Contents
DBot.gg ("DBot", "we", "us") is a chat bot service built for DLive streamers. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.
1 Data we collect
When you use DBot.gg, we collect the following data:
DLive account data (via OAuth)
- DLive username and display name
- Avatar (profile picture URL)
- OAuth access token and refresh token — required for the bot to operate in your chat on your behalf
- DLive unique identifier (LINO)
Service-generated data
- Chat messages: messages passing through the bot are processed in-memory for moderation and commands. Only timestamped moderation infractions are persisted to the database.
- Video clips: stream segments recorded via the
!clipcommand (video files, thumbnails) are stored on our servers. Associated metadata (title, date, clip author, like count) is stored in the database. - Points, watchtime and levels: viewer activity counters (earned points, watch time, level) are stored per channel.
- Configuration: all settings you configure in the dashboard (custom commands, moderation filters, auto-messages, event alerts, giveaway settings, etc.) are stored in the database.
- Moderation logs: moderation actions taken by the bot (timeouts, bans, message deletions) are recorded with timestamps and accessible from your dashboard.
Billing data
- Your active subscription plan and associated dates are stored in our database.
- Payments are processed by our payment provider (NowPayments). We never store credit card numbers or sensitive payment data on our servers.
2 How we use your data
Collected data is used exclusively to:
- Authenticate your account and operate the bot in your DLive chat
- Display and manage information in your dashboard
- Provide service features: auto-moderation, commands, clips, giveaways, points, event alerts
- Generate aggregated activity statistics visible from your dashboard (not sold or shared for advertising purposes)
- Manage subscriptions and billing
- Improve service reliability and performance (technical error analysis)
We do not use your data for commercial profiling, targeted advertising, or sale to third parties.
3 Retention periods
- Account data and configuration: retained for as long as your account is active. If no activity is recorded for 12 consecutive months, we reserve the right to delete inactive data after notifying you.
- Video clips: video files are automatically deleted after 30 days (Pro) or 365 days (Ultra). Metadata is deleted 30 days after clip expiration.
- Moderation logs: retained on a rolling 30-day basis, then automatically deleted.
- Viewer data (points, watchtime, levels): retained for the duration of your active subscription. Deleted upon your request.
- Billing data: retained in accordance with applicable accounting and legal obligations (5 years under French law).
4 Third-party sharing
We do not sell, rent, or share your personal data with third parties for commercial purposes. Data transfers are limited to those strictly necessary for service operation:
- DLive: we query the DLive API to authenticate your account, listen to your chat events and send messages as the bot. Data transits via TLS. DLive has its own privacy policy.
- NowPayments: our payment provider handles transactions independently. We only receive payment confirmation and the subscribed plan.
- Hosting provider: data is stored on dedicated servers. The hosting provider has no access to your application data content.
- Legal obligations: we may disclose data when required by law (court order, legal requisition).
5 Security
We implement reasonable technical and organisational measures to protect your data:
- All communications encrypted via HTTPS/TLS
- OAuth tokens stored in the database with access restricted to the application
- Admin access restricted by an authorised username allowlist
- Data separation by channel — no user can access another channel's configuration
- No payment credentials stored on our servers
No system is infallible. In the event of a data breach likely to affect your rights, we will notify you as soon as possible, in accordance with applicable legal obligations.
6 Your rights
Under the General Data Protection Regulation (GDPR) and applicable data protection law, you have the following rights:
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): you can request deletion of your personal data when its retention is no longer necessary or legally required.
- Right to data portability: you can request an export of your data in a structured, machine-readable format.
- Right to object and restriction: you can object to the processing of your data or request its restriction in certain circumstances.
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of prior processing.
To exercise these rights, contact us via our Discord. We will respond within 30 days.
8 Minors
DBot.gg is intended for users aged 16 or older. We do not knowingly collect personal data from children under 16. If you believe we hold information indicating that a child under 16 has created an account, please contact us so we can delete it.
9 Changes to this policy
We may update this policy from time to time. For material changes, we will notify you on our Discord and update the date at the top of this page. Continued use of the service after notification constitutes acceptance of the updated policy.
10 Contact
For any questions about this policy or to exercise your rights, contact us via:
- Our Discord server: dbot.gg/discord
- The contact form in your dashboard
If you believe your rights have not been respected, you may lodge a complaint with your national data protection authority. In France, this is the CNIL (cnil.fr). In the UK, the ICO (ico.org.uk).