Privacy Policy

Last updated:

1. Overview

Tide ("the Bot") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Key principle: We minimize data collection. We do not sell data. We do not track you beyond what the Bot needs to function.

2. Data We Collect

2.1 Information You Provide

Data	Purpose	Retention
Discord User ID	Identify your account, enforce rate limits, manage subscriptions	Until account deletion
LLM API Keys (optional)	Enable BYO-LLM analysis	Until you remove them
Alert configurations	Deliver price alerts you set up	Until you delete the alert
Subscription data (Pro/Server)	Manage paid tier access and expiry	Until subscription cancellation
Email (optional, for receipts)	Payment confirmation receipts	Until you request deletion

2.2 Discord API Data

Through normal Bot operation, we receive the following data from Discord's API:

Data	Source	Purpose
Discord User ID	Slash command interactions	Identify users, enforce rate limits, manage subscriptions and roles
Server/Guild ID	Guild join event	Server-tier configuration, guild-specific settings
Command arguments	Slash command input	Process commands (ticker symbols, alert parameters, etc.)
Interaction timestamps	Slash command events	Rate limiting (rolling 24h window)

What we do NOT receive: message content, voice data, presence data, friend lists, or any data from channels where the Bot is not explicitly used.

2.2 Information Collected Automatically

Data	Purpose	Retention
Command usage timestamps	Rate limiting (rolling 24h)	7 days
Analysis metadata	Usage analytics, cost tracking	Indefinite (anonymized)
Server/Guild ID	Server-tier configuration	Until guild removes Bot

2.3 What We DO NOT Collect

• ❌ Messages — we never read or store Discord message content
• ❌ Email addresses
• ❌ Passwords
• ❌ Payment information (handled entirely by third-party processors)
• ❌ IP addresses
• ❌ Browsing history
• ❌ Personal identity information

3. Data Encryption & Security

3.1 API Key Encryption

User-provided LLM API keys are encrypted using AES-256-GCM:

• Unique salt per user
• PBKDF2 key derivation (100,000 iterations, SHA-256)
• Random IV per encryption
• Authentication tag for tamper detection
• Keys only decrypted in memory during LLM API calls
• Keys NEVER appear in logs or error messages

3.2 Database Security

• SQLite with Write-Ahead Logging (WAL) mode
• Parameterized queries (SQL injection prevention)
• No network exposure — database is local to the Bot process

4. Data Sharing

We do not sell, rent, or share your personal data with third parties.

Data transmitted solely for Bot functionality:

Service	Data Shared	Purpose
EODHD API	Stock symbol queries	Market data retrieval
LLM Providers	Analysis prompts + your API key	AI analysis (only if configured)
Discord API	Command responses, alerts	Bot functionality

5. Data Retention

Data Type	Retention
User ID, tier, provider config	Until removal or deletion request
Encrypted API keys	Until /configure remove
Alert configurations	Until deleted or account removed
Rate limit events	7 days (rolling)
Analysis logs	Indefinite (anonymized)

6. Your Rights

• Access — use /configure status to view stored configuration
• Delete — use /configure remove to remove API keys, /alert remove to delete alerts
• Request full deletion — contact us for permanent data removal
• Opt out — remove the Bot from your server

7. Third-Party Services

Payments for Pro/Server tiers are processed by third-party payment processors. Tide never receives or stores your payment card details. Refer to the payment processor's privacy policy for their data handling.

When using BYO-LLM, prompts are sent directly to your configured provider. Refer to each provider's privacy policy.

8. Children's Privacy

Tide is not intended for users under 13. We do not knowingly collect data from children.

9. International Data Transfers

Tide operates from the United States (US West). Data is stored and processed on US-based servers.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced in support channels.

11. Contact

For privacy questions, data deletion requests, or to report issues:

• Email: tidebotbusiness@agentmail.to
• Discord: Join our support server or DM
• GitHub: Open an issue in the project repository

We aim to respond to all inquiries within 48 hours.