Modulo Privacy Policy

Operated by Mega Meem Marketing • GSTIN: 09AHWPH2222E1ZE • Effective Date: November 2026

This Privacy Policy ("Privacy Policy", "Policy") explains how Modulo, including our Discord bot, web dashboard, REST APIs, workers, documentation, and associated services operated by Modulo ("Modulo", "we", "us", or "our"), collects, uses, stores, shares, protects, and deletes information concerning Discord server owners, administrators, server members, and website visitors.

We are committed to maintaining the privacy, confidentiality, and security of your personal data. Modulo operates under a principle of strict data minimization: we collect and retain only the minimal data strictly necessary to provide server security, anti-nuke defense, moderation automation, custom command execution, leveling, ticketing, and web dashboard configuration.

By inviting, installing, configuring, accessing, or using Modulo, or by accessing our website at https://moduloapp.xyz or our dashboard, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Policy, you must refrain from using Modulo and remove the bot from any Discord servers under your control.

1. Scope and Operating Entity

This Privacy Policy applies to all interactions with Modulo across Discord servers, our web dashboard at moduloapp.xyz, our REST API at api.moduloapp.xyz, and any related digital properties.

Operating Entity: Modulo is owned and operated by Mega Meem Marketing, a registered business entity with GSTIN: 09AHWPH2222E1ZE.

For the purposes of applicable data protection legislation (including the EU GDPR, UK GDPR, and India's Digital Personal Data Protection Act, 2023), Mega Meem Marketing acts as the Data Controller for information collected through our web dashboard and account systems, and acts as a Data Processor on behalf of Discord server administrators for server-specific operational data.

2. Information We Collect

We collect information only to the extent necessary to deliver and maintain our services.

A. Discord User Information

When you interact with Modulo on Discord or authenticate via Discord OAuth2 on our web dashboard, we may collect:

•

Discord User ID (a unique numeric snowflake identifier assigned by Discord).

•

Discord Username, Display Name, and Discriminator (where applicable).

•

Discord Avatar hash (used solely to render your profile picture on the web dashboard).

•

Locale and language preference indicators provided by Discord.

•

Encrypted OAuth2 access and refresh tokens (stored using authenticated AES-256-GCM encryption, used exclusively to verify server management permissions and maintain active web dashboard sessions).

B. Discord Server (Guild) Information

When Modulo is added to a Discord server, we receive server metadata necessary to function:

•

Server ID (numeric snowflake identifier).

•

Server Name, Icon hash, and Owner ID.

•

Channel and Role metadata (names, IDs, channel types, role permissions, and role hierarchy, required for permission enforcement, logging destinations, and reaction role systems).

•

Server member counts and presence metrics (used to render statistics and evaluate anti-raid triggers).

C. Server Configuration and Feature Settings

Configuration data created by server owners and administrators within the dashboard or via slash commands:

•

Anti-nuke and security thresholds (whitelisted administrative roles, maximum channel/role deletion limits, ban limits, and quarantine roles).

•

Automated moderation rules (blocked keywords, regex patterns, spam detection thresholds, invite-link filtering, and mention-spam ceilings).

•

Welcome and Farewell templates, embed configurations, channel designations, and custom canvas layout settings.

•

Custom commands, trigger keywords, markdown responses, and component button definitions.

•

Ticket panel configurations, support category IDs, and staff notification roles.

D. Moderation Records and Audit Trails

To provide transparency and moderation continuity for server staff, Modulo records:

•

Moderation Case ID, timestamp, and action type (e.g., Warn, Mute/Timeout, Kick, Ban, Unban).

•

Target User ID and issuing Moderator User ID.

•

Moderation reason provided by the moderator or automated security module.

E. Technical, Network, and Diagnostic Logs

When you access our web dashboard or API endpoints, our web servers automatically collect:

•

IP address and User-Agent string (used strictly for rate limiting, DDoS defense, and session security).

•

HTTP request timestamps, endpoint paths, and response status codes.

•

Error and crash diagnostics, stripped of sensitive personal credentials.

3. Information We Explicitly DO NOT Collect

We believe privacy by design means not collecting data we do not strictly need.

Modulo explicitly does not collect, record, or store:

•

Your Discord account password or Discord personal credentials (we authenticate exclusively via Discord OAuth2).

•

Your credit card numbers, debit card numbers, CVVs, or bank credentials (all payments are processed by PCI-DSS compliant third-party processors).

•

Persistent logs of everyday chat conversations or direct messages. Modulo does NOT read, harvest, or archive server chat streams.

•

Voice call audio, microphone streams, or video communications.

•

Precise geolocation data, biometric data, or government-issued identification numbers.

4. Ephemeral Message Processing and Discord Events

To execute features such as automod, spam filtering, invite-link detection, and slash command execution, Modulo receives Discord message events via the Discord Gateway in real time.

All message content received by Modulo is evaluated ephemerally in volatile memory (RAM) solely for the microsecond duration required to check whether the message triggers a configured automod rule, custom command, or slash interaction.

Once evaluated, the message content is immediately discarded from memory. Modulo does not save or database message bodies, except where an administrator has explicitly enabled ticket transcript generation upon the closure of a private support ticket, in which case the transcript is stored securely within the server's dedicated database record.

5. Legal Bases for Processing (GDPR & UK GDPR)

If you reside within the European Economic Area (EEA), United Kingdom (UK), or Switzerland, our processing of your personal data is grounded in specific legal bases under Article 6 of the General Data Protection Regulation (GDPR):

Applicable legal bases:

•

Performance of a Contract: Processing necessary to provide the bot services, dashboard features, and custom settings you or your server administrator requested.

•

Legitimate Interests: Processing necessary for server security, anti-nuke protection, DDoS mitigation, fraud prevention, infrastructure stability, and platform integrity.

•

Compliance with Legal Obligations: Processing necessary to comply with statutory, financial, tax, or lawful regulatory requirements.

•

Consent: Where you have provided unambiguous consent for specific optional features or OAuth2 authorization scopes.

6. Data Security, Storage and Encryption

We implement rigorous technical, administrative, and physical safeguards designed to protect your personal and server data against unauthorized access, destruction, loss, alteration, or disclosure.

Our security controls include:

•

Authenticated Encryption at Rest: Discord OAuth2 tokens, web session secrets, and sensitive credentials are encrypted using industry-standard AES-256-GCM encryption.

•

Encryption in Transit: All data transmitted between your browser, our API endpoints, the Discord Gateway, and our databases is encrypted using modern TLS 1.3 / HTTPS encryption.

•

Isolated Database Infrastructure: Production databases run in secured private virtual networks with no direct public internet exposure.

•

Ephemeral In-Memory Caching: High-velocity temporary data (such as rate limits and heartbeat health checks) is stored in Redis with short-lived TTLs and purged automatically.

•

Role-Based Access Control: Access to server dashboard configurations is strictly restricted to authenticated Discord users who hold Administrator or 'Manage Server' permissions in that Discord guild.

7. Data Retention, Purging, and Deletion Schedules

We retain personal and server data only for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.

Retention Periods

•

Moderation Cases & Logs: Stored according to the server's configured retention window (default 90 days, configurable between 7 and 730 days).

•

Active Server Configurations: Maintained as long as Modulo remains in the server to ensure uninterrupted service.

•

Web Session Tokens: Expire automatically after inactivity and are permanently erased upon logging out.

Bot Removal & 1-Click Server Data Deletion

When Modulo is removed, kicked, or banned from a Discord server, the server's operational tasks are halted. Server configurations and audit logs are placed into an inactive state and scheduled for automated archival purge.

Server Owners can also immediately and permanently delete all stored data for their server at any time by navigating to Dashboard -> Settings -> Danger Zone and selecting 'Delete All Guild Data'. This immediately purges all configuration, moderation history, and custom commands from our production databases.

8. Sharing and Disclosure of Information

We never sell, rent, monetize, or trade your personal information, server data, or user identifiers to third parties, data brokers, or advertisers. Ever.

We may disclose information only in the following limited circumstances:

•

Service Providers & Infrastructure: We share data with trusted infrastructure providers who host our services (such as Railway for cloud computing and managed PostgreSQL/Redis). These providers are bound by strict data protection obligations.

•

Discord Inc.: To execute commands and deliver moderation actions, data is transmitted to Discord's APIs in accordance with Discord's developer agreements.

•

Payment Processors: Where premium subscriptions are purchased, payment processing is handled by licensed, PCI-DSS compliant payment gateways (e.g., Razorpay, Dodo Payments).

•

Legal Requirements: We may disclose data if required to do so by applicable law, enforceable court order, regulatory warrant, or government subpoena.

•

Protection of Rights & Safety: We may disclose data where necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, severe platform attacks, or threats to physical safety.

9. Your Rights and Choices (GDPR, CCPA/CPRA, DPDP)

Depending on your geographic jurisdiction, you have specific statutory rights regarding your personal information under laws such as the GDPR, UK Data Protection Act 2018, California Consumer Privacy Act (CCPA/CPRA), and India's Digital Personal Data Protection Act, 2023.

Your statutory rights include:

•

Right to Access: You may request confirmation of whether we process your personal data and request a copy of the personal information we hold about you.

•

Right to Rectification: You may request the correction of inaccurate or incomplete personal information.

•

Right to Erasure ('Right to be Forgotten'): You may request the permanent deletion of your personal data from our systems.

•

Right to Data Portability: You may request to receive your server configuration and data in a structured, commonly used, machine-readable format (JSON).

•

Right to Restrict or Object to Processing: You may object to our processing of your personal data or request that we restrict processing under certain circumstances.

•

Right to Non-Discrimination: We will never deny you goods or services, charge different prices, or provide a lower quality of service for exercising your statutory privacy rights.

To exercise any of these rights, please contact us at privacy@moduloapp.xyz or submit a request through our official Discord Support Server at https://discord.gg/rMTFjjNNy. We will respond to verified requests within the statutory timeframe (typically within 30 days).

10. California Privacy Disclosures (CCPA / CPRA)

This section applies solely to California residents pursuant to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 ("CCPA/CPRA").

In the preceding twelve (12) months, Modulo has collected the categories of personal information described in Section 2 of this Policy (Identifiers such as Discord Snowflake IDs, IP addresses, and Internet activity data).

Modulo does not sell personal information and has not sold personal information in the preceding twelve (12) months. Modulo does not share personal information for cross-context behavioral advertising.

Modulo does not use or disclose Sensitive Personal Information for purposes other than performing the services reasonably expected by an average consumer.

11. India Digital Personal Data Protection Act, 2023

For users located in India, personal data is processed in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act").

We process digital personal data only for lawful purposes for which you have given consent or for certain legitimate uses provided under the DPDP Act.

Indian Data Principals have the right to obtain a summary of personal data processed, seek correction and erasure, access grievance redressal mechanisms, and nominate another individual to exercise these rights in the event of death or incapacity.

Our designated Grievance Officer can be contacted at privacy@moduloapp.xyz.

12. Cookies and Web Storage

The Modulo web dashboard at moduloapp.xyz uses only strictly necessary cookies and local storage tokens required for platform functionality.

Specifically:

•

Session Cookies: Encrypted, HTTP-only, secure cookies used to keep you authenticated to the dashboard and prevent Cross-Site Request Forgery (CSRF).

•

Theme Preference: Local storage values used to remember your UI display preferences (such as dark mode).

We do NOT use third-party tracking cookies, advertising trackers, analytics beacons, or behavioral fingerprinting technologies on our website.

13. Children's Privacy

Modulo is not directed to children under 13 years of age (or under 16 in the European Economic Area / UK), and we do not knowingly collect personal information from children.

Our eligibility terms require all users to meet Discord's minimum age requirements (at least 13 years old, or the legal age of digital consent in their country of residence).

If we become aware that we have inadvertently collected personal data from a child under the minimum age without verified parental consent, we will take immediate steps to permanently delete that information from our servers.

If you believe that a child has provided us with personal information, please notify us immediately at privacy@moduloapp.xyz.

14. Server Administrator Responsibilities

Server owners and administrators who invite Modulo to their Discord servers act as independent administrators of their respective communities.

Server administrators are responsible for ensuring that their server members are adequately informed regarding automated moderation, logging, and security bot tools operating within the server, in compliance with applicable local laws and Discord's Terms of Service.

Modulo provides server administrators with the tools to manage data retention windows and execute complete server data exports and deletions directly from the web dashboard.

15. International Data Transfers

Modulo's servers and cloud infrastructure are hosted in secure enterprise data centers in the United States and globally distributed points of presence.

If you access Modulo from outside the United States, your information may be transferred to, stored, and processed in jurisdictions where data protection laws may differ from those in your country.

Where required by applicable law, we implement recognized transfer safeguards (such as European Commission Standard Contractual Clauses) to ensure that your personal information remains adequately protected wherever processed.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements to our features, operational practices, technical architecture, or evolving legal and regulatory obligations.

When we make changes, we will update the 'Effective Date' displayed at the top of this Policy.

For material changes, we will provide additional notice through our web dashboard, our Discord Support Server, or by direct notification where feasible.

Your continued use of Modulo following the posting of an updated Privacy Policy constitutes your acknowledgment and acceptance of the revised terms.

17. Contact Information and Grievance Officer

If you have any questions, concerns, requests, or grievances regarding this Privacy Policy or our data protection practices, please contact our team:

Official Contact Channels:

•

Privacy Email: privacy@moduloapp.xyz

•

General Support Email: support@moduloapp.xyz

•

Discord Support Server: https://discord.gg/rMTFjjNNy

•

Vanity Support Link: https://moduloapp.xyz/support

•

Operating Entity: Mega Meem Marketing

•

GSTIN: 09AHWPH2222E1ZE

We are committed to working with you to achieve a prompt and fair resolution of any complaint or concern regarding your privacy.