Privacy Policyπ
By authorizing or interacting with Kuma Bot, you agree to the data practices outlined in this policy. Aki Works is committed to transparency, data minimization, and protecting user privacy across the Stoat and Revolt ecosystems.
1. What We Collect
- User Identifiers β We collect public-facing platform data including your unique User ID, username, and role IDs.
- System Event Logs β To provide security automation, we record message timestamps, channel IDs, and specific command usage execution records.
- No Content Harvesting β Kuma never records, reads, or harvests your personal chat histories, private credentials, or off-platform data.
2. Why We Collect It & Data Processing
- Core Functionality β To track active server joins, process authorized admin commands, and identify potential automated raid patterns.
- Security & Auditing β To populate your Owner's Command Center with real-time health metrics, mod activity feeds, and tracking analytics.
- Future Aggregation β We reserve the right to initiate anonymized data collection for performance optimization. If this occurs, Kuma Bot will explicitly notify you via a prominent banner on the dashboard and an automated announcement message in your community.
3. Where & How We Store Your Data
- Infrastructure β All collected system logs and configuration data are stored securely on hosted cloud database instances deployed via Railway.
- Security Protocols β Our databases are sandboxed behind strict environment variables, utilizing encrypted access tokens to ensure no unauthorized external party can intercept your server's log history.
- Retention Limits β System logs are automatically rotated and permanently purged after a standard operational retention window, unless held for active security/anti-raid investigations.
4. When We May Access or Share Your Data
- Technical Maintenance β The development team at Aki Works may access backend database logs strictly for system debugging, troubleshooting crashes, or resolving API exploits.
- No Monetization β We do not sell, rent, or trade your data to third parties.
- Legal Enforcement β We will only share logged infrastructure data if explicitly required to comply with law enforcement requests involving public safety, or to report major platform violations to Stoat/Revolt staff.
5. Your Rights & The Right to Be Forgotten
Under international frameworks (including GDPR and APPI), you possess comprehensive rights regarding your digital footprint:
- Right to Erasure (Be Forgotten) β Server owners can completely wipe their community's configuration histories at any time. Individual users can request that their unique log entries be permanently scrubbed from our active databases.
- Right to Access & Portability β You may request a copy of the specific machine identifiers Kuma has associated with your account.
- How to Exercise Your Rights β To remove your data or submit a formal data erasure or access request, please email us directly at legal@kumabot.xyz. Requests will be validated and executed within 30 days.
6. Governing Law, Jurisdiction & Global Compliance
- Current Framework β Kuma Bot and Aki Works operate out of Japan. By interacting with our services, you agree that any operational disputes or privacy evaluations will be governed by and construed in accordance with the laws of Japan.
International Compliance (GDPR & APPI):
Aki Works acts as the Data Controller for bot operations. Data processing is executed under the lawful basis of Legitimate Interest to secure and moderate communities against malicious raids.
In accordance with the APPI, we maintain strict internal controls against unauthorized data handling and will promptly notify both users and the Personal Information Protection Commission (PPC) in the highly unlikely event of a significant system data breach.