Privacy Policy

What We Collect

Account information. When you register, we collect your email address. Registration and login are handled through Auth0, our authentication provider — your password is stored by Auth0 and never reaches our servers. A display name derived from your Auth0 profile is associated with your account. If you choose to link your Discord account, we store your Discord ID to associate it with your OnlyBot account.

Payment information. We accept cryptocurrency payments only. Payments are processed through NOWPayments (a third-party crypto payment processor) and BTCPay Server (a self-hosted payment processor operated by us — no payment data leaves our infrastructure when you pay through it). We store transaction records such as wallet addresses used, amounts, and transaction IDs. We never receive or store card numbers or bank details.

Usage data. Like most websites, our servers automatically log technical information when you visit: IP address, browser and device information, pages visited, and timestamps. We use essential cookies to keep you logged in and to keep the site functioning. We do not use advertising or tracking cookies.

Support communications. If you contact us by email or through our Discord server, we keep a record of that correspondence so we can help you.

How We Use Your Data

We use your data to:

• Create and manage your account, and authenticate your logins
• Process payments and deliver the products and services you purchase
• Respond to support requests and refund claims
• Detect and prevent fraud, abuse, and unauthorized access
• Maintain the security and stability of our infrastructure
• Comply with legal obligations and respond to lawful requests from authorities

We do not sell your personal data, and we do not use it for advertising or third-party marketing.

Legal Basis for Processing

Where data protection law (such as the GDPR) applies, we process your data on the following bases: performance of our contract with you (providing the services you purchase), our legitimate interests (security, fraud prevention, service improvement), compliance with legal obligations, and your consent where we specifically request it. You may withdraw consent at any time.

Who We Share Data With

We share data only with service providers that are necessary to run OnlyBot:

• Auth0 — registration and login authentication
• NOWPayments — cryptocurrency payment processing
• Cloudflare — website hosting, content delivery, and encrypted off-site backup storage
• Backend infrastructure providers — servers that run parts of the service

Each provider processes data under its own privacy policy and only to the extent needed to perform its function. We may also disclose data where required by law, or to establish or defend legal claims.

International Transfers

Our service providers may store or process data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers. You can contact us for more detail about where your data is processed.

Data Retention

We keep your data only as long as needed for the purposes above:

• Account data is retained while your account is active. If you delete your account, we remove your personal data unless we are required to keep it longer.
• Transaction records are retained as long as necessary for accounting, dispute resolution, and legal compliance.
• Server logs are retained for a limited period for security and troubleshooting, then deleted.

Your Rights

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent
• Lodge a complaint with your data protection authority

To exercise any of these rights, email legal@onlybot.org. Requests are free of charge and we will respond within one month.

Security

We take reasonable technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. No online service can guarantee absolute security, but we limit the data we collect and restrict access to it to personnel who need it to operate the service.

Age Requirement

OnlyBot is not directed at children. By using the service, you confirm that you are considered an adult under the laws that apply to you. Persons under 13 may not use OnlyBot under any circumstances.

Do Not Track

We do not respond to "Do Not Track" browser signals, as there is no common standard for interpreting them.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date, and where the changes are significant, we will make reasonable efforts to notify you. Continued use of OnlyBot after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data? Reach us at legal@onlybot.org or on our Discord server.