Privacy Policy
Effective: August 23, 2026
This Privacy Policy is intended for Dicolytics customers (bot developers). If you are a Discord user who uses bots powered by Dicolytics (an end user), please refer to the End-User Privacy Notice.
Dicolytics ("the Service") values your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with applicable privacy laws, including the Korean Personal Information Protection Act (PIPA).
1. Purpose of Processing Personal Information
The Service processes personal information for the following purposes. Personal information collected shall not be used for any purpose other than those stated below. If the purpose changes, we will obtain separate consent.
- Account management: Login via Discord account, identity verification, organization invitation matching
- Service delivery: Providing Discord bot analytics dashboards, collecting, processing, and visualizing statistical data
- Service improvement: Analyzing usage statistics and improving service quality
- Security and fraud prevention: Recording audit logs, detecting unauthorized access
2. Personal Information Collected
Required Information
| Item | Purpose | Collection Method |
|---|---|---|
| Discord user ID | Account identification | Automatic upon Discord login |
| Discord email | Account identification, organization invitation matching | Automatic upon Discord login |
| Discord username and profile picture | Dashboard display | Automatic upon Discord login |
| IP address | Audit logs | Automatic upon web access |
Payment Information (Pro plan)
The following items are processed when paying for the Pro plan.
| Item | Handling |
|---|---|
| Card number, expiry, 6-digit birth date (corporate cards: business registration number), first 2 digits of card password | Never stored — passed through to the payment processor (PortOne · NHN KCP) only; never written to our servers, database, or logs |
| Billing key (an opaque payment token issued by the processor) | Stored to process recurring charges |
| Payment records (order name, amount, date, receipt URL) | Stored for the invoices page and the 5-year transaction-record retention required by the Korean E-Commerce Act |
KakaoPay and PayPal run in each provider's own screens; those payment-method details never pass through the Service.
For details on end-user data collected via the SDK (bot interaction metadata, server information, status information, error information), see the End-User Privacy Notice.
Optional Information
The following items can be controlled by the user through SDK configuration or code.
| Item | Control Method | Default State |
|---|---|---|
| Custom event data | Collected only when track() is called | Not collected |
| Manual error reports | Collected only when captureError() is called | Not collected |
| Gateway events | Automatically determined by the bot's Discord intent settings | Only collected for enabled intents |
Information We Do NOT Collect
The Service never collects the following information:
- Discord message content (text, images, files, etc.)
- Direct message (DM) content
- User passwords
- Voice call content
3. Retention Period
| Item | Retention Period | Basis |
|---|---|---|
| Account information (Discord ID, email, username) | Until account deletion | Service agreement |
| Bot analytics data (interactions, tasks, events, errors) | Per-plan retention period (default: 13 months) | Service agreement |
| Audit logs (including IP addresses) | 90 days | Security and fraud prevention |
| Website usage records (Google Analytics) | Per Google policy (default: 14 months) | Service improvement |
When the retention period expires or the purpose of processing has been fulfilled, the relevant personal information will be destroyed without delay.
4. Disclosure to Third Parties
The Service does not, in principle, provide personal information to third parties. Exceptions are made only in the following cases:
- When the user has given prior consent
- When required by applicable law
5. Outsourcing of Personal Information Processing
The Service outsources personal information processing as follows to ensure smooth service delivery.
| Processor | Outsourced Task | Retention Period |
|---|---|---|
| Oracle Corporation | Server infrastructure hosting (Chicago, United States) | Until end of outsourcing contract |
| Google LLC | Website usage analytics (Google Analytics) | Per Google policy |
| PortOne Korea, Inc. | Payment processing and billing-key management | Until end of outsourcing contract |
| NHN KCP | Credit / debit card payments | Statutory retention period |
| KakaoPay | KakaoPay payments | Statutory retention period |
| PayPal Pte. Ltd. | International (PayPal) payments | Statutory retention period |
6. Developer Disclosure Obligations
- By using the Dicolytics SDK, developers acknowledge that end-user data is collected.
- Developers are obligated to disclose or link to the Dicolytics End-User Privacy Notice in their own bot or service's privacy policy.
- Developers bear full legal responsibility for any consequences arising from failure to fulfill this obligation.
7. Rights of Data Subjects
Users may exercise the following rights at any time:
- Right to access: Request access to personal information held by the Service
- Right to correction or deletion: Request correction or deletion of inaccurate information
- Right to suspend processing: Request suspension of personal information processing
- Right to withdraw: Delete account and destroy associated data
End users may opt out of data collection.
To exercise these rights, send an email to [email protected]. The Service will take action within 10 days of receiving the request.
8. Destruction of Personal Information
- Destruction procedure: Personal information whose retention period has expired or whose processing purpose has been fulfilled is transferred to a separate database, retained for a specified period, and then destroyed.
- Destruction method: Information in electronic file format is permanently deleted using methods that prevent recovery.
- Project deletion: When a user deletes a project, all analytics data associated with that project is marked for deletion and permanently removed within 30 days.
9. Security Measures
The Service takes the following measures to ensure the safety of personal information:
- Encryption in transit: All data transmissions are encrypted via TLS (HTTPS).
- Access control: Only authorized requests are processed through API key-based authentication.
- API key hashing: API keys are stored only as SHA-256 hashes; originals are not retained.
- Audit logging: Key administrative actions (key issuance/revocation, member invitation/removal, etc.) are recorded.
- Data retention enforcement: Data past its retention period is automatically deleted.
10. Cookies and Automated Collection
The Service uses cookies to store and retrieve user service usage information.
- Cookies used: Session authentication cookies, language preference cookies
- How to refuse cookies: You may refuse cookie storage through your web browser settings. However, refusing cookies may limit access to features that require login.
Additionally, the Service uses Google Analytics to collect website usage statistics. To opt out of Google Analytics data collection, install the Google Analytics Opt-out Browser Add-on.
11. Privacy Officer
The Privacy Officer of the Service is as follows:
- Name: Seungwoo Han
- Email: [email protected]
For privacy-related inquiries, complaints, or damage relief, please contact the above.
Korean residents may also contact the following organizations for reports or consultations regarding privacy violations:
- KISA Privacy Center: privacy.kisa.or.kr / 118
- Personal Information Dispute Mediation Committee (KOPICO): kopico.go.kr / 1833-6972
12. Changes to This Policy
This Privacy Policy is effective as of August 23, 2026. If this policy is revised, changes will be communicated through in-service notices or email.
13. International Data Transfer
All data for the Service is processed and stored on servers located in the United States (Oracle Cloud Infrastructure, Chicago region). By using the Service, you consent to this transfer.
| Recipient | Country | Data Transferred | Purpose | Retention Period |
|---|---|---|---|---|
| Oracle Corporation | United States | All service data | Server infrastructure operation | Duration of service use |
| Google LLC | United States | Website usage records | Usage analytics | Per Google policy |