This notice was prepared under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles for Fulfilling the Obligation to Inform, to inform people who use the Groyt Discord bot and the groytbot.net website. For a more detailed technical explanation, see the Privacy Policy.
1. Veri Sorumlusu
The Groyt bot and the groytbot.net site are operated by an independent developer team based in Turkey. Under KVKK you can reach the data controller through the following channels:
2. Personal Data Processed
Groyt processes only the minimum data needed to run the bot's features. Data such as full name, national ID number, address, phone, IP address, location or payment card details are not collected by the bot.
- Discord identity data: user ID, username, profile picture, server ID, role and channel IDs.
- Usage data: level/XP, economy balance and inventory, invite counts, registration status, ticket records, moderation decisions (warning, mute, ban, jail) and their reasons, command usage counts, time spent in voice channels.
- Data you give optionally: birthday (day/month), the name and age entered by staff during registration, reminder and note texts, playlists you create, songs you add to favorites, settings you make on the dashboard, the text you write in the "Report a bug" form in the Music Panel.
- Listening history: the title, artist, link, server ID and time of the song playing while you're in the same voice channel as the bot. Used only for "My Listening" stats and the "Daily Mix" suggestion. You can turn off recording and permanently delete your history from Music Panel → Settings.
- Message content: is not stored in the database. It's processed only momentarily to run commands, apply the auto-moderation filters turned on by server staff and produce the message log if it's on in that server. AI features (chat, listing summary, story, etc.) only process the relevant text/image when you run the command.
- Website / dashboard: when you log in with Discord, the user ID, username, avatar and list of servers you manage that Discord provides; a session cookie. For Premium purchases, the order number and order email address from Shopier (only for matching).
3. Purposes of Processing
- Running the bot's moderation, registration, levels, economy, tickets, music, giveaways, logs and other features,
- Applying the rules set by server staff (auto-moderation, security protections),
- Providing Premium and custom bot services, matching purchases and fulfilling refund requests,
- Detecting errors and abuse, service security and producing stats (anonymous totals such as total server/user counts),
- Answering support requests and fulfilling legal obligations.
4. Legal Grounds and Method of Collection
Data is collected automatically through the Discord platform (when the bot is added to a server and when you use commands) and through the website/dashboard. Processing is based on the following legal grounds under KVKK Article 5:
- Being directly related to the formation or performance of a contract (providing the bot service, premium purchases),
- The data controller's legitimate interest (service security, preventing abuse, fixing errors),
- Explicit consent (only for data you give optionally such as your birthday — you can withdraw consent at any time by not using the related command or deleting the data).
5. Transfer of Data
Your personal data isn't sold or shared for advertising. Transfers are made only to the extent necessary to the following service providers for the service to work:
- Discord Inc. — the platform the bot runs on (USA).
- Shopier — collecting premium payments; your card details never reach Groyt.
- AI providers (Google Gemini, NVIDIA NIM) — the relevant text/image is sent for processing only when you run AI commands; use for model training is not allowed.
- top.gg — vote notifications (Discord user ID only).
- Public data services (currency, earthquakes, football, Steam/Epic deals, Minecraft server status) — no personal data is sent to these services, only query parameters.
Since some of these providers are located abroad, transfers are made under KVKK Article 9 and within the framework of the providers' data processing agreements.
6. Retention Periods
- Server data is permanently deleted 7 days after the bot is removed from the server.
- Moderation records are kept until server staff delete them or the server data is deleted.
- The dashboard session cookie is valid for at most 30 days; "Log out" ends sessions on all devices.
- Premium order matching records are kept for 2 years from the purchase date due to refund and accounting obligations.
- Error logs are kept for at most 30 days.
- Listening history is kept for at most 180 days (the last 2,000 entries per person); older entries are deleted automatically. If you turn recording off, no new entries are kept.
- Favorites and playlists are kept until you delete them.
7. Your Rights Under KVKK Article 11
By applying to the data controller, you have the right to:
- Learn whether your personal data is processed and, if so, request information about it,
- Learn the purpose of processing and whether it's used in line with that purpose,
- Know the third parties in Turkey or abroad to whom it's transferred,
- Request correction if it's incomplete or incorrect,
- Request its deletion or destruction under KVKK Article 7,
- Request that corrections/deletions be notified to the third parties it was transferred to,
- Object to a result against you arising from analysis solely by automated systems,
- Request compensation if you suffer damage due to unlawful processing
.
8. How to Apply
To use your rights, send your request with your Discord user ID by email to aydinbaris2007@gmail.com or through a ticket you open in the support server. Applications are concluded free of charge within 30 days at the latest. If you want your own data deleted independently of servers (for example your level and economy records in all servers), you can request it the same way; if you're server staff, removing the bot from the server deletes all of that server's data within 7 days.
Groyt Discover
When you apply to Discover, the server name, icon, member and online counts, descriptions, tags, links and announcements are shown publicly. In reviews, your display name, avatar, rating and text are published. You can hide your servers on your profile from the profile settings.
The applicant's Discord identity, review decisions, per-person and per-day vote records and reports are kept to run the system and prevent abuse. IP-based counters that prevent repeated views/clicks are only in temporary memory; they're never written to disk and are deleted when the process ends. The vote ranking resets monthly; this doesn't automatically delete past vote records.
A server listing is kept until the owner removes it from the panel or the team removes it; when a listing is deleted, related votes, reviews, announcements and reports are removed. To prevent bypassing a cooldown or ban by deleting, the server ID and restriction status are kept separately: until the end of the cooldown for timed rejections, and until the team lifts it for bans. You can contact the support team to delete your profile, review audit trail and technical backups. Requests are evaluated within the current retention and backup policy. Application content and channel and role names may be sent to an AI service for a security pre-review; the team makes the final decision.
Discover Rules · Support and deletion requests
9. Changes
This text is updated when needed; the current version is always published on this page and the "Last updated" date is changed.
