Privacy Policy

AurInfer Labs, LLC ("AurInfer Labs," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. This Privacy Policy applies to your use of our website aurinfer.com, applications, tools, and AI-powered bot services — including chatting, voice communication, social media posting, autonomous server activity, GitHub developer tool workflows, and platform integrations across Discord, X (Twitter), Bluesky, and Minecraft (collectively, the "Services"). By using our Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

• Account Information: We collect your name, email address, Discord ID, and other identifiers when you create an account or interact with our Services.
• User & Admin Consent Records: Before a bot is activated in a Discord server, server admins explicitly accept AurInfer's Terms of Service, Privacy Policy, and Guidelines via an interactive embed/button — on behalf of themselves and their server members. Before using the bot in DMs, the individual user is presented with AurInfer's Terms, Privacy Policy, and Guidelines; continued use constitutes acceptance. We log consent records including Discord IDs, server IDs, timestamps, and consent versions.
• Usage Logs & Analytics: We collect and retain usage logs, analytics, and interaction data related to your use of our bots and dashboard, such as commands executed, tool usage, bot configurations, and feature interactions. This data is retained in a secure environment for platform integrity, abuse detection, and operational purposes.
• Payment Data: For subscriptions, usage credits, in-app purchases, or premium features, payment information is processed securely via third-party payment processors and platforms, including Google Play Billing, Stripe, and Patreon. We do not collect or store sensitive payment credentials such as full credit card numbers or security codes; all payment transactions are handled directly by these processors and app marketplaces in compliance with PCI-DSS and applicable platform billing standards.
• Cookies, Session Identifiers & Security Data: We use essential security cookies, session identifiers, IP addresses, Clerk client/session IDs, and browser/device fingerprints generated using FingerprintJS-compatible technology to protect accounts, detect abuse, enforce bans, prevent spam or fraud, and secure the Service. Browser fingerprints are not used for advertising, cross-site marketing, or selling user data. Because this fingerprinting is necessary for security and abuse prevention, it is not optional in the same way as marketing or analytics cookies. We retain a limited set of recent browser fingerprints per account/session; as new fingerprints are generated, older ones are automatically rotated out. Fingerprints connected to active bans, abuse investigations, or security enforcement may be retained for as long as necessary for those purposes. Users may contact us to object to or request deletion of this data, but we may retain or continue processing security identifiers where needed to protect the Service, enforce our Terms, prevent abuse, or handle legal or security claims.
• Core Memory System: With explicit user consent via the dashboard, we process messages via AI to generate layered memories: short-term (~5–50 messages, minutes–hours), working memory (hours–days), and long-term/episodic/semantic memories (weeks to indefinite, subject to exponential decay). Memories include AI-generated summaries, vector embeddings, importance scores, timestamps, tags, and metadata. Raw messages are deleted immediately after processing. Only summaries persist until decay-based cleanup. Cleanup jobs permanently delete non-pinned memories once their decayed importance score falls below the cleanup threshold. Memories pinned by the bot owner or user via the dashboard are never subject to automatic deletion and are retained until manually removed. Users have full dashboard control: view, edit, pin, delete by type, full reset, or opt-out entirely.
• Message Content (Non-Memory): When a bot is mentioned in a Discord text channel, it will fetch the previous few messages to understand context (no older than two weeks) for AI processing via our AurInfer API (v1/chat/completion). For slash commands like /ask, only the user-entered prompt text is processed. No message content is stored unless memory is enabled.
• Voice Chat Data: When a user requests the AI character to join a voice channel (via the VC Presence tool or any equivalent invocation), it processes one speaker's audio at a time in real-time — transcribing speech via audio transcription services and generating synthesized speech using third-party Text-to-Speech (TTS) providers, including ElevenLabs and Fish Audio. No audio recordings are saved; all audio is discarded immediately after response playback. Third-party TTS and voice providers (such as ElevenLabs and Fish Audio) process audio data under their own respective policies.
• Tool Usage Data: AurInfer offers a suite of optional tools (including Web Search, Web Scraper, Image Generation, Administration, GitHub Repository & Code Tools, DM User, VC Presence, Message History, and others). When enabled, these tools may process message content, search queries, image prompts, code snippets, server metadata, or platform-specific data in real-time to generate responses. No tool-processed content is retained after the response is delivered, unless memory is enabled and the character determines the information is worth remembering. Tool-specific third-party providers (such as search APIs, image generation services, GitHub, and YouTube) handle data under their own privacy policies. We exclusively use Zero Data Retention (ZDR)-compliant vendors for all AI model calls, tool integrations, and data processing.
• Free Will & Sentry System Data: When Free Will is enabled by a server admin, the bot may autonomously read channel messages to assess context before deciding whether to engage. The Sentry subsystem operates background cognitive cycles — periodically fetching a configurable number of recent messages (Fetch Depth) across accessible channels solely to determine whether and how to respond. This passive channel monitoring is used only for real-time decision-making; no messages read during these cycles are stored. Sentry may also facilitate autonomous DM outreach to server members where the server admin has enabled this feature. All Free Will and Sentry activity is governed by the server admin's configuration and is subject to the consent provided at bot activation.
• Moderation Guardrail Data: Enabled by server admins only (opt-in, disabled by default). All messages in admin-selected moderation channels are processed by AI guardrails for server rule compliance. No message content is stored. Violations escalate to the character's AI for admin-configured actions (delete/warn/timeout/kick/ban). Warning history stores metadata only: user ID, violation category, action taken, and timestamp. Server admins can delete all warning records via the dashboard.
• Integration Credentials & GitHub PAT Tokens: If you create a bot with Discord integration, you may provide a bot token via the dashboard. If you use Bluesky integration, you may provide an application password. If you use X integration, you must provide your own API credentials from the X developer portal. If you connect our GitHub integration (such as for repository access, automated coding assistance, or developer tooling), you may provide a GitHub Personal Access Token (PAT). All integration credentials — including Discord bot tokens, Bluesky app passwords, X API keys, and GitHub PATs — are encrypted at rest using industry-standard cryptographic algorithms (e.g., AES-256), stored in isolated secure vaults, accessible only to backend services to execute user-directed actions or host your bot instances, and are never exposed to the front-end, shared with third parties, or visible to other users. You can update, regenerate, or revoke your GitHub PATs or other credentials at any time via your dashboard or third-party platform account settings.
• Minecraft Integration Data: When the Minecraft tool is enabled, the AI character may autonomously join and leave Minecraft servers as configured. We may process server connection details and in-game interaction data solely for the purpose of operating the bot instance. No in-game content or player data is stored beyond what is necessary to complete the interaction.

2. How We Use Your Information

• To provide, operate, and maintain the Services, including bot functionality, user accounts, platform integrations, and consent logging.
• To personalize experiences via the Core Memory System (semantic recall: embed current message, query similar memories, inject context into prompts) — only with explicit user consent.
• To maintain usage logs and analytics for platform security, integrity, abuse prevention, and operational reliability.
• To ensure security, detect fraud, enforce bans, and prevent abuse via browser fingerprinting, IP logging, session identifiers, and moderation guardrails.
• To communicate updates, support, or service matters, with opt-out options for marketing communications.
• To enable real-time voice and text interactions, tool-based features, Core Memory recall, and admin-configured moderation actions.
• To power Free Will and Sentry autonomous behaviors — including passive channel monitoring, autonomous message sending, reaction mirroring, DM outreach, and chat revival — strictly as configured and consented to by the server admin.
• To host user-provided Discord, Bluesky, X, and Minecraft bot instances and execute authorized GitHub developer integrations securely with opted-in features.
• To comply with legal obligations and enforce our Terms of Service, Discord Developer Policy, GDPR, and applicable U.S. federal and state privacy laws.

3. No AI Training — Ever

AurInfer Labs, LLC makes the following unambiguous commitments regarding your data and AI training:

• Your conversations, messages, voice interactions, memory data, tool usage, Free Will activity, and any other content you generate through the Services are never used to train, fine-tune, or improve any AI model — by AurInfer Labs, LLC or any third party.
• AurInfer Labs does not own, operate, or plan to develop proprietary AI models. All AI capabilities are provided by third-party model providers.
• We exclusively use Zero Data Retention (ZDR)-compliant vendors for all AI model calls, tool integrations, and data processing. This means our AI providers do not retain your data to train their models either.
• Memory data stored via the Core Memory System is used exclusively to provide contextual recall within your character interactions. It is not shared with, transmitted to, or used by any AI model training pipeline.
• Aggregated and fully anonymized analytics data (containing no personally identifiable information) may be reviewed internally for platform reliability purposes only.

4. Free Will & Sentry — Autonomous Behavior

Free Will is an optional AurInfer feature that allows AI characters to act autonomously — initiating conversations, reacting to messages, reviving quiet channels, and reaching out to users via DM — without being directly mentioned or prompted. It is disabled by default and must be explicitly enabled and configured by a server admin.

• Channel Monitoring: When Free Will or the Sentry subsystem is active, the bot passively reads recent messages in accessible channels (up to a configurable Fetch Depth) to assess context and decide whether to engage. This reading is transient and used solely for real-time decision-making. No messages read during these monitoring cycles are stored.
• Autonomous Messaging: The bot may post standalone messages, reply to conversations, mirror emoji reactions, or send voice messages in channels where Free Will is enabled, based on engagement thresholds and rate limits configured by the server admin.
• Autonomous DM Outreach: If the server admin has enabled the Direct Messages toggle within Free Will settings, the bot may send unsolicited DMs to server members — for example, to re-engage inactive users. DM outreach is governed by configurable cooldowns, the option to restrict outreach to Favorite Users only, and inactivity thresholds set by the server admin. Server members who do not wish to receive autonomous DMs should contact the server admin to be added to the bot's Ignored Users list, or contact us at support@aurinfer.com.
• Sentry Background Cycles: Sentry is an advanced autonomous engine that runs background cognitive cycles at configurable intervals (e.g., every 90–195 minutes) to assess server activity and plan responses. During each cycle, Sentry may read a configurable number of recent messages across accessible channels. No data from these cycles is stored or retained.
• Multi-Bot Coordination: When enabled, multiple AurInfer bots on the same server may share contextual information between themselves to coordinate responses and avoid redundant or looping behavior. This coordination occurs in real-time and no shared context is stored.
• Mood & Personality State: The Mood System maintains a real-time internal state (happiness, energy, patience, sarcasm levels) for the AI character. This state is held in memory for the duration of the session and is not stored persistently unless Core Memory is enabled.
• Consent & Admin Control: All Free Will behaviors are entirely within the server admin's control. Admins may restrict autonomous activity to specific channels, block specific users or roles, set daily message limits, configure active hours, and disable Free Will entirely at any time via the dashboard. The server admin's acceptance of AurInfer's Terms and Privacy Policy at bot activation constitutes consent for Free Will behaviors as configured by that admin.
• No Free Will Data Retention: Messages read during passive monitoring, autonomous decision-making outputs, Sentry cycle data, and multi-bot coordination context are all discarded in real-time. The only exception is if Core Memory is enabled and the character determines an interaction is worth remembering, in which case only an AI-generated summary is retained — not raw message content.

5. Data Sharing & Disclosure

• We do not sell your personal data.
• We share data with third-party service providers (including Google Play Billing, Stripe, and Patreon for payment processing, ElevenLabs and Fish Audio for voice and text-to-speech (TTS) processing, OpenAI for vector embeddings, image generation providers, search API providers, GitHub for authorized repository workflows, and infrastructure/hosting providers) under strict confidentiality agreements. We use only ZDR-compliant vendors.
• We may disclose information if required by law, regulation, or valid legal process (such as a court order or subpoena).
• We may share data where reasonably necessary to protect the rights, property, or safety of AurInfer Labs, LLC, our users, or others, or to prevent fraud or abuse.
• In the event of a merger, acquisition, or asset sale, data may be transferred with appropriate privacy safeguards and notice to users.
• Aggregated and anonymized data may be used for analytics or research purposes, with no individual identification possible.

6. Data Security & Retention

• We implement industry-standard security measures including encryption in transit and at rest for all stored data: bot tokens, integration credentials (including GitHub Personal Access Tokens, Discord bot tokens, Bluesky app passwords, and X API keys), memory summaries, moderation warning metadata, usage logs, and security identifiers.
• All integration credentials (Discord bot tokens, Bluesky app passwords, X API keys, and GitHub PATs) are encrypted at rest and accessible only via isolated backend systems — never exposed to the front-end, other users, or unauthorized third parties.
• Zero Retention After Response: Raw message content, voice audio, tool-processed content, Free Will monitoring data, Sentry cycle data, and all real-time interaction data are permanently discarded immediately after a response is generated and delivered. This is our default behavior across all features unless Core Memory is explicitly enabled.
• Core Memory Retention: Memory entries follow an exponential decay model based on importance score, time elapsed since last access, and a configured decay rate. Automated cleanup jobs permanently delete non-pinned memories once their decayed importance score falls below the cleanup threshold. Memories pinned by the bot owner or user via the dashboard are exempt from automatic deletion and are retained indefinitely until manually removed.
• Moderation Warning Metadata: Retained until deleted by the server admin via the dashboard.
• Usage Logs & Analytics: Retained in a secure environment for platform integrity, abuse prevention, and operational reliability. Retention periods are aligned with their purpose.
• Security Identifiers: Browser fingerprints (rotated automatically as new ones are generated, with enforcement-related fingerprints retained as necessary), IP addresses, session IDs, and Clerk client/session IDs are retained as described in Section 1 for security and abuse prevention purposes.
• No internet transmission or storage system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

7. Your Rights

• You may request access, rectification, erasure, restriction, data portability, or objection to processing of your personal data via your dashboard or by contacting support@aurinfer.com. Requests will be fulfilled within 90 days (extendable where permitted by law).
• Core Memory: Opt in or out per character or user via the dashboard. View, export, or delete individual memories filtered by type. Wipe all short-term memories or perform a full reset. Pin memories to exempt them from decay-based deletion. Configure recall parameters (Context Size 1–10, Relevance 0.01–1.0).
• Moderation: Users may request deletion of their personal warning records. Server admins may enable/disable moderation channels, configure actions, and delete all warning records via the dashboard. Moderation features require Terms and Privacy Policy acceptance.
• Free Will / Autonomous DMs: Server members who do not wish to receive autonomous DMs from a Free Will-enabled bot should contact the server admin to be added to the Ignored Users list. You may also contact us at support@aurinfer.com to flag concerns about autonomous DM behavior directed at you.
• Opt out of voice processing via the Ignore List feature, and opt out of marketing communications at any time.
• Revoke your AurInfer character or deactivate hosted bot instances via the dashboard at any time.
• You may contact us to object to or request deletion of security identifier data (browser fingerprints, IP logs, session data), subject to our right to retain such data where necessary for security enforcement, abuse prevention, or legal purposes.
• EU/UK Residents (GDPR): You have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been infringed.
• Data Breach Notification: In the event of a data breach affecting your personal information, AurInfer Labs, LLC will notify affected users and relevant supervisory authorities as required by applicable law, including within 72 hours under GDPR where feasible.

8. U.S. State Privacy Notice (CCPA/CPRA, VCDPA & Applicable State Statutes)

This section supplements our general Privacy Policy and applies specifically to residents of United States jurisdictions with enacted comprehensive consumer privacy statutes, including California (California Consumer Privacy Act, as amended by the California Privacy Rights Act "CCPA/CPRA"), Virginia (Virginia Consumer Data Protection Act "VCDPA"), Colorado (Colorado Privacy Act "CPA"), Connecticut (Connecticut Data Privacy Act "CTDPA"), Utah (Utah Consumer Privacy Act "UCPA"), Texas (Texas Data Privacy and Security Act "TDPSA"), and other applicable state statutes, now that we operate as AurInfer Labs, LLC.

• Categories of Personal Information Collected (Past 12 Months):
  • Identifiers: Legal name, email address, Discord ID, platform user IDs, IP address, Clerk user and session IDs, and device/browser fingerprints.
  • Commercial Information: Subscription history, in-app purchase receipts, transaction logs, and billing metadata maintained via third-party payment processors and platforms (including Google Play Billing, Stripe, and Patreon). We do not store raw payment details or credit card numbers.
  • Internet or Electronic Network Activity: Interactions with our bots and dashboard, command execution history, tool invocations, active hours, and diagnostic crash logs.
  • Audio & Electronic Data: Real-time voice chat audio processed transiently via third-party TTS and voice providers (ElevenLabs, Fish Audio). Voice data is discarded immediately after synthesized speech delivery with zero persistent retention.
  • Inferences & Contextual Summaries: Semantic memories and vector embeddings generated solely when the user or server admin explicitly opts in to Core Memory.
• No Sale or Sharing for Targeted Advertising: AurInfer Labs, LLC does not sell personal information to third parties for monetary or other valuable consideration. AurInfer Labs, LLC does not share personal information for cross-context behavioral advertising or targeted advertising. We do not sell or share personal information of consumers of any age, including minors under 16.
• Sensitive Personal Information: We do not collect or process sensitive personal information to infer characteristics about individuals, nor do we disclose sensitive personal information beyond the narrow operational exceptions permitted by applicable laws.
• Consumer Privacy Rights: Depending on your state of residence, you are entitled to exercise the following rights subject to identity verification:
  • Right to Know & Access: Confirm whether we process your personal data and obtain access to the specific pieces of data collected, including categories of sources and third parties with whom data was disclosed.
  • Right to Delete: Request permanent deletion of personal information we have collected from you, subject to statutory exceptions (such as retaining security fingerprints required for ban enforcement and fraud prevention).
  • Right to Correct: Request correction of inaccurate personal information maintained in our systems.
  • Right to Opt-Out: Opt out of the processing of personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. (As noted, AurInfer Labs, LLC does not sell data or engage in targeted advertising).
  • Right to Non-Discrimination: We will not discriminate against you in pricing, service level, or access for exercising any statutory privacy rights.
  • Right to Appeal: If we decline to take action regarding your request, residents of states with appeal provisions (such as Virginia, Colorado, Connecticut, and others) may appeal within a reasonable period by contacting support@aurinfer.com with the subject line "Data Rights Appeal." If your appeal is denied, you may contact your state Attorney General.
• Exercising Your Rights & Verification: To submit a request, contact us at support@aurinfer.com with "U.S. State Privacy Rights Request" in the subject line. We will verify your identity by cross-referencing your contact details and account identifiers. You may also designate an authorized agent to submit requests on your behalf, provided the agent submits proof of written authorization and you verify your own identity directly with us.
• California "Shine the Light" Law: Under California Civil Code Section 1798.83, California residents may request information once per calendar year regarding our disclosure of personal information to third parties for their direct marketing purposes. AurInfer Labs, LLC does not disclose personal data to third parties for direct marketing.

9. Server Admin Responsibilities

• By activating AurInfer in a Discord server, the server admin explicitly accepts AurInfer's Terms of Service, Privacy Policy, and Guidelines via an interactive bot embed/button — on behalf of themselves and all members of their server.
• Server admins who enable Free Will are responsible for configuring it responsibly — including setting appropriate rate limits, restricting autonomous activity to suitable channels, and deciding whether to enable autonomous DM outreach to server members.
• Server admins are responsible for configuring moderation channels and actions responsibly, understanding that all messages in selected channels will be processed by AI guardrails when moderation is enabled.
• Server admins are responsible for managing warning history via the dashboard, including viewing and deleting records for compliance and appeals purposes.
• Server admins are strongly encouraged to inform their server members about which AurInfer features are active — particularly Free Will, autonomous DMs, Sentry monitoring, and moderation guardrails — so members can make informed decisions about their participation.
• Server admins are responsible for ensuring that their use of AurInfer bots on their server complies with Discord's Terms of Service, Community Guidelines, and Developer Policy.

10. Children's Privacy

• Our Services are not intended for children under 13 years of age, or the minimum age of digital consent in their jurisdiction, whichever is higher. We do not knowingly collect personal data from children under 13.
• If we learn that a child under 13 has provided us with personal information, we will delete that data promptly, including any associated Memory entries and moderation warning records.
• If you believe a child under 13 has submitted information to us, please contact support@aurinfer.com immediately.

11. Message, Voice & Tool Processing

• Text Processing: Bot mentions retrieve the last few messages (no older than two weeks) for processing via the AurInfer API. Slash commands process only the user-entered prompt. Message Content intent is enabled only for features that require it, per Discord Developer Policy. If Core Memory is enabled, only AI-generated summaries may be retained — no raw message content is stored outside of the processing window.
• Voice Processing: When a user requests the AI character to join a voice channel via the VC Presence tool or equivalent, the character processes one speaker's audio at a time via audio transcription and generates a synthesized voice response using third-party TTS providers, including ElevenLabs and Fish Audio. No audio is stored; all audio data is discarded immediately after playback. If Core Memory is enabled, only AI-generated summaries may be retained — no raw audio or conversation transcripts are stored.
• Tool Processing: When optional tools are used, relevant data (such as search queries, image prompts, message content, or platform metadata) is processed in real-time to generate a response. No tool-processed data is retained after response delivery unless Core Memory is enabled and the character determines the information warrants storage.
• DM Tool: The DM User tool allows AI characters to send direct messages to Discord users. DMs via this tool are only sent in response to user-initiated interactions or as part of admin-configured bot behavior in contexts where user consent has been established. We do not use this tool to send unsolicited marketing or promotional messages.
• Consent Model: For Discord server channels, the server admin provides consent on behalf of all server members by accepting our Terms and Privacy Policy at bot activation. For Discord DMs, consent is provided by the individual user directly. All tool and Free Will usage is subject to the consent framework applicable to the context in which the bot is deployed.

12. International Data Transfers

• AurInfer Labs operates globally as AurInfer Labs, LLC. Data may be processed or stored outside your jurisdiction, including in the United States. Specifically, vector embeddings are processed via OpenAI (US) and voice/TTS data via providers such as ElevenLabs and Fish Audio.
• We rely on appropriate safeguards for cross-border transfers, including standard contractual clauses (SCCs) where required, to ensure compliance with the EU/UK General Data Protection Regulation (GDPR) and applicable data protection standards.
• Legal bases for processing under GDPR and applicable data protection frameworks include:
  • Consent — Core Memory System, Free Will & Sentry activation, optional tool activation, marketing communications
  • Contract performance — Account management, bot hosting, subscription services
  • Legitimate interests — Security, fraud prevention, abuse detection, usage analytics, platform integrity (balanced against user rights)
  • Legal obligation — Compliance with applicable laws, response to valid legal process

13. Changes to This Policy

• Updates to this Privacy Policy will be posted at aurinfer.com/privacy with a revised "Last updated" date.
• For material changes, we will make reasonable efforts to notify users via email or an in-platform notification before changes take effect.
• Continued use of the Services after updates are posted constitutes acceptance of the revised Privacy Policy. We encourage periodic review.

14. Contact & Data Protection

For questions about this Privacy Policy, to exercise your data rights, or to raise a data protection concern, please contact us at: support@aurinfer.com.

For data protection matters specifically — including GDPR or U.S. State Privacy inquiries — you may direct your request to the same address, marked "Data Protection Inquiry." We will respond within the timeframes required by applicable law.

15. Trademark Notice

"AurInfer™ is a trademark of AurInfer Labs, LLC. All rights reserved."

All other trademarks, service marks, trade names, and product names referenced in this policy or across the Services are the property of their respective owners.