# Dark Forge Automation — Privacy Policy

**Effective date:** July 4, 2026  
**Controller/Provider:** Dark Forge Automation, [BUSINESS ADDRESS]  
**Privacy contact:** DarkForgeAutomation@protonmail.com

> Draft template for attorney review. Replace every bracketed field and align it with actual hosting, subprocessors, retention, and customer contracts before publication. This is not legal advice.

## Information processed

Foundry may process:

- Discord server, channel, role, message, application, and user identifiers;
- server configuration, feature settings, branding, and permission health;
- ticket subjects, descriptions, participants, messages fetched for transcripts, attachments links, timestamps, assignments, and close reasons;
- moderation actions, reasons, durations, case numbers, moderator identifiers, and target identifiers;
- onboarding joins, leaves, verification state, account creation time, and configured roles;
- role-panel choices and audit events;
- service logs, error details, health state, backup metadata, and support communications.

Foundry does not require Discord passwords. Bot tokens and infrastructure secrets are operational credentials and must never be submitted through Discord commands, configuration exports, or support messages.

## Purposes and legal bases

Information is used to provide requested bot functions, maintain security and reliability, diagnose errors, provide support, enforce agreements, comply with law, and improve the Service. Depending on jurisdiction and context, processing relies on performance of a contract, legitimate interests in operating and securing the Service, legal obligations, or consent where required.

## Sources and sharing

Information comes from Discord APIs, server administrators, users interacting with the bot, and operational systems. It may be shared with hosting, backup, monitoring, payment, and support providers acting under appropriate obligations; with professional advisers; during a business transaction; or when legally required. Foundry does not sell personal information or use it for cross-context behavioral advertising.

List actual subprocessors before launch:

- Discord Inc. — platform and API;
- Dark Forge Automation — self-hosted application and database infrastructure;
- Microsoft Corporation — OneDrive backup storage;
- No payment provider currently used;
- Proton AG — business email and customer support communications;
- FormSubmit — website inquiry form delivery.

## Retention

Configuration and operational records are retained while a customer account is active. Ticket and moderation history remain until deleted by authorized administrators, the customer requests deletion, or the service agreement ends. Managed backups currently retain the 14 most recent backup snapshots. Define and implement a final post-termination deletion period of [30/60/90] days before launch, subject to legal holds and required financial records.

## Security

Foundry uses access controls, least-privilege Discord permissions, secret redaction, container isolation, structured error logging, automated tests, health monitoring, backups, and dependency auditing. No system is perfectly secure. Customers should immediately report suspected compromise and rotate exposed bot credentials.

## International transfers

Discord, hosting, and support providers may process information outside a user's region. Where required, Provider will use recognized transfer mechanisms and safeguards. Specify the Provider's region and actual mechanisms before launch.

## Individual rights

Depending on location, individuals may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a regulator. Requests may be sent to DarkForgeAutomation@protonmail.com. Provider may need to verify identity and coordinate with the relevant server owner, which may act as controller for community data.

## Children

The Service is not directed to children below the minimum age required by Discord or applicable law. Server owners are responsible for age-appropriate community operation and notices.

## Changes and contact

Material changes will be communicated through the website, customer contact, or Discord as appropriate. Questions and requests may be sent to DarkForgeAutomation@protonmail.com or [POSTAL ADDRESS].

Discord's own processing is governed by Discord's policies. Foundry is an independent third-party application and is not endorsed by Discord.