Privacy Policy

Hez collects the minimum amount of information required to provide its features. Here's exactly what that looks like:

We never store: message content, direct messages, full credit card numbers, passwords, or any biometric data.

Every piece of data we hold has a specific reason:

• Provide features— automod, welcome messages, tickets, leveling, and all other bot functionality depend on knowing your server's structure and your chosen settings.
• Authenticate the dashboard — Discord OAuth lets you log in and manage only the servers you have permission to manage.
• Security and anti-raid — rate-limiting and anti-nuke features use short-lived identifiers to detect and block unusual activity.
• Debugging and reliability — operational logs help us identify and fix bugs. They are never used for profiling.
• Support — if you open a support ticket, you may share information voluntarily. We use it only to help you.

We do not use your data for advertising, behavioural profiling, or resale — ever.

If you are in the European Economic Area, the UK, or another jurisdiction with similar data-protection law, we rely on the following legal bases:

• Contract (Art. 6(1)(b))— processing your server's configuration is necessary to provide the service you've asked for by adding Hez to your server.
• Legitimate interests (Art. 6(1)(f)) — operational logging, security, and anti-abuse measures are in the legitimate interests of Hez and its users, provided those interests are not overridden by your rights.
• Consent (Art. 6(1)(a)) — where we ask for optional scopes (such as email) during OAuth, we rely on your explicit consent, which you can withdraw at any time.

We do not sell, rent, or trade your data. We share it only with the following sub-processors, each bound by appropriate contracts:

We may disclose data if required by law, court order, or to protect the safety of our users — and only to the extent legally required.

• Server configuration is deleted within 30 days of Hez being removed from your server.
• Operational logs are automatically rotated on a 14–30 day cycle.
• Per-user moderation records(warnings, bans) persist while Hez is active in a server, because they are part of your server's moderation history.
• Dashboard session data expires with your session or after a reasonable inactivity period.

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.

We aim to respond to all requests within 30 days. If you are in the EEA or UK and believe we've handled your data unlawfully, you also have the right to lodge a complaint with your local data-protection authority (DPA).

We take reasonable technical and organisational measures to protect your data:

• All data in transit is encrypted using TLS.
• Access to production data is restricted to authorised team members on a need-to-know basis.
• Regular automated backups protect against data loss.
• Dependencies are kept up to date and security advisories are monitored.

No system is perfectly secure. In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority within the timeframes required by applicable law.

Hez operates exclusively within Discord and therefore inherits Discord's minimum age requirements: 13 years old in most jurisdictions, or a higher age where local law requires (e.g. 16 in some EEA countries). We do not knowingly collect data from anyone below the applicable minimum age.

If you believe a child below the minimum age has interacted with Hez in a way that resulted in data being stored, please contact us and we'll remove it promptly.

We may update this Privacy Policy from time to time. When we do, we'll update the “Last updated” date at the top of this page. For material changes, we'll post an announcement in our support server so you're never caught off guard.

Continued use of Hez after changes are posted constitutes your acceptance of the revised policy.

Privacy questions, data requests, and deletion requests all go to the same place. We're a small team and we read everything.