Legal

Privacy Policy

Cayo stores only the data it needs to operate as a Discord moderation, security, and automation bot. We do not sell your data, we do not run third-party analytics SDKs, and we do not read message content unless a feature you explicitly configured (logging, filters, antinuke) requires it.

Data we store

  • Guild IDs of servers using the bot.
  • User IDs of members involved in moderation cases, antinuke events, AFKs, reminders, and customizable per-user features.
  • Channel IDs and role IDs used by configured modules (logging targets, mute/jail roles, VoiceMaster panels, etc.).
  • Command usage required to enforce cooldowns and rate limits.
  • Moderation cases — moderator ID, target ID, action, reason, timestamp, optional duration.
  • Logging module configuration — channel routes, ignored channels/users/roles, retention preferences.
  • Antinuke configuration — enabled modules, thresholds, punishment, whitelist, ignored roles.
  • VoiceMaster configuration — category, join-to-create channel, default room settings.
  • Hardban records and active warnings.
  • Dashboard session data — a signed HTTP-only cookie holding your Discord user ID, username, avatar hash, and the list of guild IDs you share with the bot at sign-in.

Message snapshots and purge logs

If a server's administrators enable message logging or purge logging, deleted, edited, and purged messages may be stored so logs can be searched later. These snapshots are stored per-guild, are visible only to staff with the configured logging permissions, and respect the per-guild retention window set by ,logs retention. Logging can be disabled at any time by a server admin and snapshots stop being collected immediately.

Data we do not store

  • Direct messages, voice audio, or stream content.
  • Plain-text message content from servers without logging configured.
  • Discord access or refresh tokens beyond the lifetime of your dashboard session.

Who can see what

Server owners and members with Manage Server or Administratorcan configure logging, antinuke, VoiceMaster, moderation, and the bot's per-server profile. Owner-only commands and per-server profile customization are restricted to the actual server owner. Bot owners do not browse per-guild content; they only access aggregate operational data needed to keep the service running.

Deletion

Removing the bot from a server clears that server's configuration data. To request manual deletion of personal data tied to your Discord user ID, contact us in the support server.