VyperBot - Privacy Policy

Last Updated: March 28, 2026 | Version: 0.1.0

Operated by OurPXI Studios | legal@ourpxi.dev

This Privacy Policy is written in English. In the event of any conflict between language versions or interpretations, the English text shall prevail. This document is governed by the laws of the Republic of Costa Rica.

VyperBot - Privacy Policy

1. Introduction

This Privacy Policy describes how OurPXI Studios ("we," "us," or "our") collects, uses, stores, and protects personal data through VyperBot and its associated services (collectively, "the Application"). The Application encompasses the Discord bot, the web dashboard, the public website, Discord OAuth integration, and any related databases and backend infrastructure.

By adding the Application to your Discord server, accessing the dashboard or website, or interacting with any part of the Application, you confirm that you have read, understood, and agree to the practices described in this policy. If you do not agree, please remove the Application from your server, discontinue use, and contact us to request deletion of any data we may hold about you.

Legal basis: Law No. 8968 (Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales); Executive Decree No. 37554-JP.

2. Nature of the Project and Free-to-Use Service

OurPXI Studios is an unregistered creative group operated by individual developers ("the studio"). It is not a legal entity, corporation, cooperative, or formally registered organization anywhere under the laws of the Republic of Costa Rica or any other jurisdiction.

The Application is provided free of charge as a personal project. It is not a commercial product, and no fees, subscriptions, or paid features are offered at this time. Use of the Application does not create any commercial relationship, contract of sale, or consumer transaction between the user and OurPXI Studios.

Because OurPXI Studios is an unregistered project run by individual developers, users interact with and rely on the Application entirely at their own risk and discretion, subject to the Limitation of Liability set out in Section 14 of this policy.

3. Identity and Contact of the Responsible Party

Under Costa Rican Law No. 8968, every processing of personal data must have an identified Responsible Party (Responsable de la Base de Datos). As OurPXI Studios is an unregistered, non-commercial project, the Responsible Party is identified by the project name and its designated contact:

Responsible Party (Responsable de la Base de Datos): OurPXI Studios
Nature: Unregistered non-commercial project operated by individual developers
Privacy, Legal and Data Rights Contact: legal@ourpxi.dev
Operational Jurisdiction: Republic of Costa Rica

All data rights requests (ARCO), legal inquiries, and privacy-related communications must be directed to legal@ourpxi.dev. OurPXI Studios will acknowledge receipt within 5 (five) business days and will complete the applicable action or provide a substantive response within 30 (thirty) calendar days of receipt.

Legal basis: Law No. 8968, Articles 5 and 6; Executive Decree No. 37554-JP, Article 10.

4. Intellectual Property and Copyright

The name "OurPXI Studios," the name "VyperBot," and all associated branding, logos, design assets, documentation, source code, and creative works are the intellectual property of the OurPXI Studios project developers and are protected under Costa Rican copyright law.

Copyright protection under Law No. 6683 (Ley de Derechos de Autor y Derechos Conexos) arises automatically upon creation of an original work and does not require registration, trademark filing, or any other administrative formality. Accordingly, even though "OurPXI Studios" and "VyperBot" are not registered trademarks, all associated original works are protected by copyright from the moment of their creation.

Specifically, the following are reserved and may not be reproduced, distributed, modified, or used without explicit written permission from OurPXI Studios:

The "OurPXI Studios" and "VyperBot" names and any stylized versions thereof.
Logos, icons, banners, and other graphical assets associated with OurPXI Studios or VyperBot.
Source code authored by the OurPXI Studios development team, to the extent not separately licensed under an open-source license.
Documentation, policy texts, and other written works authored by OurPXI Studios.

Nothing in this policy grants any license to use OurPXI Studios's intellectual property. Unauthorized use may constitute infringement under Law No. 6683 and, where applicable, Law No. 9048 (Ley de Delitos Informáticos).

Legal basis: Law No. 6683 (Ley de Derechos de Autor y Derechos Conexos), Articles 1, 5, and 13.

5. Age Requirement

The Application is intended exclusively for users who meet Discord's minimum age requirement of 13 years old, or the higher applicable minimum age required by the laws of their jurisdiction. By interacting with the Application, you confirm that you meet this requirement.

We do not knowingly collect or process personal data from individuals below this threshold. If you believe a minor has had data collected through the Application, please contact us at legal@ourpxi.dev immediately.

6. Principle of Data Minimization

In accordance with the Principle of Minimization established under Law No. 8968, OurPXI Studios collects only data that is strictly necessary for each specific, declared function of the Application. No data is collected, processed, or retained beyond what is required for those purposes. When an optional feature is not enabled, no data associated with that feature is collected.

Legal basis: Law No. 8968, Article 6(b); Executive Decree No. 37554-JP, Article 9.

7. Types of Data Collected

7.1 Personal Data

The Application may collect and process the following personal data obtained via the Discord API:

Discord User IDs: A numerical identifier assigned to each Discord account. This is the primary key used to associate data with a user across all Application features.
Usernames and Nicknames: Display names and server-specific nicknames, used for moderation and leveling features.
Guild and Channel IDs: Numerical identifiers for Discord servers and channels, used to scope configurations, logs, and feature data to the correct server.
Assigned Roles: Role identifiers within a server, used for auto-role and permission-based features.
Server Join Date: The date a user joined a specific server, collected as part of the Discord Member Object for moderation purposes.
Message Content: The text body of messages, collected only when a logging or moderation feature that requires it is explicitly enabled by a server administrator. See Section 8 for full detail.
Command Interaction Metadata: Records of which Application commands were invoked (command name, timestamp, server context), used for security, stability, and rate-limiting purposes.
Dashboard and Website Session Data: Authentication tokens and session identifiers generated during Discord OAuth login, used solely to maintain your authenticated dashboard session.

7.2 Sensitive Data

Costa Rican Law No. 8968 affords heightened protection to "sensitive data," defined as information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or similar personal matters.

OurPXI Studios does not collect, process, or store any sensitive data as defined above. No feature of the Application requires or requests sensitive personal information. If you believe any such data has been inadvertently collected, please contact us immediately at legal@ourpxi.dev.

Legal basis: Law No. 8968, Article 9; Executive Decree No. 37554-JP, Article 13.

7.3 Mandatory vs. Optional Data

Mandatory: Discord User IDs and Guild IDs are required for any interaction with the Application. These identifiers are provided automatically by Discord when you interact with the Application and cannot be withheld while still using Discord. Without them, the Application cannot process commands, apply configurations, or associate data with a user or server.
Optional (feature-dependent): Message content, moderation logs, ticket transcripts, leveling data, and all other feature-specific data are only collected when the relevant feature is explicitly enabled by a server administrator. Disabling a feature stops further collection of its associated data.

If you do not wish for mandatory data to be processed, you must refrain from interacting with the Application entirely. You may request deletion of any data we hold about you as described in Section 11.

8. Message Content - Specific Disclosures

Message content is treated as a particularly sensitive category of data under Law No. 8642 (Ley General de Telecomunicaciones), which establishes the principle of privacy of communications. Message content is only collected when a server administrator has explicitly enabled a feature that requires it. On servers where no such feature is enabled, no message content is collected.

Deleted Message Logging: When a server administrator configures a deleted-message log channel, the content of deleted messages is captured, stored, and forwarded to that channel. This data is also accessible via the /snipe command to users with server moderator permissions only.
Edited Message Logging: When an edit-log channel is configured, both the original and revised content of edited messages may be stored and forwarded.
AutoModeration: Message content is processed in real time to detect violations of server-configured rules. Content that triggers a rule may be retained briefly alongside the associated moderation action record for moderator review.
Ticket Transcripts: Messages within ticket channels may be stored to generate a transcript upon ticket closure, accessible to server administrators.
No External Profiling: Message content is never used for advertising, commercial profiling, or training of machine learning models, and is never shared with third parties for commercial purposes.

Legal basis: Law No. 8642, Articles 1 and 43; Law No. 8968, Article 6; Discord Developer Policy (Message Content Intent).

9. Purposes of Data Processing (Fines del Tratamiento)

Under Law No. 8968, data may only be used for the specific, declared purposes for which it was collected. The following is an exhaustive list of purposes for which the Application processes personal data. OurPXI Studios will not use personal data for any purpose not listed below without updating this policy or obtaining fresh consent.

Moderation: To execute moderation commands (warnings, mutes, bans, kicks) and maintain per-server moderation history linked to User IDs.
Advanced AutoModeration: To analyze message content in real time for violations of server-configured rules.
Logging: To forward records of deleted messages, edited messages, and other server events to administrator-designated log channels.
Snipe Command: To allow server moderators to retrieve recently deleted messages for a specific user via command. This is the command-based interface to the deleted-message log and does not constitute separate data collection.
Leveling and XP: To track experience points and levels per user per server, linked to User IDs.
Ticketing: To create, manage, and archive support tickets, including storage of messages in ticket channels for transcript generation.
Auto-Roles: To automatically assign or remove server roles based on administrator-configured triggers.
Scheduled and Repeating Messages: To store administrator-configured message content and scheduling data for automated delivery.
Sticky Messages: To store administrator-configured message content that is automatically re-posted in a channel.
Embed and Message Builder: To store custom embed templates and message configurations created by server administrators.
Utility Commands: To execute general-purpose commands that may require temporary access to user, channel, or server data.
Server Configuration: To store and apply server-specific settings configured via commands or the dashboard.
Dashboard and Website Authentication: To authenticate server administrators via Discord OAuth and maintain secure dashboard sessions.
Security and Stability: To monitor for abuse, enforce rate limits, and maintain the integrity and availability of the Application.

Legal basis: Law No. 8968, Articles 5, 6, and 13; Executive Decree No. 37554-JP, Articles 9 and 11.

10. Data Retention

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected. Once that purpose has concluded, data is deleted or anonymized.

Server Configuration Data: Retained while the Application is active in a server. Upon removal, retained for a grace period of up to 30 calendar days to allow for re-invitation, then permanently deleted.
Leveling and XP Data: Retained while the Application is present in the server and the leveling feature is enabled. Users may request deletion of their individual records at any time.
Moderation Records: Retained to support ongoing moderation operations. Users may request deletion subject to the server administrator's legitimate interest in maintaining moderation history.
Message Logs: Retained for a rolling operational period configurable by server administrators. Data is purged when the relevant feature is disabled or the log channel is removed.
Ticket Transcripts: Retained until the server administrator deletes them or a data deletion request is fulfilled.
Dashboard Session Data: Retained for the duration of the active session and expired automatically after inactivity.
Scheduled and Sticky Message Content: Retained until the administrator deletes the relevant configuration.

Legal basis: Law No. 8968, Article 6(f); Executive Decree No. 37554-JP, Article 16.

11. Exercise of ARCO Rights

Under Costa Rican Law No. 8968, all individuals whose personal data is processed by OurPXI Studios have the following rights:

Access (Acceso): The right to request confirmation of whether we process personal data about you and to receive a copy of that data.
Rectification (Rectificación): The right to request correction of inaccurate or incomplete personal data we hold about you.
Cancellation / Deletion (Cancelación): The right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.
Opposition (Oposición): The right to object to the processing of your personal data for specific purposes, including any processing you consider unlawful or disproportionate.

To exercise any of these rights, contact OurPXI Studios at legal@ourpxi.dev. Include your Discord User ID and the relevant server(s) in your request. OurPXI Studios will acknowledge receipt within 5 (five) business days and complete the applicable action within 30 (thirty) calendar days.

If you feel your request has not been addressed satisfactorily, you may contact our legal representative at legal@ourpxi.dev. Additionally, as this service operates on the Discord platform, you may also reach out to Discord's Privacy Team or your local Data Protection Authority.

Legal basis: Law No. 8968, Articles 6 and 22--27; Executive Decree No. 37554-JP, Articles 30--38.

12. Data Recipients, Third Parties, and International Transfers

OurPXI Studios does not sell, rent, license, or trade personal data with any third party. However, to operate the Application, data is processed by or transmitted through the following third-party service providers (Encargados del Tratamiento under Law No. 8968):

12.1 Discord, Inc.

Discord, Inc. is the platform through which all user interactions with the Application occur. All commands, events, and data from Discord users are received via Discord, Inc.'s API and Gateway. Discord, Inc. independently processes user data under its own privacy policy, which governs their data practices. OurPXI Studios has no control over Discord, Inc.'s data handling. Discord Privacy Policy

12.2 Cloudflare, Inc.

Cloudflare, Inc. provides infrastructure services including website and dashboard hosting (Cloudflare Pages), serverless compute (Cloudflare Workers), DNS resolution, DDoS mitigation, CDN caching, and SSL/TLS termination. Network traffic between users and OurPXI Studios's services --- including dashboard sessions, OAuth flows, and API requests --- transits through Cloudflare, Inc.'s global network. Cloudflare, Inc. may process connection metadata, IP addresses, and request data in accordance with its own privacy policy. Cloudflare Privacy Policy

12.3 Self-Hosted Infrastructure

The Application's core logic, database, and backend processing run on infrastructure owned and operated directly by OurPXI Studios. No additional third-party cloud providers are currently used for data storage beyond those disclosed above. This policy will be updated if that changes.

12.4 International Data Transfers

Because Discord, Inc. and Cloudflare, Inc. are companies headquartered in the United States and operate globally distributed infrastructure, personal data processed through the Application may be transferred to, stored in, or processed in countries outside the territory of the Republic of Costa Rica, including the United States and other jurisdictions.

OurPXI Studios discloses this international transfer as required by Law No. 8968. Users who interact with the Application acknowledge and accept this transfer as an inherent consequence of using Discord and Cloudflare-hosted services.

Legal basis: Law No. 8968, Articles 11 and 12; Executive Decree No. 37554-JP, Articles 25--28.

13. Discord Developer Policy Compliance

VyperBot is developed and operated in compliance with Discord's Developer Policy and Developer Terms of Service. OurPXI Studios makes the following specific representations:

Privileged Intents: The Message Content Intent is enabled solely to support the moderation, automoderation, logging, snipe, and ticket features described in this policy. It is not used for data mining, advertising, machine learning training, or any undisclosed purpose.
Scope Limitation: OurPXI Studios requests only the Discord API scopes and Gateway Intents strictly necessary for the Application's declared features.
No User Profiling: Discord data is not used to build behavioral or commercial profiles on users.
No Unauthorized Access: The Application does not facilitate unauthorized access to Discord accounts, servers, or data.

Discord's Developer Policy: discord.com/developers/docs/policies-and-agreements/developer-policy

14. Limitation of Liability

The Application is provided "as is" and "as available," free of charge, with no guarantees of any kind. Read this section carefully.

OurPXI Studios is an unregistered creative group operated by individual developers ("the studio"). It is not a legal entity, and no individual developer associated with OurPXI Studios shall be held personally liable in connection with the use of, or inability to use, the Application.

To the fullest extent permitted by applicable law, OurPXI Studios and its individual developers expressly disclaim all liability for:

Any interruption, suspension, or discontinuation of the Application, at any time and without notice.
Any loss, corruption, or unauthorized access to data processed through the Application.
Any direct, indirect, incidental, consequential, or punitive damages arising from the use of or reliance on the Application.
Any actions taken by server administrators using Application features (such as logging, moderation, or data retention configurations) that affect other users.
Any third-party service disruptions, including those caused by Discord, Inc. or Cloudflare, Inc.
Any inaccuracy, incompleteness, or failure of the Application's features to meet a user's expectations.

Because the Application is free to use and provided as a personal, non-commercial project, users assume all risk associated with its use. The Application is offered without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

Nothing in this section limits any rights that cannot be waived under mandatory provisions of Costa Rican law.

Reference: General principles of civil liability under the Código Civil de Costa Rica; Law No. 9048 (Ley de Delitos Informáticos).

15. Security Measures

OurPXI Studios implements reasonable technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

Access Controls: Database and server access is restricted to authorized individuals only, enforced through credential management and role-based access controls.
Encryption in Transit: All data transmitted between users and OurPXI Studios's services is encrypted using TLS, enforced via Cloudflare, Inc.'s infrastructure.
Token Protection: Discord OAuth tokens and dashboard session tokens are handled securely and are not logged or exposed in plain text.
Infrastructure Isolation: Application components are logically separated to limit the impact of any potential security incident.
Access Logging: Access to sensitive data stores is logged for audit purposes.

Despite these measures, no system is entirely immune to security risks. In the event of a data breach that materially affects your personal data, OurPXI Studios will take prompt steps to contain the incident and notify affected users in a timely manner.

Legal basis: Law No. 8968, Article 10; Law No. 9048 (Ley de Delitos Informáticos), Articles 196 bis and 217 bis of the Código Penal (Law No. 4573).

16. Applicable Law and Legal References

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Costa Rica. The following legal instruments are directly applicable to the processing activities and rights described herein:

Law No. 8968: Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales --- primary data protection law.
Executive Decree No. 37554-JP: Reglamento a la Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales --- implementing regulations for Law 8968.
Law No. 6683: Ley de Derechos de Autor y Derechos Conexos --- copyright law protecting OurPXI Studios's original works without the need for registration.
Law No. 9048: Ley de Delitos Informáticos --- cybercrime law governing unauthorized access, data modification, and system interference.
Law No. 4573: Código Penal --- specifically Articles 196 bis and 217 bis as amended by Law 9048.
Law No. 8642: Ley General de Telecomunicaciones --- establishes the principle of privacy of communications, applicable to message content logging.
Law No. 7472: Ley de Promoción de la Competencia y Defensa Efectiva del Consumidor --- applicable to any future paid features or subscriptions. No paid features are offered at this time.
Law No. 9635: Ley de Fortalecimiento de las Finanzas Públicas --- IVA/VAT provisions applicable to digital services. Not currently applicable as no paid features are offered.
Law No. 7476: Ley contra el Hostigamiento Sexual en el Empleo y la Docencia --- principles referenced in community standards prohibiting harassment within the Application.

17. Changes to This Policy

OurPXI Studios reserves the right to update this Privacy Policy at any time. When changes are made, the "Last Updated" date and version number at the top of this document will be revised. Material changes will be communicated via the Application's support server, the dashboard, or other reasonable means.

Your continued use of the Application following publication of an updated policy constitutes acceptance of the changes. If you do not agree with a revised policy, you must discontinue use and may contact us to request deletion of your data.

18. Contact Information

For all privacy-related inquiries, data rights requests (ARCO), intellectual property matters, and legal correspondence, please contact OurPXI Studios at:

Privacy, Legal and Data Rights Contact: legal@ourpxi.dev

You may also reach the OurPXI Studios team through the official Support Server linked on the Application's website. OurPXI Studios will acknowledge receipt of any legal or privacy request within 5 (five) business days and will provide a substantive response or complete the applicable action within 30 (thirty) calendar days.

Privacy Policy