NinjaBot Privacy Policy

Effective date: October 17, 2026

NinjaBot is a Discord community-support and moderation bot used primarily for VDO.Ninja and Social Stream Ninja. It processes Discord data to operate requested features, protect the community, organize support, and publish authorized community content. We do not sell personal information or use it for advertising.

1. Operator, protected parties, and scope

NinjaBot is operated by Skindeep.AI Inc., a Canadian corporation registered in Ontario and doing business under the registered business name Ninjafy Inc. Steve Seguin is the service and privacy contact. VDO.Ninja, Social Stream Ninja, NinjaBot, and SteveSeguin-branded projects are project names or brands and are not separate data controllers unless expressly stated otherwise. In this policy, Operator means Skindeep.AI Inc., doing business as Ninjafy Inc. Protected Parties means the Operator, Skindeep.AI Inc., Ninjafy Inc., Steve Seguin personally, VDO.Ninja, Social Stream Ninja, NinjaBot, SteveSeguin-branded projects, and their respective current and former directors, officers, employees, contractors, contributors, moderators, volunteers, agents, service providers, licensors, successors, and assigns.

This policy applies to the NinjaBot community-management application (843169738556571680) and the related updates page. The separate AI support application (1465030230107357275) is not covered by this bot's data-processing description. Discord separately controls the Discord platform and retains data under its own policies. VDO.Ninja and Social Stream Ninja also have separate policies linked below.

2. Information NinjaBot processes

Depending on the feature being used, NinjaBot may process:

Discord account and community data, such as user IDs, usernames, display names, avatars, roles, guild IDs, channel IDs, thread IDs, and interaction identifiers.
Message content, replies, commands, embeds, reactions, attachments, attachment URLs, and related timestamps.
Support and moderation information, including spam indicators, exposed streaming-key patterns, prohibited invite links, moderation actions, and support-thread activity.
Content submitted for project updates or community service listings when those features are used.
Operational diagnostics limited to timestamps, severity, code locations, and error types; these diagnostics exclude message text, attachments, and configuration values.

3. How information is used

Message Content access: NinjaBot reads ordinary server messages to compare repeated or similar text across channels and detect attachment and image-link flooding. It also processes prohibited invite links and streaming-key patterns, configured commands, support-thread titles, authorized updates, and approved service submissions. This application does not use message content for advertising, user profiling, AI responses, or training AI or machine-learning models.

NinjaBot uses this information to:

Detect spam, remove prohibited invite links, warn users, delete abusive messages, and take configured moderation actions. Streaming-key pattern detection does not currently delete messages.
Create, title, manage, and archive support threads; run commands; and notify participating support staff.
Publish Steve Seguin's own project-update messages and approved community service listings.
Post configured Reddit and YouTube updates to Discord.
Diagnose failures, secure the bot, prevent abuse, and maintain service reliability.

4. Optional AI support handoff

When an eligible user presses Ask the Bot, NinjaBot mentions the separate AI support application (1465030230107357275, also known as StevesBot or NinjaClawd) with the requesting user's ID and the thread starter's message ID. That application is also operated by the Operator and handles its own support workflow and data processing. NinjaBot does not call an AI provider or build a knowledge index. The handoff is optional; do not press the button if you do not want NinjaBot to request AI support.

5. Storage and retention

Routine moderation uses an in-memory buffer containing the latest message text and recent message/channel identifiers for each active author. Every two minutes, the bot removes buffers for authors inactive for more than 60 seconds. Active authors' latest text is replaced as new text arrives. The Discord client also keeps a bounded in-memory message cache. Neither cache is written to a message-history file.
Moderation reports containing message excerpts or attachment details remain in the staff moderation channel in Discord, where staff can review actions and handle disputes.
The bot generates operational diagnostics containing timestamps, severity, code locations, and error types, without message text, attachments, or configuration values.
The updates publisher copies only Steve Seguin's own posts from the configured updates channel to a GitHub Gist for the public updates site. It does not publish other members' ordinary chat messages.
Approved service-listing records, submitted through the services form and reviewed in Discord, are stored separately in a GitHub Gist for the public directory. These are intentional directory submissions, not collected chat history. Public updates and listings remain available while needed for their publishing features or until corrected or removed.
The management bot does not export channel history or maintain a separate message-history archive.
Bot configuration, moderator-created command replies, integration cursors, and staff notification preferences remain stored while needed to operate those features.
Messages and threads retained by Discord remain subject to Discord server settings and Discord's own retention practices.

To request access, correction, or deletion of information controlled by the Operator, email [email protected] with your Discord user ID and the relevant message or listing links. Requests are reviewed promptly, including requests concerning published listings and moderation reports.

6. Sharing and service providers

Information may be shared only as needed to operate selected features, comply with law, or protect users and services. Relevant providers and integrations may include Discord, GitHub/Gists, Reddit, YouTube/Google APIs, project-operated image caching, hosting and network providers, and NinjaClawd as a separate related application. Third-party providers' own terms and privacy policies apply to their services.

These providers may process information outside Canada, including in the United States and other countries where privacy laws and lawful-access rules differ. Information may also be disclosed when reasonably believed necessary to comply with law or legal process; investigate fraud, abuse, security incidents, or violations; protect users or the Protected Parties; establish or defend legal claims; or complete a reorganization, financing, asset transfer, merger, or similar transaction subject to appropriate safeguards where required.

7. Public content

The public updates site republishes only Steve Seguin's own posts from the configured updates channel. Community members' ordinary conversations are not published to that site. Separately, approved submissions to the services form are published in the public services directory. Do not include information in a service submission that you do not want made public.

8. User choices and requests

You can avoid optional bot interactions, refrain from pressing Ask the Bot, delete Discord messages where Discord permits, or contact us to request access, correction, or deletion of personal information controlled by the Operator. Server administrators can restrict the bot's channel access or remove it. Automated moderation applies to eligible messages in channels the bot can access; there is no individual moderation bypass. The Operator may need to verify your identity and may decline, limit, or redact a request where permitted or required by law, including to protect another person's privacy, security, confidential information, legal privilege, or the integrity of an investigation.

9. Security and children

Reasonable measures are used to protect bot credentials and stored information, but no networked service is perfectly secure. Do not post passwords, API keys, stream keys, or other sensitive information. Users must be old enough to use Discord and the relevant project services; VDO.Ninja is intended for users aged 16 or older.

10. No guarantee and allocation of risk

The Operator aims to handle personal information responsibly and to apply safeguards appropriate to the circumstances. However, no transmission, automated moderation system, third-party platform, or storage system can be guaranteed completely secure, accurate, or available. To the fullest extent permitted by law, the Protected Parties do not assume responsibility for Discord or other third-party practices, user conduct, unauthorized access that occurs despite reasonable safeguards, or information a user voluntarily makes public. Use of NinjaBot remains subject to the disclaimers and limitations in the NinjaBot Terms of Service. Nothing in this policy excludes privacy rights or obligations that cannot lawfully be excluded.

11. Related policies

12. Changes and contact

This policy may be updated as NinjaBot, applicable law, or operational practices change. Material revisions will update the effective date above. For privacy questions, complaints, or requests, contact Steve Seguin, the privacy contact for Skindeep.AI Inc., doing business as Ninjafy Inc., at [email protected]. Where Canadian privacy law applies, requests will be handled subject to applicable legal rights, exceptions, and verification requirements.