NinjaBot Privacy Policy

Effective date: August 8, 2026

NinjaBot is a Discord community-support and moderation bot used primarily for VDO.Ninja and Social Stream Ninja. It processes Discord data to operate requested features, protect the community, organize support, and publish authorized community content. We do not sell personal information or use it for advertising.

1. Operator, protected parties, and scope

NinjaBot is operated by Skindeep.AI Inc., a Canadian corporation registered in Ontario and doing business under the registered business name Ninjafy Inc. Steve Seguin is the service and privacy contact. VDO.Ninja, Social Stream Ninja, NinjaBot, and SteveSeguin-branded projects are project names or brands and are not separate data controllers unless expressly stated otherwise. In this policy, Operator means Skindeep.AI Inc., doing business as Ninjafy Inc. Protected Parties means the Operator, Skindeep.AI Inc., Ninjafy Inc., Steve Seguin personally, VDO.Ninja, Social Stream Ninja, NinjaBot, SteveSeguin-branded projects, and their respective current and former directors, officers, employees, contractors, contributors, moderators, volunteers, agents, service providers, licensors, successors, and assigns.

This policy applies to the NinjaBot Discord application and the related updates page. Discord separately controls the Discord platform and retains data under its own policies. VDO.Ninja and Social Stream Ninja also have separate policies linked below.

2. Information NinjaBot processes

Depending on the feature being used, NinjaBot may process:

Discord account and community data, such as user IDs, usernames, display names, avatars, roles, guild IDs, channel IDs, thread IDs, and interaction identifiers.
Message content, replies, commands, embeds, reactions, attachments, attachment URLs, and related timestamps.
Support and moderation information, including spam indicators, exposed streaming-key patterns, prohibited invite links, moderation actions, and support-thread activity.
Content submitted for project updates or community service listings when those features are used.
Operational information such as errors, timestamps, API response status, and bot activity logs.

3. How information is used

Message Content access: NinjaBot accesses Discord Message Content only to detect spam, prohibited invite links, and exposed streaming keys; process configured commands; create and manage support threads; and administer authorized project-update and community-service-listing workflows. Message content is not used for advertising, user profiling, or direct LLM processing.

NinjaBot uses this information to:

Detect spam, remove prohibited invite links, warn users, remove exposed streaming keys, delete abusive messages, and take configured moderation actions.
Create, title, manage, and archive support threads; run commands; and notify participating support staff.
Publish authorized project updates and approved community service listings.
Post configured Reddit and YouTube updates to Discord.
Diagnose failures, secure the bot, prevent abuse, and maintain service reliability.

4. Ask the Bot and NinjaClawd

NinjaBot does not directly generate LLM answers. When an eligible user explicitly presses Ask the Bot, NinjaBot posts a request that invokes NinjaClawd, a different Discord application also operated by Skindeep.AI Inc. under the Ninjafy Inc. business name. NinjaClawd may then process the support thread under its own bot configuration and applicable disclosures. Do not press the button if you do not want the thread handed to NinjaClawd.

5. Storage and retention

Routine anti-spam message content is normally held in memory for roughly 60 seconds, unless the activity triggers moderation or reporting.
Moderation reports may include message content or attachment details and are retained only while reasonably needed for moderation, abuse prevention, security, dispute resolution, or legal obligations.
Operational logs rotate based on file size rather than a guaranteed number of days and are deleted through rotation or when no longer reasonably needed for security, diagnostics, abuse prevention, or legal obligations.
Authorized updates and approved service listings may be stored in GitHub Gists and displayed publicly while needed for the publishing feature or until corrected or removed.
Administrators may create security, support, migration, or backup exports of Discord channel history. Such exports must be limited to their stated operational purpose and deleted when no longer reasonably needed, subject to applicable security, dispute-resolution, and legal requirements.
Messages and threads retained by Discord remain subject to Discord server settings and Discord's own retention practices.

Discord API data is not retained longer than reasonably necessary for the purposes described in this policy. Valid deletion requests for information controlled by the Operator are handled promptly, subject to identity verification and retention required by law. Residual copies may remain temporarily in rotating backups until overwritten in the ordinary backup cycle and will not be used for ordinary operations.

6. Sharing and service providers

Information may be shared only as needed to operate selected features, comply with law, or protect users and services. Relevant providers and integrations may include Discord, GitHub/Gists, Reddit, YouTube/Google APIs, project-operated image caching, hosting and network providers, and NinjaClawd as a separate related application. Third-party providers' own terms and privacy policies apply to their services.

These providers may process information outside Canada, including in the United States and other countries where privacy laws and lawful-access rules differ. Information may also be disclosed when reasonably believed necessary to comply with law or legal process; investigate fraud, abuse, security incidents, or violations; protect users or the Protected Parties; establish or defend legal claims; or complete a reorganization, financing, asset transfer, merger, or similar transaction subject to appropriate safeguards where required.

7. Public content

Messages posted by authorized users in configured update channels may be republished on the public updates site. Approved service submissions may also be published publicly. Do not submit information through those workflows that you do not want made public.

8. User choices and requests

You can avoid optional bot interactions, refrain from pressing Ask the Bot, delete Discord messages where Discord permits, or contact us to request access, correction, or deletion of personal information controlled by the Operator. The Operator may need to verify your identity and may decline, limit, or redact a request where permitted or required by law, including to protect another person's privacy, security, confidential information, legal privilege, or the integrity of an investigation. Some information may be retained where reasonably necessary for security, abuse prevention, dispute resolution, legal compliance, backups, or preserving the integrity of public records.

9. Security and children

Reasonable measures are used to protect bot credentials and stored information, but no networked service is perfectly secure. Do not post passwords, API keys, stream keys, or other sensitive information. Users must be old enough to use Discord and the relevant project services; VDO.Ninja is intended for users aged 16 or older.

10. No guarantee and allocation of risk

The Operator aims to handle personal information responsibly and to apply safeguards appropriate to the circumstances. However, no transmission, automated moderation system, third-party platform, or storage system can be guaranteed completely secure, accurate, or available. To the fullest extent permitted by law, the Protected Parties do not assume responsibility for Discord or other third-party practices, user conduct, unauthorized access that occurs despite reasonable safeguards, or information a user voluntarily makes public. Use of NinjaBot remains subject to the disclaimers and limitations in the NinjaBot Terms of Service. Nothing in this policy excludes privacy rights or obligations that cannot lawfully be excluded.

11. Related policies

12. Changes and contact

This policy may be updated as NinjaBot, applicable law, or operational practices change. Material revisions will update the effective date above. For privacy questions, complaints, or requests, contact Steve Seguin, the privacy contact for Skindeep.AI Inc., doing business as Ninjafy Inc., at [email protected]. Where Canadian privacy law applies, requests will be handled subject to applicable legal rights, exceptions, and verification requirements.