AMMO AI Privacy Policy

1. Information We Collect

1.1 Information You Provide

• User Profile Data: When you sign up or interact with Super Intern, we collect information you provide such as your Discord username, user ID, email address (if provided), and any profile data linked to your Discord account.
• Explicitly Submitted Content: Messages, commands, and reports you intentionally direct to AMMO AI through opt-in channels or commands. Such content is never stored or analyzed beyond what is necessary to deliver the requested service, in accordance with our strict data minimization principles.
• Payment Data: For premium features, we use trusted payment processors, collecting only necessary billing details.

1.2 Information Collected Automatically

• Interaction Logs: Records of your interactions with Super Intern, including timestamps, commands issued, queries made, responses given, and engagement metrics.
• Device and Connection Information: IP address, browser type and version, device identifiers, operating system, language preferences, and other telemetry data.
• Community Analytics: Aggregated data derived from analyzing community conversations, sentiment analysis, frequently asked questions, scam detection.

1.3 Cookies and Similar Technologies

We use cookies, web beacons, and other tracking technologies to operate and optimize the Services, collect usage data, and support features like session management and preferences.

1.4 Data from Third-Party Services via API

When our Services connect with third-party platforms (e.g., Discord, analytics tools, or AI APIs), we may receive or share limited personal data necessary for functionality. Such exchanges occur via secure, authenticated API channels, and data is processed only in accordance with our Privacy Policy and the respective third party's terms. We regularly review API permissions to ensure no unnecessary data is accessed or retained.

2. How We Use Your Information

We only process the minimal amount of information to:

• Deliver and improve the Services you request.
• Provide real-time community moderation and assistance.
• Detect scams or malicious activity in enabled channels.
• Support server-governed community insights.
• Prevent fraudulent activities and protect our platform.
• Comply with legal obligations and enforce our Terms of Use.

We do not use your message content for AI model training.

3. Legal Basis for Processing (For Users in Applicable Jurisdictions)

Where required by law (e.g., GDPR), our legal basis for collecting and using your personal data includes:

• Your consent (e.g., for marketing communications).
• Performance of a contract (providing the Services you request).
• Legitimate interests (e.g., improving Services, fraud prevention).
• Compliance with legal obligations.

4. Data Sharing and Disclosure

We may share limited necessary data with:

• Service Providers: We share data with vetted third-party providers that support our Services—such as cloud infrastructure, payment processors, analytics platforms, and security vendors—under binding confidentiality agreements and data protection requirements appropriate to applicable laws.
• Discord and Other Platforms: Where necessary for the operation of the Services, certain data may be exchanged with Discord or other officially integrated platforms, strictly in line with their developer and privacy policies.
• Legal Requirements: We may disclose information if legally required, such as to comply with subpoenas or legal processes, or when necessary to protect the safety, security, rights, or property of users, the public, or the platform.
• Business Transfers: In connection with mergers, acquisitions, or asset sales, user data may be transferred as part of business assets, subject to the terms of this Privacy Policy and applicable legal safeguards.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including for legal, accounting, or reporting requirements. When data is no longer required, we securely delete or anonymize it.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period whenever required to fulfil a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion or restriction of your data.
• Object to processing based on legitimate interests.
• Withdraw consent where applicable.
• Port data to another service provider.
• Lodge a complaint with your local data protection authority.

In addition to the rights listed above, you may at any time revoke previously granted permissions or opt out of specific features, such as AI moderation or community analytics, by adjusting your server settings or contacting us at [email protected]. Disabling these features may limit or disable certain functionality, but we will continue to provide available services unrelated to the opted-out feature.

7. Security of Your Data

We implement commercially reasonable technical, physical, and administrative measures—such as encryption, access controls, regular security assessments, and incident response protocols—to safeguard your personal data from unauthorized access, loss, misuse, or alteration. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify affected users without undue delay, in accordance with applicable laws, via in-app notifications, email, or other appropriate channels, and include information on the nature of the breach, affected data, and remedial steps.

In addition to standard security measures, we apply AI-specific protections to ensure responsible processing. AI systems used for automated moderation, analysis, or content generation operate within privacy-by-design constraints—using only the minimum required data, excluding personal content from model training, and ensuring that any content shared with third-party AI providers (e.g., OpenAI, Google, Anthropic) is encrypted in transit and at rest on their servers, and is not used for training by those providers. Automated decisions with potential impact on users are subject to human review upon request, and AI outputs are regularly monitored for fairness, bias, and accuracy.

8. International Data Transfers

As a global service, AMMO AI may transfer and process your data in countries with different data protection laws than your own, including the United States. By using our Services, you consent to such transfers. We apply safeguards such as standard contractual clauses to ensure your data remains protected during these processes.

9. Children's Privacy

Our Services are not directed to individuals under 13 years old (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. Any such data collected without parental consent will be promptly deleted.

10. Third-Party Services and Integrations

Our Services may include integrations with third-party platforms (e.g., Discord) and tools, which operate under their own privacy policies. We only share the minimum necessary data to enable such integrations and require them to process this data solely for the integration's intended purpose. We strongly recommend reviewing the privacy policies of any third-party services before use.

11. Automated Decision-Making and AI Interaction

AMMO AI uses AI and automated rules to perform tasks such as detecting spam or malicious content, providing automated responses, and supporting community engagement. Decisions are based on predefined sets of criteria (e.g., keyword detection, behavioral indicators). Automated moderation may be triggered in scenarios such as scam link posting, repeated rule violations, or harmful language detection. Where automated action results in significant impact, you may request human review by contacting our support team, and such reviews will be handled promptly to ensure fairness and accuracy.

12. Changes to This Privacy Policy

We may update this Privacy Policy occasionally to reflect changes in law, technology, or our business practices. We will notify you of significant changes by posting the new policy on our website and updating the effective date.

Your continued use of the Services after such amendments signifies your acceptance of the updated terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us: [email protected]