Privacy Policy

Last Updated: September 23, 2026

This Privacy Policy explains how FIWDIL LLC (Company, we, us, or our) collects, uses, stores, discloses, and protects personal data when you use the Platypus services (Service), including the website, dashboard, database-backed administration tools, Discord-integrated bot features, public pages, support channels, and related functionality.

1. Scope

This policy applies to personal data processed through the Service, including data obtained from Discord APIs and data provided directly by users and administrators.

2. Data We Collect

Depending on features used, we may process:

  1. Account and organization data.
  2. Account identifiers, organization or guild identifiers, role and permission metadata.
  3. Discord integration data.
  4. Discord user IDs, guild IDs, channel IDs, role IDs, message IDs, usernames, global and server display names, server join dates, and avatar identifiers.
  5. Bot command, button, select-menu, modal, panel, reaction, and other interaction metadata.
  6. Content that a person intentionally submits to an app workflow, including registration fields, application answers, support requests, nomination reasons, training notes, and other form responses.
  7. If a community administrator explicitly enables activity collection: message activity identifiers and timestamps (not message content), reaction activity including the reacting and receiving users and emoji, and voice-channel session start/end times and duration. Platypus does not record voice audio.
  8. Service operation data.
  9. Audit logs, configuration settings, permission assignments, entitlement records, panel state, scheduled-event data, member profiles, awards, qualifications, group assignments, event responses, and administrative notes.
  10. Technical and security data.
  11. IP address, device/browser metadata, event logs, and security telemetry.
  12. Billing and commercial data.
  13. Subscription status and transaction metadata from payment providers.
  14. We do not intentionally store full payment card numbers; card processing is handled by payment processors.

Cookies, browser storage, and information on your device

Platypus stores and accesses information on your browser or device using cookies, local storage, and session storage. We use cookies to keep you signed in, secure authentication and account-connection flows, and maintain temporary reviewer sessions. We use browser storage to remember cookie choices, navigation and tour preferences, editor preferences, demo drafts, and temporary page-recovery state. These technologies may contain session identifiers, preference values, and content you enter into a demo. Requests to our services also provide technical information such as your IP address and browser/device metadata for operation and security.

Third parties may also store, access, or collect information on your device when you use their services through Platypus. For example, Google and YouTube may use their own cookies or similar technologies when you authorize a YouTube connection or open YouTube content; Discord does so during Discord sign-in; and Stripe may do so during checkout for payment and fraud prevention. Embedded third-party content on a community Site may contact that provider and use its technologies when loaded. These providers process information under their own privacy and cookie policies, including the Google Privacy Policy. A connection or embedded feature does not give Platypus access to your Google or Discord password.

You can delete or block cookies and clear local or session storage in your browser settings. Doing so may sign you out, reset saved preferences or demo content, or prevent connected features from working. Third-party services provide their own privacy controls. See our Cookie Policy for more about these technologies and your choices. Platypus does not use these technologies for third-party advertising or retargeting.

3. How We Use Data

We use personal data to:

  1. Provide, maintain, and secure the Service.
  2. Operate Discord-based features requested by users and administrators.
  3. Passive message, reaction, and voice activity measurement remains disabled until an authorized community administrator enables the collector and selects the individual activity sources.
  4. Enforce permissions, prevent abuse, and investigate incidents.
  5. Process billing, support requests, and account administration.
  6. Comply with legal obligations and enforce our contractual terms.
  7. Improve the Service using aggregated or de-identified information where possible.

4. Legal Bases for Processing

Where required by law (for example GDPR/UK GDPR), we rely on one or more of:

  1. Performance of a contract.
  2. Legitimate interests (for example security, fraud prevention, and service improvement).
  3. Consent (where required).
  4. Compliance with legal obligations.

5. Data Sharing

We may share personal data with:

  1. Service providers (for example cloud hosting, monitoring, customer support, and payment processing) under contractual controls.
  2. Platform providers required for integration functionality (for example Discord).
  3. Professional advisors and auditors under confidentiality obligations.
  4. Law enforcement or regulators where legally required.
  5. Successors in a merger, acquisition, financing, or asset transfer.

FIWDIL LLC does not sell personal data, Discord data, customer content, guild data, or service operation data to third parties. We do not permit third parties to buy this data from us, and we do not share this data with third parties for their independent advertising, profiling, or resale purposes.

6. Data Retention

Personal data is retained only for as long as needed for the purposes in this policy, including legal, security, and accounting needs. The normal schedules are:

| Data | Normal retention |

| --- | --- |

| Current Discord member snapshot | While the person remains in the community. A reported departure removes the live snapshot immediately; a full roster reconciliation runs at least every 24 hours to correct missed events. |

| Active guild configuration and operational records | While the guild uses Platypus. Removing Platypus starts a 30-day reconnection and export window, followed by deletion of guild-scoped database records and stored files. Reinstalling Platypus during that window cancels the scheduled purge. |

| Form responses | The form's configured period, normally 365 days after submission for a closed or archived form. |

| Closed tickets and their attachments | Until the ticket's recorded retention-expiry time, normally 730 days after closure. |

| Finalized moderation cases and evidence | The community's configured period, normally 1,095 days and never less than 90 days while this feature is enabled. Active actions, appeals, and legal holds are not purged. |

| Opt-in message, reaction, and completed voice activity events | No more than 365 days. Active voice-session state is removed when the session ends or is found stale. |

| Billing and tax records | For the period required by applicable accounting and tax law. |

| Security and compliance evidence | Only while reasonably required to investigate abuse, demonstrate compliance, resolve disputes, or satisfy law. Deletion-request evidence uses keyed hashes instead of retaining the deleted Discord user or guild ID. |

Legal holds and active security incidents pause deletion only for the affected records and only while the exception remains necessary. Eligible community retention settings may shorten or extend a feature period, but may not override a valid individual deletion request or Discord deletion instruction unless law requires retention.

Backup data is stored on a rolling schedule separate from active production data. A deletion ledger is checked during disaster recovery so an older backup does not silently reactivate data deleted after that backup was created. Expired backups are permanently removed according to the documented backup schedule and are not used for ordinary product access.

7. User Rights and Choices

Depending on your jurisdiction, you may have rights to:

  1. Access, correct, delete, or port your personal data.
  2. Restrict or object to certain processing.
  3. Withdraw consent where processing is consent-based.
  4. Appeal denial of privacy requests.

To submit a request, contact help@platypus.gg. Include your Discord user ID and, if the request concerns a community, its Discord guild ID. We may ask you to verify control of the Discord account or authority over the community before acting.

Deletion and correction requests are reviewed across member snapshots, profiles, activity ledgers, applications, support records, permissions, awards, training, events, groups, voice-room records, audit history, stored workflow content, object storage, backups, and applicable service providers. We delete records that exist to provide a feature, de-identify identifiers in records that must be retained for security or legal reasons, and explain any applicable exception. Community administrators cannot use Platypus to prevent a person from making a request directly to FIWDIL LLC.

Discord-related note: Where we process data obtained from Discord APIs, we also honor Discord platform requirements for data updates and deletion requests.

8. International Data Transfers

We may process data in countries other than your own. Where required, we use appropriate safeguards such as contractual transfer mechanisms and supplementary technical controls.

9. Security

We implement administrative, technical, and physical safeguards designed to protect personal data, including access controls, encryption where appropriate, and incident response procedures. No method of transmission or storage is completely secure.

10. Children and Age Restrictions

The Service is not directed to children under 13 or below the minimum age required in their jurisdiction. If we learn we have collected personal data in violation of age-related requirements, we will take appropriate remedial action.

11. Third-Party Services

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies.

YouTube and Google account connections

Platypus uses YouTube API Services when you connect a YouTube channel. With your authorization, we process your channel identifier and name, authorization tokens, video identifiers and metadata, and the content you submit for upload. We use these data to display the connected channel, upload videos you authorize, track delivery, and bring new public videos into the Discord channel you select. Incoming routes can require staff review or publish automatically according to the community administrator's explicit selection. Access to community tools also requires Discord server membership and the relevant permissions.

Google processes information under the Google Privacy Policy. Using the YouTube features is also subject to the YouTube Terms of Service. We do not sell Google or YouTube data or use it for independent advertising, profiling, or model training.

You can disconnect a channel in Socials > Connections and revoke Platypus's Google authorization through Google account permissions. To request deletion of stored data or ask about privacy, contact help@platypus.gg with the connected channel and community identifiers. Do not send passwords or authorization tokens. Disconnecting Platypus does not delete videos already posted on YouTube or messages already sent to Discord; those copies are managed through the respective service.

Disconnecting a YouTube channel revokes Google access and removes its cached identity, incoming routes, incoming drafts (including edits), and YouTube delivery records from the active application database. Original outgoing drafts remain under your control. Incoming YouTube drafts and stored API delivery results expire after 22 days. We periodically recheck connected channels; if authorization cannot be verified within 22 days, the connection and its cached data are removed. Incoming discovery covers recent public uploads from the preceding 21 days. The development database has a seven-day recovery window; restored YouTube connections and cached data must be purged before the application resumes service.

12. Policy Changes

We may update this Privacy Policy from time to time. Material changes will be communicated through reasonable notice (for example email or in-product notice).

13. Contact

FIWDIL LLC

Email: help@platypus.gg

Mailing address: Contact help@platypus.gg for mailing correspondence.