: Retained for as long as the Bot remains in the server and data is actively used.
Inactive server data: Purged automatically 180 days after the last recorded activity.
Post-removal: Upon the Bot being removed from a server, all server-specific data is queued for permanent deletion within 30 days.

Your Rights

You have the following rights regarding your data:

Right of Access: Request a summary of what data we hold about you.
Right to Erasure ("Right to be Forgotten"): Request full deletion of your data via the /forget-me command or by contacting us directly.
Right to Portability: Request an export of your stored data in a machine-readable format (where technically feasible).
Right to Object: Object to processing of your data for purposes beyond core Bot functionality.

We will fulfill verifiable requests within 30 days. In some cases, we may need to retain certain data to comply with legal obligations even after an erasure request.

10. Policy Changes

We reserve the right to update this Privacy Policy at any time. When we make material changes:

The "Last Updated" date at the top of this document will be revised.
An announcement will be posted in the Bot's official support server.
Where required by law, we will provide more direct notice.

Continued use of the Bot after the effective date of any update constitutes acceptance of the revised policy. If you do not agree to a revised policy, you must cease using the Bot and may request data erasure under Section 9.

11. International Data Transfers

The Bot operates under infrastructure that may be located outside of Vietnam. By using the Bot, you acknowledge and consent that your data may be transferred to, stored in, and processed in countries other than your own — including countries that may not have the same data protection standards as your jurisdiction.

Where such transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place (such as using sub-processors that maintain their own certified data protection practices) and that your data is treated in accordance with this Privacy Policy.

12. Cookies, Local Storage & Automated Decision-Making

Cookies & Local Storage: The Bot itself does not use cookies, browser local storage, or any equivalent persistent client-side tracking technology. Any such technologies in use are solely the responsibility of Discord Inc. on its own platform.

Automated Decision-Making: The Bot does not make legally significant automated decisions about you (such as credit scoring, eligibility determinations, or legal assessments). Automated processing that occurs (e.g., leveling calculations, moderation triggers) is functional in nature and does not produce decisions with significant legal or similarly serious effects. Where automated moderation actions occur, server administrators retain the ability to review and reverse them.

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Vietnam, without regard to its conflict of law provisions. For users in jurisdictions with separate data protection laws (including EU/GDPR or CCPA jurisdictions), we acknowledge your applicable local rights and will endeavor to honor them to the extent technically and legally feasible.

This policy was last reviewed and updated on May 13, 2026.