Privacy Policy for UploadBot

Last updated: September 18, 2026

1. Introduction

UploadBot ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use the UploadBot Discord bot ("the Bot"). By using the Bot, you consent to the data practices described in this policy.

2. Information We Collect

We collect and process the following types of information:

2.1 Server & Channel Configuration
Server (Guild) ID and Channel ID: stored to apply per-channel settings (upload provider, auto-delete, spoiler preference, allowed roles) where the Bot is used.
Ban Records: if a server is banned under our Terms of Service, we store its guild ID, the ban reason, the admin who issued it, and when.

2.2 Usage Data
Aggregate Upload Counts: plain totals per provider, globally and per server, with no link back to any individual uploader.

2.3 EchoRP Link (optional)
Only if you choose to link an EchoRP account with /echorp link: your Discord user ID and your EchoRP API key (stored encrypted at rest, never shown in channels or written to logs, and only ever sent to EchoRP), plus whether EchoRP uploads are switched on for you.
If a server moderator shares their key with a channel ("channel mode") or allows a specific webhook or user ID to use it: the channel ID, that ID, and the Discord user ID of the key's owner.

2.4 What We Do Not Collect
Your uploaded files: the Bot never stores the images or videos you upload — they are streamed directly to the hosting provider you (or your channel's setup) selected.
Message content beyond the attachment being processed.
Your IP address or device information: the hosting provider sees the Bot's server IP, not yours.

3. How We Use Your Information

We use the information we collect for the following purposes:

To Provide the Bot: applying your server's chosen settings and delivering uploads.
Abuse Investigation & Enforcement: identifying and acting on violations of our Terms of Service, including server bans.
Compliance: ensuring compliance with legal obligations and Discord's terms of service.

4. Information Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

Upload Providers: the file itself is sent to ImgBB, Gyazo, Catbox, or EchoRP (whichever provider is selected), with no Discord identity attached. For EchoRP the file is sent together with the API key of the linked EchoRP account, so EchoRP can see which of its accounts made the upload.
Legal Requirements: if required to do so by law or in response to valid requests by public authorities.

5. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. EchoRP API keys are encrypted at rest. However, no method of transmission over the internet or electronic storage is 100% secure.

6. Data Retention

Channel settings and allowed roles persist until a server's admin disables the channel or clears them. Ban records persist until we unban the server. A linked EchoRP key persists until you remove it with /echorp unlink, which also removes every channel and ID link that used your key; those links can also be removed by a server moderator or by disabling the channel with /setup. Aggregate stats are kept indefinitely in anonymous form.

7. Your Data Rights

You may have the following rights regarding your data:

Access: request what data we hold about your server or your linked EchoRP key.
Deletion: request deletion of your server's stored configuration or your EchoRP link (you can also remove your link yourself at any time with /echorp unlink).
Objection: object to the processing of your data as described here.

To exercise these rights, please contact us at uploadbot-support@proton.me. Because uploaded files live with the third-party provider rather than with us, deleting a file itself requires contacting that provider directly (for EchoRP, through your own EchoRP media account).

8. Children's Privacy

Our Bot is not intended for use by individuals under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. Your continued use of the Bot after any changes to this Privacy Policy constitutes your acceptance of the changes.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at uploadbot-support@proton.me.

By using UploadBot, you acknowledge that you have read and understood this Privacy Policy.