Updated: 26 August 2026

Privacy Policy

This Privacy Policy explains how ServerGPT collects, uses, shares, retains, and protects personal data across our website, dashboard, Discord integrations, AI tools, images, bots, voice features, onboarding, checkout, analytics, and public Explore pages.

It also explains the controls and rights available to you. Our Terms of Use and Usage Policy describe the rules that apply when you use these features.

Questions about these policies can be sent through our support page.

1. Who is responsible for your data

ServerGPT is the UK-based provider and controller of the personal data described in this Policy. We operate from Farnham, United Kingdom. You can contact us at support@servergpt.ai or through our Support page about privacy, your rights, or this Policy.

2. Personal data we collect

We collect information you provide, information created by your use of ServerGPT, and information received from services you choose to connect. The data depends on the features, plan, permissions, and settings you use.

  • Account and profile data: name, username, email address, Discord identifiers, avatar, preferences, plan, credit balance, bot allowance, account status, login and session records, IP address, and approximate location derived from technical data.
  • Discord data: servers you can access, server and user IDs, names, icons, channels, categories, roles, permissions, membership and bot connection status, plus the data needed to preview, cache, edit, and sync a server.
  • Content and workspace data: prompts, chat history, research instructions and results, uploaded or selected images, image prompts and outputs, server drafts, customisation choices, bot code and block workflows, editor state, sync results, feedback, and support messages.
  • Voice data: microphone access and speech processed by your browser's speech-recognition capability when you enable dictation, the resulting transcript, voice-mode duration and usage metadata, and generated speech returned to you. ServerGPT does not intentionally retain raw microphone audio used only for browser dictation.
  • Bot credentials and configuration: Discord application IDs, encrypted client secrets and bot tokens, bot permissions, hosting preferences, external integration settings, and operational logs needed to register, run, and troubleshoot a bot.
  • Onboarding and survey data: how you heard about ServerGPT, how many Discord servers or bots you build, which feature brought you to the service, completion time, and whether the one-time onboarding credit reward was claimed.
  • Usage and diagnostics: pages viewed, referral and campaign parameters, referrer, a browser-stored visitor ID, browser locale or country, device and browser information, timestamps, feature interactions, errors, rate-limit and security events, AI model and reasoning settings, token or tool usage, credits charged, and internal cost reporting.
  • Billing data: Stripe customer, subscription, checkout, invoice, payment and payment-method references; card brand, last four digits and expiry; transaction, top-up, auto-reload, refund, dispute, tax, and fraud information. Stripe processes full card details; we do not intentionally store full card numbers or security codes.

3. How we use personal data

  • Provide accounts, workspaces, AI responses, research, images, voice features, server editing and sync, bot building and hosting, history, support, and user settings.
  • Authenticate users, maintain sessions, encrypt and retrieve bot credentials, secure accounts, investigate incidents, prevent fraud and abuse, enforce limits, and apply our policies.
  • Meter AI usage, deduct and grant credits, administer plans, process checkout and saved payment methods, trigger enabled auto reload, handle cancellations and refunds, and maintain tax, accounting, dispute, and payment records.
  • Remember attribution, measure page and feature use, understand which channels and product features are effective, diagnose errors, and improve product performance and design.
  • Save onboarding answers, determine whether the setup flow should be shown, grant the one-time 100-credit reward, and prevent duplicate reward claims.
  • Send service, support, security, billing, product, survey, and policy communications, and respond to requests or legal obligations.

4. Public Explore content

Explore is a public showcase. Current Explore feeds may display service-generated images, qualifying server names and icons, and public previews of categories and channels from generated servers that have a saved icon and chat activity. These pages may be indexed by search engines. Public image copies may include a ServerGPT watermark. Bot tokens, client secrets, private chats, billing data, and other account details are not intended to appear in Explore.

Because a prompt, name, icon, avatar, or generated image may identify you or another person, do not include confidential or sensitive personal data in content that may qualify for Explore. Contact support if you want us to review removal of an item.

5. AI, Discord, and connected providers

We send the content needed to complete a request to AI and infrastructure providers. Depending on the feature, this may include your prompt, recent chat context, selected images, server context, bot requirements, research query, model settings, and technical usage data. Those providers process the data on our behalf or under their own applicable terms.

When you connect Discord, we process access and refresh tokens, server information, bot credentials, and permission data to show your servers, verify access, register or connect bots, and make changes you request. Discord independently processes data under its own terms and policies. Removing our bot, revoking access, or logging out does not automatically delete records held independently by Discord.

6. Cookies, local storage, and analytics

We use cookies and similar storage for login sessions, security, preferences, referral attribution, and signup attribution. Our site analytics creates a random visitor ID in local storage and records eligible page views with the path, query string, referrer, browser-derived country, and visitor ID. Referral and campaign cookies can be kept for up to 30 days under the current implementation.

You can control cookies and local storage in your browser, although blocking essential storage can prevent login, attribution, preferences, or parts of the Services from working correctly. Where consent is legally required for non-essential storage, we rely on that consent.

7. Who receives personal data

  • Providers supporting hosting, databases, authentication, AI models, image generation, research, payments, analytics, logging, email, support, security, and infrastructure.
  • Discord and its APIs when you connect an account, invite or register a bot, retrieve server data, or request a server or bot action.
  • Stripe and payment or fraud-prevention providers for checkout, subscriptions, saved payment methods, top ups, auto reload, invoices, refunds, disputes, taxes, and risk checks.
  • Professional advisers, auditors, insurers, courts, regulators, law enforcement, and public authorities where reasonably necessary or legally required.
  • A buyer, investor, lender, or successor involved in a merger, financing, reorganisation, asset sale, insolvency, or similar business transaction, subject to appropriate protections.
  • The public where content is displayed through Explore or where you intentionally publish or share it.

9. How long we keep data

We keep personal data only as long as reasonably needed for the purposes above, including providing your account and saved work, operating hosted bots, complying with tax and accounting rules, resolving disputes, preventing repeat abuse, securing the Services, and establishing or defending legal claims. The period varies by data type and context.

Deleting chats, images, bots, or your account removes data from active product systems within a reasonable period, subject to legal, security, anti-fraud, billing, dispute, backup, and enforcement records that must or may be retained. Backups and logs are deleted or overwritten on their normal cycles. Public caches may take additional time to refresh.

10. Your choices and privacy rights

  • Use dashboard Data Controls to delete available chats, generated images, bots, or your account, and manage plan, payment-method, auto-reload, dictation, and other settings.
  • Revoke Discord access through Discord, remove our bot from a server, or disconnect a connected service. This stops future access but may not delete data already required for another lawful purpose.
  • Depending on your location, you may ask for access, correction, deletion, restriction, portability, or an explanation of your data; object to processing based on legitimate interests or direct marketing; and withdraw consent where consent is the basis.
  • We do not use personal data to make solely automated decisions that produce legal or similarly significant effects about you. Automated security, fraud, eligibility, credit, and rate-limit checks may affect product access, but you can contact support for review.
  • If you are in the UK, you can complain to the Information Commissioner's Office at ico.org.uk. Please contact us first if you can, so we have an opportunity to resolve the concern.

11. Children

ServerGPT is not directed to children under 13, and we do not knowingly collect personal data from them. Users under the age of majority must have permission from a parent or guardian. Contact support if you believe a child provided data without appropriate permission.

12. Security and international transfers

We use reasonable technical and organisational safeguards, including access controls, session protections, database controls, provider security measures, and encryption of stored Discord bot tokens and client secrets. No online service is completely secure, so you must also protect your devices and credentials.

We and our providers may process data in the United Kingdom, United States, European Economic Area, and other countries. Where an international transfer needs a legal safeguard, we use an applicable adequacy regulation, approved contractual clauses or data-transfer agreement, or another lawful mechanism. Contact support for more information about the safeguard relevant to your data.

13. Policy changes

We may update this Policy as the Services or law changes. We will publish the new date and provide additional notice where a change is material or legally required.