LEGAL
Privacy Policy
Effective and last updated July 24, 2026
1. Scope and operator
This policy explains how Nonsen Production ("Nyx," "we," or "us") handles personal data through the Nyx Discord bot, nyxbot.app, its dashboard, API and related services (the "Service"). Nonsen Production is the operator and data controller for account and direct Service use. A Discord server administrator controls which server features are enabled and may have separate responsibilities for data processed on behalf of that community.
2. Data we process
Discord account and server data
Discord user, server, channel and role IDs; username, avatar, server name and icon; server membership and permissions needed to authenticate you and operate the bot.
Content and configuration
Messages, commands, images and links submitted to enabled features; AI memories and temporary conversation context; custom personalities and prompts; server settings, welcome templates, knowledge-base documents and embeddings; tasks, reminders, playlists and calendar event details.
Moderation records
When server administrators enable moderation, Nyx may process messages, images, links, user and moderator details, rule matches, confidence scores, actions and reasons. A case may retain a snapshot of flagged content for the server's audit record.
Music and usage
Tracks played, listeners present, play duration, likes, skips, preferences, inferred artists and genres, recommendation vectors, command counts and feature usage.
Accounts, integrations and billing
Time zone, subscription status and Stripe customer/subscription IDs; encrypted Google Calendar tokens; and encrypted credentials or OAuth tokens for integrations and MCP servers you choose to connect. Nyx does not receive complete payment-card numbers.
Technical data
Authentication sessions, OAuth state, rate-limit counters, cached service state, request and error logs, and data processed by hosting and security providers such as IP address, browser information and request timing.
Please do not submit passwords, payment-card details, health data or other sensitive information to chat, knowledge-base or custom integration features.
3. Where data comes from
We receive data from you; from Discord when you authenticate, interact with Nyx or share a server where an administrator has enabled a feature; from server administrators; from connected services such as Google and Stripe; and automatically when you use the website or API.
4. Why we use data
We use data to provide requested bot, dashboard, music, AI, moderation, billing and integration features; personalize AI and music when enabled; authenticate users; maintain server audit records; prevent abuse and secure the Service; provide support; comply with law; and establish or defend legal claims.
Where applicable, our legal bases are performance of our agreement with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where law requires it. You may withdraw consent without affecting earlier lawful processing. Nyx does not sell personal data or use it for advertising. We do not use messages to train our own AI models or opt in to provider model training.
5. AI and automated moderation
AI requests may include your prompt, recent conversation, memories, relevant knowledge-base text, images and tool results. Server administrators may enable automated rules or AI moderation that scores content against configured safety categories and may log a case, delete a message, warn, timeout, kick or ban a member. Settings and prior warnings can affect the action. AI can be incorrect. Contact the administrators of the Discord server to contest a moderation decision or request human review.
6. Who receives data
We disclose only what is reasonably needed to operate the Service: Discord for bot and account functions; OpenAI for AI, embeddings and moderation; Google for Calendar and Web Risk features; Stripe for subscriptions; Cloudflare for bot and abuse checks; hosting, database and infrastructure providers; and services or MCP servers that you or a server administrator deliberately connect. Those connected services apply their own policies. Moderation cases and server data are available to authorized server administrators.
We may also disclose data when required by law, to protect users or the Service, in a corporate transaction, or with your direction. We do not give third parties independent rights to use Discord data for advertising or unrelated profiling.
7. International transfers
Nyx and its providers may process data in Singapore, the United States and other countries outside where you live. Where required, we use contractual or other recognized safeguards for international transfers. Different countries may provide different levels of legal protection.
8. Retention
Active AI conversation context
Up to 1 hour in temporary storage.
Music listening history
Up to 90 days.
Authentication sessions
Access sessions normally last 15 minutes and refresh sessions up to 30 days, unless revoked earlier.
Completed scheduled jobs
Normally removed 7 days after completion or cancellation.
AI provider records
OpenAI may retain API inputs, outputs and abuse-monitoring data for up to 30 days under its default data controls, or longer when legally required.
Moderation cases
Kept as the server's audit record until a server administrator requests removal or the record is no longer needed. A personal-data deletion request de-identifies the visible username and avatar but may retain the Discord user ID for audit integrity.
Other account and server records
Kept while the relevant account, server or feature is active, then only as reasonably needed for security, disputes, legal duties, backups and service administration.
Deletion from live systems may not immediately remove encrypted backups, provider records, or data we must keep by law. Those records remain protected and are deleted or overwritten on their normal schedule.
9. Cookies and security
The dashboard sets two strictly necessary HttpOnly authentication cookies, nyx_token and nyx_refresh. We do not use advertising cookies. We use access controls, encryption in transit, and AES-256-GCM encryption at rest for stored OAuth tokens and integration credentials. No system is completely secure, so please report suspected unauthorized access through support.
10. Your choices and rights
Use /privacy settings to opt out of persistent AI memory or music profiling. Opting out does not prevent the temporary processing needed to answer an AI request or play music. Use /privacy delete-my-data to remove personal AI memories and temporary conversation context, disconnect the personal Calendar integration, reset music preferences, remove your ID from listening history, and de-identify profile fields in moderation cases. It is not a complete Nyx account deletion.
Depending on your location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; and complain to your local data-protection authority. We may verify your identity and may retain data where an exception applies, including legal obligations, security and the rights of others. Contact support for a broader account request or for help reaching the relevant server administrator.
11. Children
Nyx is not directed to anyone below Discord's minimum age or the minimum digital-consent age required where they live. Do not use or enable Nyx for a person who is not permitted to use Discord. Contact us if you believe we have processed a child's data contrary to law.
12. Changes and contact
We may update this policy as the Service or law changes. We will update the date above and give reasonable notice of material changes. For privacy requests, questions, or security reports, contact Nonsen Production through the Nyx support server.