Privacy Policy for Officer Jenny Bot

Last Updated: February 11, 2026

Introduction

Officer Jenny is a Discord verification bot designed to help server communities maintain safety through automated verification. We take your privacy seriously and are committed to transparency about what data we collect and how we use it.

This Privacy Policy explains what information we collect when you verify with Officer Jenny, how we use it, and your rights regarding your data.

What Information We Collect

During Verification (OAuth Process)

When you click "Verify with Officer Jenny" and authorise our application, we collect:

Discord User ID - Your unique Discord identifier
Server/Guild ID - The Discord server you're joining
Server List - A list of Discord servers you're a member of (used ONLY to check against our blacklist)
IP Address (Hashed) - Your IP address is immediately hashed and never stored in plaintext (used for abuse prevention)
Timestamp - When you attempted verification

Important: We do NOT store your full server list. We only store information about servers that match our blacklist (if any).

If You Join the Queue

If the server's Free role is at capacity and you're added to the queue:

Queue Position - Your place in line
Join Time - When you joined the queue
Verification Status - Whether you've completed verification

If You Subscribe to Premium (via Stripe)

If you choose to subscribe to Premium access:

Stripe Customer ID - Your Stripe customer identifier
Stripe Subscription ID - Your subscription identifier
Subscription Status - Active, cancelled, past due, etc.
Plan Information - Which Premium plan you selected

Payment Information: We do NOT collect or store any payment card details, billing addresses, or other payment information. All payment processing is handled securely by Stripe. Please see Stripe's Privacy Policy for details on how they handle your payment data.

If You Use a Trial

If you request a 24-hour trial:

Trial Start Time - When your trial began
Trial Expiration - When your trial ends
Trial Usage - Whether you've used your one-time trial

What We DON'T Collect

We are committed to minimal data collection. We do NOT collect:

Your full Discord server list (only blacklist matches)
Discord access tokens (discarded immediately after verification)
Your messages or DM content
Your email address, phone number, or real name
Payment card information (handled by Stripe)
Browsing history or cookies (no tracking pixels)
Device information beyond basic request headers

How We Use Your Information

Verification & Safety

Blacklist Checking - We compare your server list against our database of known problematic servers
Role Assignment - We assign appropriate roles (Verified, Detained, Queued, etc.) based on verification results
Abuse Prevention - Hashed IP addresses help us prevent spam and abuse of the verification system

Queue Management

Fair Ordering - Queue positions ensure fair, first-come-first-served access to Free roles
Notifications - We send you Discord DMs when you reach the front of the queue

Premium Subscriptions

Access Control - We verify your Premium status to grant appropriate roles
Auto-Cancellation - If you're promoted from queue to Free role while on Premium, we automatically cancel your Stripe subscription to prevent double-charging
Ban Cancellation - If you are banned from a server for violating its rules, your Premium subscription for that server will be automatically cancelled

Analytics & Improvement

Discovery - We temporarily store a list of servers seen during verification (without user association) for 30 days to identify new servers to add to our blacklist
Metrics - We track verification success rates, queue lengths, and system performance (no individual user tracking)

Data Retention

We automatically delete data according to these schedules:

Data Type	Retention Period
Verification Logs	90 days (automatic deletion)
Verification Cooldowns	24 hours (automatic deletion)
Discovery Analytics	30 days (automatic deletion)
Queue Positions	Until promoted or user leaves server
Member Join Tracking	Until verified or user leaves server
Premium Subscription Data	Until cancelled, expired, or banned
Detention Tickets	Indefinite (for audit purposes)

Third-Party Services

We use the following third-party services:

Discord (OAuth2)

Purpose: User authentication and server list access
Data Shared: Discord User ID, server list (during verification only)
Privacy Policy: Discord Privacy Policy

Stripe (Payment Processing)

Purpose: Premium subscription payments
Data Shared: Discord User ID (as metadata), subscription preferences
Payment Data: Handled entirely by Stripe (we never see your card details)
Privacy Policy: Stripe Privacy Policy
Terms of Service: Stripe Terms

Data Security

We implement industry-standard security measures to protect your data, including encryption of data in transit and at rest, access controls, rate limiting, and regular security reviews. No method of electronic storage or transmission is 100% secure, but we take reasonable steps to protect your personal information.

Your Rights

Right to Access

You can request to view what data we have stored about you by contacting a server administrator.

Right to Deletion

Automatic: Most data is automatically deleted after retention periods (24 hours to 90 days)
Manual Request: You can request immediate deletion by contacting a server administrator
Leaving Server: When you leave a Discord server using Officer Jenny, your queue position and member tracking data is automatically deleted

Right to Rectification

If you believe you were incorrectly detained (false positive):

Use the detention ticket system to appeal
Server staff can manually override and grant you Verified status
Provide evidence that you've left any blacklisted servers

Right to Portability

You can request a copy of your data in JSON format by contacting a server administrator.

Right to Cancel

Premium Subscriptions: Cancel anytime through the Stripe Customer Portal
Queue: Leave the queue by leaving the Discord server
Verification: You can choose not to verify (though you may be kicked after 30 days per server policy)

International Users

Officer Jenny is a UK-only service. This bot is designed for and restricted to UK-based Discord communities.

By using our service, you acknowledge that:

Officer Jenny is operated from the United Kingdom
Your data is stored and processed in the UK and EU
We comply with UK and EU data protection laws
We do not provide support for international customers or non-UK legal frameworks

Data Protection Compliance:

GDPR (General Data Protection Regulation) - EU privacy law
UK GDPR - UK data protection law

If you are located outside the UK and choose to use this service, you do so at your own discretion and accept that UK privacy laws apply.

Children's Privacy

Officer Jenny is not directed at children under 13. Discord's Terms of Service require users to be at least 13 years old. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by:

Updating the "Last Updated" date at the top of this document
Posting an announcement in Discord servers using the bot
Requiring re-acceptance of terms for major changes

Continued use of Officer Jenny after changes constitutes acceptance of the updated Privacy Policy.

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

Notify affected users within 72 hours
Provide details about what data was compromised
Explain what steps we're taking to mitigate the breach
Offer guidance on protecting your account

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact a server administrator in the Discord server where Officer Jenny is installed.

Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Legitimate Interest - Verifying users and maintaining server safety
Contract - Providing Premium subscription services (via Stripe)
Consent - You authorise OAuth access to your Discord server list
Legal Obligation - Retaining audit logs for 90 days for security purposes

Operational Security

What We Don't Reveal:

We never disclose which specific servers are on our blacklist to regular users
Blacklist contents are only visible to server administrators
Matched servers are only shown to server staff in detention tickets

Your Privacy:

Other users cannot see your verification history
Your server list is never shared with other users
Queue positions are visible to you only

Summary: We collect minimal data (Discord ID, verification results), delete it automatically (90 days max for logs), never sell it, and give you full control over your information. Payment data is handled securely by Stripe.