Privacy policy
This policy explains what Cloudbow Studio ("we", "us") collects when you use arii (the Discord bot, arii.love, its dashboard and custom bots), why, how long we keep it, and what you can do about it. We collect only what arii needs to work, and we never sell your information or use it for advertising.
What we collect
When you sign in with Discord, Discord shares your account's id, username, display name, avatar and banner, and the list of servers you're in with your permissions there. We use them to show you the servers you can manage and to keep you signed in.
What you create and set up: your settings and look, servers' configuration, messages, cards, flows, templates, playlists, likes and files you upload.
That you accepted our terms: which version and when, so we know the terms that apply to you.
What the bot handles in servers: members' Discord ids, names and roles where a feature needs them (welcomes, levels, moderation cases, starboard, giveaways, tickets and similar). Message content is kept only for features a server turns on that need it (the logging cache and ticket transcripts), for the times below.
Music: your queue, likes, playlists and listening history (you can turn the history off).
Presence: who is online or listening is used live and never stored.
Connections you choose: if you connect Spotify through Discord, or use linked roles, Discord shares only what that connection needs.
Custom bots: your bot's token, encrypted, used only to run your bot.
Payments: Paddle, our Merchant of Record, processes payments. We receive your plan, its status, the country and the identifiers needed to manage it; we never see your card details.
Ask arii (only if you turn it on): your questions, its answers, the dashboard page you asked from, and what it looks at to answer you (your servers' arii setup, your libraries, your music).
Safety: reports, enforcement records and appeals.
Technical: IP addresses and request details in short-lived logs, for security and rate limits, and error reports when something breaks.
Why we use it
To run arii for you and your servers (our agreement with you), to keep arii secure and prevent abuse (our legitimate interest), for features you turn on or connections you make (your consent, which you can withdraw), and where the law requires it.
Who we share it with
Only the providers that run arii for us, under their own privacy commitments:
- Discord: the platform arii runs on.
- DigitalOcean: our servers, in the United States.
- Cloudflare: DNS, delivery, security, file storage, email forwarding and privacy-friendly analytics (no cookies, no tracking across sites).
- Paddle: payments, taxes and receipts.
- Anthropic: Ask arii's answers are written by its model, Claude, from the questions you ask once you turn Ask arii on and what it looks at to answer them. Anthropic doesn't use them to train its models.
- Sentry: error reports, when enabled.
- Spotify: only if you connect it.
- Music services: the searches you make to play songs.
We may also share information if the law requires it, or to protect people or arii from serious harm.
How long we keep it
| What | Kept |
|---|---|
| Logging message cache (when a server turns it on) | 7 days |
| Ticket transcripts (when a server turns them on) | 90 days by default, up to 1 year |
| Flow run logs | 14 days |
| Notifications | 90 days |
| Ask arii conversations | 30 days |
| Listening history (you can turn it off) | 12 months |
| Statistics (daily totals, no content) | 13 months |
| Audit and enforcement records | 2 years |
| A server's data after arii is removed | 30 days (restored if arii is added back), then deleted |
| Your account after you delete it | erased after a 14-day undo window, or at once if you choose |
| Backups | 30 days |
| Presence | never stored |
Your choices and rights
From Account → privacy you can download everything arii keeps about you, and delete parts of it or your whole account. You can also ask us at privacy@arii.love to access, correct or delete your information, or to object to how we use it. Enforcement records are kept for safety even after deletion.
In the EU and the UK you also have the rights to restrict processing, to data portability and to complain to your data protection authority.
In California (CCPA/CPRA): we collect the categories above for the purposes above; we don't sell or share personal information for advertising; you can ask to know, delete or correct your information, and we won't treat you differently for asking.
Where it's stored
arii's servers are in the United States. If you're elsewhere, your information is transferred there, with safeguards such as standard contractual clauses where required.
Children
arii follows Discord's minimum age: 13, or older where the law requires. If we learn that a child under that age uses arii, we delete their information.
Security
Connections are encrypted, bot tokens and other secrets are encrypted at rest, and only the people who run arii can reach its systems, and only as their role needs. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.
Changes
We may update this policy. When a change matters, we'll say so on the website or in arii before it takes effect.
Contact
Cloudbow Studio, for arii: privacy@arii.love.
last updated October 31, 2026