Galaxy Droid Privacy Policy
Galaxy Droid (GD, Bot) is now an official product of sunstone.gg.

Effective Date: November 28th, 2025

Galaxy Droid (“we,” “us,” “our”) is committed to safeguarding the privacy of everyone who interacts with our Discord bot (“Bot”). This Privacy Policy describes how we collect, use, share and protect your information in accordance with the Protection of Personal Information Act (POPIA), the Discord Terms of Service & Community Guidelines, and applicable South African law.

1. Data Controller
   Galaxy Droid, Fearon Roleplay
   Email: legal@sunstone.gg

2. Scope & Consent
   By inviting or using the Bot in your server, you and your server’s users consent to this policy. Any server administrator may configure logging or moderation features that affect what data is collected.

3. What We Collect
   • Discord Identifiers: user IDs, usernames, discriminators, avatar URLs
   • Guild Identifiers: server IDs, channel IDs, role IDs
   • Message Content: only for moderation purposes (bad-word filters, auto-mod, logging)
   • Interaction Data: slash-command usage, button/menu selections, poll responses
   • Economy & Profile Data: balances, XP, levels, warnings, AFK status, custom commands
   • Metadata & Usage Logs: timestamps, message edits/deletions, reaction events
   • Third-Party API Data: minimal API keys are required on our server (e.g., weather, translation)

4. Why We Collect It
   • To operate core features (economy, leveling, commands) – performance of contract
   • To enforce server rules & automate moderation – legitimate interests
   • To log edits/deletions and provide audit trails – accountability & transparency
   • To comply with legal obligations (e.g., court orders, safety requirements)

5. Legal Basis (POPIA)
   We process your personal data under:
   • Performance of a contract (provision of Bot features)
   • Legitimate interests (spam prevention, security, logging)
   • Compliance with law (court orders, POPIA investigations)

6. How We Share & Disclose Data
   We will never sell or rent your personal data. We may share:
   • With service providers (hosting, analytics) under strict NDA & POPIA controls
   • To comply with lawful requests from courts, regulators or law enforcement
   • With server administrators when actions occur (e.g., moderation logs in your mod-log channel)

7. International Data Transfers
   Our Bot is hosted on global servers. Where data crosses borders, we safeguard it by:
   • Implementing standard contractual clauses (SCCs) where required
   • Encrypting data in transit (HTTPS/TLS) and at rest

8. Data Retention
   • Moderation logs, warnings, and economy data are retained indefinitely or until manually cleared by server administrators.
   • Message edit/delete logs are stored for a configurable period (default: 30 days).
   • User-initiated data removal (via Bot commands or server-owner request) will be actioned promptly.

9. Security Measures
   We employ administrative, technical and physical safeguards, including:
   • Encrypted storage of sensitive data (database.json)
   • Access controls & role-based permissions for bot processes
   • Regular backups & secure key management
   • Monitoring & alerting for unauthorized access attempts

10. Your Rights under POPIA
    You may, at any time, exercise the following rights by contacting galaxydroidcontact@gmail.com:
    • Right of Access: request a copy of your personal data
    • Right of Correction: rectify inaccurate or incomplete data
    • Right to Deletion: request deletion of your personal data
    • Right to Object: object to processing on legitimate-interest grounds
    • Right to Lodge a Complaint: with South Africa’s Information Regulator

11. Children’s Privacy
    Our Service is not directed at persons under 13. We do not knowingly collect or process personal data from minors.

12. Changes to This Policy
    We may update this Privacy Policy. Material changes will be posted with a new Effective Date. Continued use of the Bot constitutes acceptance of the revised policy.

13. Contact Us
    Questions, concerns or data-subject requests?
    Email: info@sunstone.gg