1. Who We Are
Kovra is operated by Yalmaz Imran, based in Germany. We provide Discord bot services (Guard, Desk, Rise) and an associated web dashboard at dash.kovra.xyz.
2. Data We Collect
We collect only the data necessary to provide our service:
- Discord account data — User ID, username, avatar, and guild memberships (received via Discord OAuth2).
- Server data — Guild ID, name, icon, roles, channels, and member lists for servers that install our bots.
- Moderation data — Cases, warnings, bans, and associated reasons created by server moderators.
- Ticket data — Ticket content, form responses, and transcripts for servers using the Desk bot.
- XP data — Message counts and XP totals for servers using the Rise bot.
- Configuration data — Bot settings, automod rules, reaction roles, and other server configuration.
We do not collect message content (except for AutoMod processing, which is not stored), email addresses, IP addresses, or payment card details (payments are handled by LemonSqueezy as our Merchant of Record).
3. How We Use Your Data
- To provide and operate the Kovra bot suite and dashboard.
- To enforce moderation actions as configured by server administrators.
- To generate analytics and statistics for server administrators.
- To authenticate you and determine your permissions.
4. Data Storage and Security
All data is stored on servers located in the European Union (Hetzner, Germany). We use encryption at rest for sensitive fields (session tokens) and TLS for all data in transit. Access to production systems is restricted to the operator.
5. Data Retention
- Active servers — Data is retained as long as any Kovra bot remains installed.
- Removed servers — Data is deleted within 30 days after all bots are removed.
- Moderation cases — Retained for 1 year after bot removal for audit purposes, then deleted.
6. Your Rights (GDPR)
As an EU data subject, you have the right to:
- Access — Request a copy of your personal data.
- Rectification — Request correction of inaccurate data.
- Erasure — Request deletion of your data.
- Portability — Request your data in a machine-readable format.
- Object — Object to processing of your data.
To exercise any of these rights, visit your account page (while logged in to the dashboard) to export or delete your data with one click, or contact us at yalmazimran@icloud.com.
7. Third-Party Services
- Discord — We interact with Discord's API to provide bot functionality.
- LemonSqueezy — Handles payment processing as our Merchant of Record.
- IONOS — Provides VPS hosting for the dashboard, API, and bots.
- Hostinger — Provides authoritative DNS for kovra.xyz.
8. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in our Discord support server. Continued use of the service after changes constitutes acceptance.
9. Contact
Yalmaz Imran
Email: yalmazimran@icloud.com