Introduction
EzraAI ("we", "our", or "the Bot") is a Discord bot that provides AI conversation, economy, leveling, and utility features to Discord servers. This Privacy Policy explains what information we collect, why we collect it, and how it is used when you interact with EzraAI.
By using EzraAI in any Discord server, you acknowledge and agree to the data practices described in this document. If you do not agree, you may request removal of your data at any time as described in Section 7.
We only collect data that is necessary for the bot to function. We do not sell, trade, or rent your personal information to third parties. As of June 2026, sensitive personal data (conversation history, memory) is protected with AES-256-GCM end-to-end encryption at rest.
Data We Collect
EzraAI automatically collects certain information when you interact with the bot. This includes:
User Data
- Your Discord User ID (a unique numerical identifier assigned by Discord)
- Your Discord username at time of interaction (for display purposes)
- Experience points (XP), level, coins, and economy balances earned through bot activity
- Daily streak data and activity timestamps
- Vote timestamps from top.gg if you choose to vote for the bot
- Badges and achievements earned through bot usage
- AI conversation memory and history — encrypted at rest with AES-256-GCM
- Referral codes and referral activity if you use the referral system
- Premium status and tier if you have an active premium subscription
- Warning history issued by server administrators
- Any reminders you set through the bot
- Sentiment history used for wellbeing features — encrypted at rest with AES-256-GCM
Server Data
- Discord Server ID for servers where EzraAI is present
- Server configuration settings (AI personality, log channel, welcome channel)
- Custom server facts and memories added by server administrators
- Premium status of the server if applicable
What We Do Not Collect
- Full message content — we do not log or store every message sent in a server
- Voice data, images, or files shared in Discord
- Email addresses, real names, or any off-platform personal information
- IP addresses or device identifiers
- Payment information of any kind
End-to-End Encryption
As of June 2026, EzraAI encrypts sensitive personal data at rest using AES-256-GCM, an authenticated encryption standard. This protects your conversation history, memory, and sentiment data so that even a database breach cannot expose readable content without the master secret, which is held only on our server infrastructure.
Technical details
- Algorithm: AES-256-GCM with 128-bit authentication tag (tamper-proof)
- Per-user key derived via PBKDF2 (100,000 rounds, SHA-512) — each user's key is unique
- Random 96-bit IV per encryption operation — no two ciphertexts are alike
- Master secret stored only as a server environment variable, never in the database
- All connections to the database and AI providers use TLS 1.2+ (data encrypted in transit too)
What encryption does and does not cover
- Encrypted: conversation history, personal memory, sentiment history
- Plaintext (by design): XP, coins, level, aura, badges — required for leaderboards and dashboards to work
- When generating a reply, your history is temporarily decrypted in-memory and discarded immediately after — it is never written to disk or logs in decrypted form
Deleting your data (Section 7) also invalidates your unique derived encryption key, making any residual encrypted records permanently unreadable even if they were to persist in backups.
How We Use Your Data
Data collected by EzraAI is used exclusively to operate and improve the bot's features:
- To track XP, levels, coins, and economy progress across sessions
- To power AI conversation memory so the bot can remember context you share
- To manage leaderboards, streaks, and achievements
- To process top.gg votes and reward voters
- To deliver reminders you have set
- To enforce server-level and global moderation actions
- To provide premium features to qualifying users and servers
- To generate anonymised usage statistics for bot improvement
We do not use your data for advertising, profiling, or any commercial purpose beyond providing the bot's services.
Data Storage & Security
All user and server data is stored in a Turso (libSQL) database hosted on secure cloud infrastructure. Sensitive fields — conversation history, memory, and sentiment data — are encrypted with AES-256-GCM before being written to the database, as described in Section 2b. All connections are transmitted over TLS-encrypted connections. Access to the database is restricted to the bot operator and trusted administrators.
We implement industry-standard technical and organisational measures to protect your data, including end-to-end encryption for personal conversation data. No system is completely immune to security risks. Use of Discord itself is subject to Discord's own Privacy Policy.
Data is stored for as long as you or your server continues to use EzraAI, or until a deletion request is made (see Section 7).
Third Party Services
EzraAI interacts with the following third-party services to provide its features:
- Discord — the platform through which all interactions occur. Subject to Discord's Privacy Policy at discord.com/privacy.
- Mistral AI — primary AI provider used to generate responses. Messages that trigger AI replies are processed through Mistral's API.
- Groq — used for fast AI inference on select models. Message content is transmitted to Groq's API for those models.
- Anthropic (Claude) — used for advanced AI tasks on Max tier. Applicable message content is processed through Anthropic's API.
- Turso — our database provider. Data stored in Turso is encrypted at rest with AES-256-GCM as described in Section 2b.
- HuggingFace — used for AI image generation. Image prompts are sent to HuggingFace's API.
- Brave / Tavily / DuckDuckGo — used for web search features available on Pro/Max tier. Search queries are transmitted to these providers.
- top.gg — used to receive vote notifications. Your Discord User ID is shared with top.gg when you vote.
We do not control, and are not responsible for, the privacy practices of these third-party services.
Data Retention
Your data is retained for as long as your account is active or the bot is present in your server. Specifically:
- User data persists indefinitely unless you request deletion
- AI conversation memory and history is stored until you clear it via bot commands or request deletion — it is encrypted at rest at all times
- Sentiment history is automatically pruned after 14 days
- Vote timestamps older than 30 days are automatically pruned to maintain rolling monthly counts
- Server data is retained while the bot remains in the server; if the bot is removed, server configuration data may persist for up to 90 days before automated cleanup
- Deleting your account data also invalidates your unique derived encryption key — any residual encrypted data becomes permanently unreadable
Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data. Regardless of location, we honour the following requests:
- Access — you may request a summary of the data we hold about you
- Correction — you may request correction of inaccurate data
- Deletion — you may request complete deletion of all data associated with your Discord User ID
- Memory clearing — you can clear your AI memory at any time using the bot's built-in commands
To exercise any of these rights, contact us via the support server or the email address listed in Section 10. Deletion requests will be processed within 30 days.
Children's Privacy
EzraAI is not directed at children under the age of 13, in accordance with Discord's own minimum age requirements. We do not knowingly collect personal data from users under 13 years of age. Discord prohibits use of its platform by those under 13, and by extension, EzraAI is bound by those same conditions.
If you believe a child under 13 has interacted with EzraAI and provided data, please contact us immediately for prompt deletion.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the bot's features, applicable law, or our data practices. When we make significant changes, we will update the "Last updated" date at the top of this document.
Continued use of EzraAI after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
Contact
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please reach out through:
- The official EzraAI Discord support server
- Contacting the bot owner directly via Discord
We will respond to all valid privacy enquiries within 14 business days.