Privacy Policy

Orion AI is operated by MallyDev, who acts as the data controller for information collected through the Service. For any privacy-related inquiries, data deletion requests, or concerns, you may contact us at malawarettv@gmail.com or through the official Orion community at discord.gg/orionai.

Depending on how you interact with the Service, we may collect and process the following categories of information:

Information you provide directly:

• Prompts, messages, and text submitted through slash commands, context menus, buttons, modals, or direct messages with the Bot.
• Files, images, code snippets, and attachments you upload for the Bot to analyze or process.
• Configuration choices and preferences you set within the Service.

Information collected automatically:

• Discord identifiers: User IDs, server (guild) IDs, channel IDs, and message IDs necessary to route requests, deliver responses, and maintain session context.
• Memory and continuity data: Conversational context, thread history, and user preferences stored to provide persistent, context-aware interactions across sessions.
• Operational telemetry: Timestamps, response latency, error codes, uptime metrics, command usage frequency, and performance data used to monitor and maintain the Service.
• Safety and moderation signals: Flagged content indicators, rate-limit triggers, abuse detection metadata, and related records used to protect the Service and its users.

Information we do not collect:

• We do not collect passwords, payment information, email addresses, IP addresses, or device fingerprints through the Bot.
• We do not read or store messages in channels where Orion has not been explicitly invoked or directed.

We use collected information for the following purposes:

• Service delivery: To generate AI responses, summaries, coding assistance, search results, and other outputs you request.
• Context and memory: To maintain conversational continuity, remember preferences, and provide relevant responses across interactions.
• Service operation: To debug errors, investigate outages, monitor performance, track uptime, and ensure the Service functions correctly.
• Safety and enforcement: To detect and prevent abuse, spam, fraud, and violations of our Terms of Service; to enforce rate limits; and to respond to security incidents.
• Service improvement: To analyze aggregate, anonymized usage patterns to improve features, performance, and user experience. We do not use individually identifiable User Content to train AI models unless explicitly stated in a separate notice.
• Legal compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

We do not sell your data to third parties. We do not use your interactions to build advertising profiles. We do not monetize your personal information in any way.

Where applicable data protection laws require a legal basis for processing personal data (such as the GDPR), we rely on the following:

• Performance of a contract: Processing necessary to provide the Service as described in our Terms of Service.
• Legitimate interests: Processing necessary for the safe and reliable operation of the Service, abuse prevention, and service improvement, where those interests are not overridden by your rights.
• Legal obligation: Processing required to comply with applicable laws or respond to valid legal requests.
• Consent: Where you have given explicit consent for specific processing activities, which you may withdraw at any time by contacting us.

To be clear about the boundaries of the Service:

• Orion does not silently monitor, archive, or scrape channel content that it has not been explicitly asked to process.
• Orion does not collect data from servers where it is not present or from channels where it has not been invoked.
• Orion does not share User Content with other users or servers unless you explicitly direct it to do so through a feature designed for that purpose.
• Orion does not create public profiles or searchable records of individual users.

Operating the Service requires interaction with third-party providers. Data may be transmitted to or processed by:

• Discord: As the platform on which Orion operates, Discord receives and transmits messages, user identifiers, and related data according to its own privacy policy.
• AI model providers: Prompts and contextual data may be sent to upstream AI providers to generate responses. These providers process data according to their own data handling agreements.
• Hosting and infrastructure: Server hosting, database, and CDN providers that store and transmit data necessary to operate the Service.
• Monitoring and security tools: Services used for error tracking, uptime monitoring, and threat detection.

We only share the minimum information necessary for each provider to fulfill its function. We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may also disclose information if required by law, court order, subpoena, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, the safety of others, or to investigate fraud or respond to a security incident.

We retain data only as long as necessary for the purposes described in this Policy:

• Conversational data: Prompts and responses may be retained temporarily for context continuity and debugging. Transient interaction data is typically not stored long-term unless it is part of an active memory or continuity feature.
• Memory and continuity records: Retained until removed by the user, replaced by updated context, or no longer required for the feature that created them.
• Operational logs: Retained for a reasonable period for debugging, performance monitoring, and abuse prevention, then deleted or anonymized.
• Safety and abuse records: May be retained for as long as necessary to resolve an active investigation, enforce our Terms, or comply with legal obligations.

When data is no longer needed, it is deleted or irreversibly anonymized. Specific retention periods may vary based on the nature of the data and the feature involved.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at malawarettv@gmail.com. We may need to verify your identity before processing your request. We will respond within a reasonable timeframe and in compliance with applicable law.

You can also stop using the Service at any time or remove the Bot from your server. Some data may need to be retained temporarily for fraud prevention, active abuse investigations, or legal compliance even after a deletion request.

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include but are not limited to access controls, encrypted connections where applicable, regular security reviews, and secure infrastructure practices.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your Discord account and should avoid submitting highly sensitive personal information (such as government IDs, financial account numbers, or medical records) through the Bot unless genuinely necessary for the task at hand.

The Service may process and store data in jurisdictions outside your country of residence, including countries that may have different data protection laws. By using the Service, you acknowledge and consent to the transfer of your information to these jurisdictions. Where required by applicable law, we take steps to ensure that appropriate safeguards are in place to protect your data during such transfers.

The Service is not directed at children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children below this threshold. If you believe that a child under the applicable minimum age has provided personal information through the Service, please contact us immediately at malawarettv@gmail.com and we will take steps to delete that information promptly.

Users must meet Discord's minimum age requirements as well as any higher minimum age required by their local laws to use the Service.

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. We may also provide additional notice through the Orion community server or other reasonable means.

Your continued use of the Service after an updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to the changes, you should stop using the Service and may request deletion of your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you may contact us at:

• Email: malawarettv@gmail.com
• Discord: discord.gg/orionai

We will make reasonable efforts to respond to all legitimate inquiries in a timely manner. If you are unsatisfied with our response, you may have the right to lodge a complaint with your local data protection authority.