privacy policy

last updated: 2026-10-25

this policy explains what the discord bot balqis keeps, why, for how long, and who can see it. it also covers the balqis website.

the short version: balqis keeps what its features need to work in your server, and nothing more. balqis never asks for passwords, never handles money or payment details, and never sells or shares data for ads.

1who we are

balqis is a discord bot for moderation, logs, tickets, a shop and role panels. in this policy "balqis" means the bot and the people who run it.

contact: [email protected], or the support server: https://discord.gg/balqis

2the basics

• balqis works inside discord. discord's own privacy policy covers everything discord itself does.
• balqis saves discord ids (numbers for people, servers, channels, roles and messages). it saves names (like a username or a server name) only where a feature shows them later, as described below.
• most data belongs to a server: the server's staff choose the settings, run the commands and can see the results (cases, logs, tickets, orders).
• balqis reads messages in a server only where a feature needs it (the scam guard, the trap channel, tickets, deleted message proof). discord calls this the message content intent.

3what balqis keeps, by feature

moderation and cases

• for every action (warn, timeout, kick, ban, jail and their undo): the server, the case number, the type, the member, the moderator, the reason typed, the length, the link of the log message, whether the dm to the member was sent, and when.
• moderator notes about a member, the warn rules of a server, and the roles a member had before a jail (to give them back; kept 30 days after a jailed member leaves).
• ban reasons from discord's own ban list, when a server syncs its bans.
• lock and lockdown records (channel ids and names, reasons, the moderator) are deleted 30 days after they end.
• appeals: the answers a person types in the appeal form, the result and who decided.

logs and deleted messages

• the log channels a server picks.
• when a ban, soft ban, kick or purge deletes messages, balqis posts a copy of them (a file and the images) in the server's log as proof. the case keeps only counts, channel ids and short items, never links to the images.
• /log reset keeps a copy of the removed log channel ids (no names, no text) for 10 minutes for the undo, and deletes it within an hour after that.

the dm inbox

• messages you send to balqis by dm can be read by the owner of balqis and the support server's administrators, so they can answer you. they are kept in a private place in the support server, with the ids that link each dm to its copy (so edits and deletes can be shown).
• copies of the moderation dms balqis sent you are posted there too.

scam guard and trap channel

• server messages are checked for known scam images and links. images are never stored: balqis only keeps fingerprints of known scam images. the originals of the shared scam list are kept as discord messages in the balqis support server.
• the guard's short memory of recent messages lives in memory for 10 minutes only. strikes are deleted after 24 hours.
• balqis counts trap catches per server, trap channel and day (numbers only, never who). every member of that server can see these numbers on the trap info card.

templates and designs

• saved designs live in the server settings. builder drafts are kept for 30 days. pictures of designs that were never saved are deleted after 31 days.
• saved template pictures are stored until the template is deleted. balqis remembers the channel and message ids of sent designs, so it can update them.
• template menus and their answers are part of the saved template; nothing about the person who picks is saved.
• the global designs of the owner of balqis and their pictures are kept until the owner resets them.
• posts sent with /post: balqis remembers the channel and message, the style, and who sent or last edited each post and when, so it can be edited later. the text and pictures are not saved; an edit reads the post itself. this also covers a post that was sent from a saved template and became a separate post (its template was deleted, or it was saved on its own).

tickets

• the ticket settings, topics and form questions of a server.
• for each ticket: the number, topic, member, channel id, who claimed and closed it, the close reason, the answers of the form, the people added, whether the "closed" dm was sent, when the last messages were written (not the text), close requests, the rating, and who reopened it.
• for a ticket opened from a message: the message's channel and message id, its author and a 100 letter preview of its text.
• the transcript is a file in the server's tickets log (if the server has transcripts on). balqis keeps only the link of that log message.
• the blocked members list of a server (who, the reason, who blocked them, when).

shop, receipts and vouches

• balqis never handles money or payment details. buyers and sellers pay each other outside balqis.
• the shop settings, the stores (name, description, seller and helper ids, panel, hours, designs, payment method names), the catalog and stock.
• for each order: the store, the number, the buyer and seller, what was ordered and its price, discounts used, the status with its times, who changed it, the answers the buyer typed in the order form (like a game username), ready dates and their changes, and when it was marked paid.
• a cart is kept for at most 24 hours. an order form that was refused is kept in memory for 10 minutes only.
• for each done order a receipt: the invoice number, the check code, the payment method name, paid or due, a snapshot of what the receipt printed (names, usernames, ids, items, amounts, notes) and the links of the messages it was posted in. anyone with a check code can see what the public copy of that receipt showed. a buyer's receipt privacy choice is kept per order and, if they pick "remember", per server.
• receipt paper pictures are kept until they are replaced or removed, then until no receipt of the last 30 days uses them.
• spend totals are added up from the done orders when needed. imported spending (who, the amount, a note, who imported it) is kept until the import is undone. balqis remembers which tier roles it gave and who turned their own tier role off.
• refunds: when, who, and the reason.
• vouches: the order, the store, the buyer and the seller, the stars, the text, whether it was posted without the name, the post link, and when it was written, edited or removed. the seller's answer, a staff hide (who and why), and a store's blocked buyers (who, the reason, who blocked them).
• exchange rates come from an exchange rate service: balqis sends only currency codes.
• when a store turns its queue on, anyone in the server who presses [queue] can see the names of buyers with open orders and the product names (never prices, answers or tickets).

role panels and roles

• role panels (names, settings, roles, designs, a note per role) and the ids of the panels balqis sent.
• who used their one pick on a "pick once" panel and which role, until a moderator resets it or the panel is deleted.
• temporary roles: who has one and when it ends, until it ends, is taken off, or the member leaves. a join role queue row for a new member (minutes, at most 7 days).
• /roles everyone keeps the list of members a run changed (id and username, and failures) for 24 hours for the undo; a short record of the run (no members) is deleted after 7 days.
• views: the view settings, the channels balqis changed, and for each member in a view which view and the roles balqis paused, until they leave the view or the server.
• role requests: the request, the role, the member, the reason typed, who answered and the result, until 30 days after it was answered, cancelled or ended. the staff card in the server's log channel shows the member, the role and the reason; it stays in that channel (it is the server's log).
• permission presets (name, permissions, who made it). a picture uploaded as a role icon is sent to discord only and never saved by balqis.

server settings and the owner of balqis

• each server's settings (language, look, reply settings, log channels, the bot's profile in that server).
• the owner of balqis can see which servers balqis is in (name, members, owner id, vanity link, which features are on) and, with a reason that is logged, in which balqis servers a person is a member. nothing about that person is saved by the lookup.
• balqis counts the different people in all its servers once a day and keeps only that number.

help, errors and health

• /help shows fixed texts and saves nothing about who used it.
• when something breaks, the owner of balqis gets a short error line in a private channel: an error number, the time, where it happened (like the command name), the server id and the technical error with names, typed text and message text removed. it is never sent anywhere else.
• the health address of balqis only answers "ok" or "down".

4what balqis never keeps

• passwords, tokens, bank or card details, or money.
• the images the scam guard checks (only fingerprints of known scams).
• the text of ticket messages in the database (the transcript is a file in the server's own log).
• names, typed text or message text in the error feed.
• anything for ads or tracking. the website has no cookies, no analytics and no trackers. its font and pictures come from the website itself, never from another company.
• the light and dark button of the website remembers your choice in your own browser only. it is never sent anywhere.

5why balqis keeps it

only so the features work: to show cases and logs, to undo actions, to keep tickets, orders and receipts, to give and take roles at the right time, and to keep servers safe from scams. balqis does not use the data for anything else.

6who can see it

• the server's staff: the cases, logs, tickets, orders and settings of their own server, through balqis' commands and the log channels they picked.
• members: what a feature shows them (their own orders and receipts, public posts like vouches and receipts, the trap catch numbers).
• the owner of balqis: the error feed, the server list, the dm inbox, and the logged member lookups and data lookups described above (a data lookup shows numbers only). the administrators of the balqis support server can read the dm inbox too.
• nobody else. balqis does not sell or share data.

7where it is stored

• balqis and its database run with a hosting provider. its servers may be outside your country.
• an encrypted backup of the database is made every day and kept with a separate storage provider: daily backups 7 days, weekly backups 4 weeks, then deleted. the key is kept private and is never shared.
• the website is hosted by a website host, which may keep normal request logs (like any website host).
• an uptime service checks every few minutes that balqis answers "ok". it sees nothing else.
• an exchange rate service gives the shop its currency rates. it only receives currency codes, never who is asking.
• balqis uses these services only to run, store and check itself, and gives each of them only what that job needs.

8when balqis leaves a server

when balqis is removed from a server, it saves that day. 30 days later, that server's own data is deleted: its settings, logs, cases, notes, tickets, orders, receipts, role panels, designs and the rest of its records. if the server adds balqis back before then, nothing is deleted.

• two things stay, because other servers use them: the shared scam list (only the owner of balqis adds to it), and the number of accounts the trap channels caught, which is moved into one count with no server or channel attached.
• the daily backups still hold the data for at most 4 weeks more, then they are deleted too.
• a short discord outage is not a leave: nothing is deleted.

9your choices

• about a server's records (cases, notes, logs, tickets, orders, receipts): ask that server's staff. they decide how their server uses balqis.
• about your data in balqis: open a ticket in the support server (https://discord.gg/balqis) or send an email to [email protected]. the owner of balqis looks up what balqis keeps about you (as numbers, never what you wrote) and tells you. every lookup is written in a private log of the support server.
• asking balqis to delete your data: in the same ticket. the owner of balqis does it in one step, all or nothing, and sends you a short summary. what happens:

- deleted: your personal settings (your cart, your receipt privacy choice) and your unfinished drafts.
- changed: your vouches lose their text and your name; the stars stay, so the seller's rating is not changed by your request. your role requests lose the reason you typed; the result (accepted or denied) stays. their posts and staff cards are edited the same way. balqis forgets that you sent or edited posts with /post; the posts stay.
- kept, and why: moderation records (cases, notes, bans, jails, appeals, scam guard records) keep servers safe. tickets and the dm inbox are support records. orders, receipts, spending, used discount codes and your choice to turn off a tier role are the store's records. role picks, timed roles and views keep roles right. what you did as staff or as a seller belongs to the server's records.
- role requests answered more than 30 days ago are already deleted from balqis. their card in the server's own log stays, as the server's record.

• you can stop sending dms to balqis at any time, and a server owner can remove balqis from their server at any time.

10children

balqis follows discord's rules: you must be old enough to use discord in your country to use balqis.

11changes

when balqis changes what it keeps, this policy changes too. the date at the top shows the last change. big changes are also posted in the support server.

12contact

[email protected] · support server: https://discord.gg/balqis