Privacy Policy

1. Summary

We collect what Kovu needs to run its features in your server, and nothing else.
We don’t sell data, show ads or share data with advertisers.
Kovu is currently free, so we collect no payment data.
You can ask us to delete your data at any time.

2. When you sign in to the dashboard

Signing in with Discord shares, with your permission:

Your Discord profile (ID, username, display name, avatar) to show who you are and to record who changed a setting.
Your email address, stored with your account and used only to contact you about your account or security. We don’t send marketing email.
Your server list (the guilds scope), to show the servers you can manage. It is cached for about a minute and not stored long-term.

We also store your Discord sign-in tokens (encrypted) so the dashboard can refresh your server list, and your dashboard preferences (hidden and pinned modules, Simple or Advanced mode).

3. When Kovu is in your server

To provide its features, Kovu processes:

Server configuration: settings, custom commands, tags, automod rules and similar content your staff create.
Moderation records: cases, warnings and notes, including the member’s ID, the moderator and the reason.
Messages, only to run the features you turn on: commands, automod, autoresponders, levels and the action log. To show the original text in delete and edit logs, Kovu keeps the most recent messages per channel in memory for a short time. Message content is not stored in our database except where a feature exists to save it (for example tickets, modmail and forms).
Member activity such as XP, economy balances, reminders and giveaway entries, when those modules are on.

Action logs and moderation notices are posted to the Discord channels your staff choose.

4. How long we keep data

Dashboard change history and command logs: 90 days.
In-memory message cache for logs: a short rolling window (at most 100 messages per channel).
Ticket, modmail and form transcripts: until your staff delete them or the server asks us to.
Server settings and records: while Kovu is in the server, and on request we delete them.

5. Who processes data

Kovu runs on Cloudflare (hosting, databases and storage) and talks to Discord’s API. Both process data on our behalf to run the service. We only disclose data beyond that if the law requires it.

6. Cookies

We use strictly necessary cookies to keep you signed in and the site secure, and, only with your consent, a preference cookie to remember your theme. There are no advertising, analytics or cross-site tracking cookies. The Cookie Policy lists each one, and you can change your choices at any time in .

7. Your choices and rights

You can sign out and revoke Kovu’s access in Discord (User Settings → Authorized Apps). Server owners can remove Kovu at any time. To access, correct or delete your data, or a server’s data if you own it, email privacy@kovu.gg. We answer within 30 days.

8. People in the EU, EEA and UK

Kovu is operated by the Kovu team, reachable at privacy@kovu.gg. Under the GDPR and UK GDPR we rely on these legal bases:

Performing our service (contract): signing you in, running the features a server turns on, and keeping your dashboard settings.
Legitimate interests: security, preventing abuse, moderation records and logs that server staff rely on, and keeping Kovu reliable. We balance these against your rights, and you can object.
Consent: optional cookies. You can withdraw consent at any time in cookie settings, without affecting what happened before.
Legal obligations, when the law requires us to keep or disclose data.

You have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent. Signed-in members can export or delete their personal data from Privacy and data. For anything else, email us. You can also complain to your local data protection authority.

Cloudflare and Discord may process data outside your country, including in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

9. California residents

This section is our notice under the California Consumer Privacy Act, as amended by the CPRA. In the last 12 months we collected these categories of personal information, for the purposes described above:

Identifiers: Discord user ID, username, display name, avatar and email address.
Internet or other electronic network activity: dashboard change history, command logs, and messages processed by the features a server turns on.
Inferences: none. We don’t build profiles about you.

We collect this from you and from Discord. We don’t sell or share personal information, use it for cross-context behavioral advertising, or use sensitive personal information for anything beyond providing the service, and we haven’t done so in the last 12 months. Retention periods are in the “How long we keep data” section above.

You have the right to know what we collect and how we use it, to delete it, to correct it, and to opt out of any sale or sharing. We won’t treat you differently for using these rights. To use them, go to Privacy and data or email privacy@kovu.gg; we verify requests against your Discord account, and you can use an authorized agent. We honor Global Privacy Control as an opt-out of sale or sharing, and you can record one yourself in .

10. Children

Kovu is not for people under Discord’s minimum age in their country.

11. Changes

If we change this policy, we’ll update the date above and note important changes in Kovu’s updates channel.