Privacy Policy

1.1 Data We Minimize

• Unnecessary personal information
• Chat history beyond transactions
• User preferences or profiles
• Marketing or tracking data
• Cross-server user behavior
• Financial account details
• Long-term storage of transaction data

1.2 Temporary Processing Data

During transaction processing, we temporarily handle:

• Cryptocurrency wallet addresses (deleted after transaction completion)
• Transaction amounts and currency pairs (processed anonymously)
• Discord message IDs (for ephemeral message management only)

2.1 Ephemeral Messages

All Disq bot interactions use Discord's ephemeral messaging system, meaning:

• Only you can see bot responses
• Messages are not stored in Discord history
• No server members can view your transactions
• Complete privacy in public channels

2.2 Privacy-First Architecture

Our system is designed to minimize data collection while ensuring compliance:

• Minimal user information required for small transactions
• Secure transaction processing with trusted partners
• Encrypted communication channels
• Compliance with regulatory requirements when necessary

2.3 Data Minimization

We collect and process only the minimum data required for transaction execution and regulatory compliance. Data retention follows our exchange partners' compliance requirements and applicable regulations.

3.1 Exchange Partners

Disq partners with professional cryptocurrency exchanges to execute transactions. Our primary exchange partner is Changelly (operated by Quoprotech LTD), which:

• Processes transactions in compliance with GDPR and international privacy standards
• Maintains comprehensive AML/KYC procedures
• Stores data on GDPR-compliant Amazon servers in the EU
• May require identity verification for certain transaction types or amounts
• Operates under regulatory oversight in their licensed jurisdictions

3.2 Service Limitations by Jurisdiction

Due to regulatory requirements, our exchange partners may restrict services in certain jurisdictions. Users from the following countries may experience limitations:

3.3 Discord Platform

Disq operates as a Discord bot and:

• Uses only necessary Discord API permissions
• Does not access or store Discord user data
• Complies with Discord's Terms of Service and Privacy Policy
• Respects Discord's user privacy expectations

4.1 GDPR Compliance

Disq and our exchange partners comply with the General Data Protection Regulation (GDPR):

• Right to erasure: Available for any collected data through exchange partners
• Data portability: Available when applicable for compliance data
• Transparent consent: Clear disclosure when data collection is required
• Data protection by design and by default

4.2 International Compliance

Our privacy practices meet or exceed requirements for:

• CCPA (California Consumer Privacy Act)
• PIPEDA (Personal Information Protection and Electronic Documents Act)
• Other international privacy regulations

5.1 Technical Safeguards

• End-to-end encryption for all communications
• Secure HTTPS connections
• Regular security audits and penetration testing
• Multi-factor authentication for system access
• Automated security monitoring

5.2 Operational Security

• Limited employee access to systems
• Regular security training
• Incident response procedures
• Continuous monitoring and logging