Privacy Policy

1. Information we handle

• Discord account details: Discord user ID, username, and avatar identifier received during sign-in.
• Gallery information: gallery owner and settings, public slug, cards, banners, images, metadata, and content you submit or approve.
• Bot workflow information: relevant Discord message, channel, and user identifiers and submission details needed to route and review content.
• Security and operations: session tokens, access state, and administrative audit records needed to secure and operate the service.

2. How information is used

We use this information to authenticate you through Discord, check configured server access, create and manage your gallery, process bot submissions, secure the service, prevent abuse, and respond to support requests.

Discord sign-in creates a secure session cookie. The session expires after 12 hours. The cookie is marked HttpOnly and, in production, Secure.

3. How information is shared

Public gallery content and your chosen gallery slug are visible to anyone who visits the public page. Information is shared with Discord as needed to sign you in, check server membership or roles, and provide bot features.

We do not sell personal information. We do not publish private dashboard content as public gallery content unless you choose to publish or approve it.

4. Retention and deletion

We keep account, gallery, and submission information while needed to provide the service. Session records expire after 12 hours and are cleaned up. Administrative audit records may be retained for service security and operations.

If you schedule gallery deletion, the gallery is disabled immediately and can be restored during the three-day cancellation period. After that, the tenant’s stored files and data are purged. Connected Discord channels may also be deleted as part of that process. Copies already viewed, downloaded, or shared by others may remain outside our control.

5. Security

We use access controls and session protections intended to keep private dashboard and tenant data separated. No internet service can guarantee absolute security; please protect your Discord account and report suspected unauthorized access.

6. Your choices

You can edit or remove gallery content from your dashboard, sign out, disable your gallery, or schedule its deletion. You can also revoke MySOFI’s access from your Discord account settings. Revoking access may prevent sign-in or features that depend on Discord.

7. Children

MySOFI Space is not designed for children who are below the minimum age required to use Discord in their location. We do not knowingly seek to collect information from children who cannot lawfully use the service.

8. Changes to this policy

We may update this policy as the service changes. The current version and effective date will be posted here.

9. Contact

For privacy questions or deletion help, contact the SOFI team through the MySOFI Discord server.