Privacy Policy

This Privacy Policy applies to the Bulwark Discord application and any related websites, dashboards, or support channels we operate (collectively, the “Service”). It does not apply to Discord itself, or to any third-party services that are not under our control.

By adding Bulwark to a Discord server or otherwise using the Service, you acknowledge the practices described in this Policy. If you do not agree, do not use the Service.

Bulwark is operated by the Bulwark team. For privacy requests relating to information we process through the Service, contact us at legal@bulwarkbot.com. Where Bulwark is added to a Discord server, the server’s administrators determine how the bot is configured and used in that community. Discord remains responsible for the Discord platform under Discord’s own terms and privacy policy.

Depending on how the Service is used, we may process the following categories of information:

• Discord identifiers. Server (guild), channel, role, message, and user identifiers necessary to operate the bot, apply configuration, and attribute actions.
• Message and attachment content. Content of messages, embedded links, and attachments that are evaluated in connection with suspected coordinated scam floods, including material retained as incident evidence for moderator review.
• Configuration and audit data. Server settings, feature toggles, and records of administrative or moderation actions taken through Bulwark.
• Technical and diagnostic data. Operational logs, error reports, and related telemetry used to maintain security, reliability, and performance of the Service.
• Communications. Information you choose to send us by email or other support channels.

We do not require creation of a separate Bulwark account to invite the bot. We do not sell personal information, and we do not use Discord message content for advertising.

We use the information described above to:

• provide, operate, and maintain the Service;
• detect coordinated scam-flood behaviour, contain affected accounts where configured to do so, and notify server operators;
• preserve incident evidence (including transcripts, links, and attachments) so that moderators can review events after messages are removed from Discord;
• provide status information, incident history, audit logs, and data-export functionality to authorised server managers;
• secure the Service, prevent abuse, debug failures, and improve reliability; and
• comply with applicable law and respond to lawful requests.

Where applicable data-protection law requires a legal basis, we process information as needed to provide the Service you request, to pursue our legitimate interests in operating a secure and reliable security product for Discord communities (provided those interests are not overridden by your rights), and where necessary to comply with a legal obligation. If we rely on consent for a particular processing activity, you may withdraw consent where the law allows, without affecting processing that occurred before withdrawal.

We may share information as follows:

• With your server operators. Authorised administrators and moderators of a Discord server may access incidents, evidence, configuration, and audit information relating to that server through Bulwark’s commands and alerts.
• With service providers. Vendors who assist us with hosting, infrastructure, logging, or communications, subject to contractual obligations to protect the information and use it only to provide services to us.
• For legal and safety reasons. When we believe disclosure is required by law, regulation, legal process, or governmental request, or is reasonably necessary to protect the rights, safety, or security of Bulwark, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, reorganisation, or sale of assets, subject to appropriate confidentiality protections.

Discord processes platform data under Discord’s policies when you use Discord. Adding Bulwark does not change Discord’s role as the provider of the Discord service.

We retain information for as long as reasonably necessary to provide the Service, support incident review by server operators, maintain security and auditability, and meet legal obligations. Retention periods may vary by data type and server configuration. Server managers may export available Bulwark data for their server and may request deletion of server-associated records by contacting us. We may retain limited information as required for legitimate business or legal purposes after a deletion request (for example, to resolve disputes or comply with law).

We implement administrative, technical, and organisational measures designed to protect information against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Additional detail on our security practices is available on our Security page.

Depending on your location and applicable law, you may have rights to:

• request access to, or a copy of, personal information we hold about you;
• request correction or deletion of personal information;
• object to, or request restriction of, certain processing; and
• lodge a complaint with a supervisory authority.

You may also remove Bulwark from a Discord server at any time, disable detection using available emergency controls, or ask a server manager to adjust configuration. To exercise rights we control, email legal@bulwarkbot.com. We may need to verify your request and, where appropriate, coordinate with the relevant server administrators. Some requests may be limited where we are not the appropriate party to fulfil them, or where an exception applies under law.

The Service may be hosted or supported using infrastructure located in different countries. If you access the Service from outside the country where our systems are located, your information may be transferred across borders. Where required, we take steps designed to ensure that such transfers are subject to appropriate protections.

The Service is directed to Discord server operators and communities. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page indicates when the Policy was most recently revised. Where changes are material, we will provide additional notice as appropriate under the circumstances. Continued use of the Service after an update becomes effective constitutes acceptance of the revised Policy, except where applicable law requires otherwise.

For privacy questions or requests, contact legal@bulwarkbot.com.