Privacy Policy

Effective Date: June 2, 2026
Last Modified Date: July 9, 2026

1. Definitions

Owner means the individual who owns and operates Kiyora and is based in Illinois, United States.

Maintainers means the Owner and anyone authorized by the Owner to operate, maintain, support, moderate, improve, or enforce rules for Kiyora.

Kiyora, Software, Service, and Services mean the Discord bot known as Kiyora, including its related software, websites, features, commands, tools, integrations, Free Services, and Paid Services.

Website means kiyora.vip, where this Privacy Policy is displayed or otherwise made available.

Free Services means unpaid access to Kiyora.

Paid Services means paid features, upgrades, subscriptions, premium access, add-ons, and other paid benefits.

Browser and device fingerprint hashes are hashed values derived from browser and device characteristics collected during website verification. Kiyora stores only the hashes, not the raw signals used to create them. These hashes help detect verification abuse, ban evasion, and potentially linked Discord accounts.

2. Introduction

This Privacy Policy explains how Kiyora handles personal information in connection with its Services.

In this Privacy Policy, “Kiyora,” “we,” “us,” and “our” refer to Kiyora and its Maintainers.

3. Third-Party Providers

Kiyora uses third-party providers to operate, secure, and deliver parts of the Services. These providers may process information under their own terms and privacy policies.

  • Discord: Kiyora operates through Discord. Your use of Discord is subject to Discord’s Privacy Policy.
  • Cloudflare: We use Cloudflare to protect the Website and deliver website content. Cloudflare’s handling of information is governed by its Privacy Policy.
  • hCaptcha: Some servers may use hCaptcha during website verification. hCaptcha may process information such as your IP address and verification-related data. Kiyora does not store hCaptcha challenge responses. hCaptcha’s handling of information is governed by its Privacy Policy.
  • Cloudflare Turnstile: Some servers may use Cloudflare Turnstile during website verification. Turnstile may process information such as your IP address and verification-related data. Kiyora does not store Turnstile challenge responses. Turnstile is governed by Cloudflare’s Privacy Policy.
  • proxycheck.io: During website verification, Kiyora may send your IP address to proxycheck.io to assess whether a connection may be associated with a VPN, proxy, Tor network, or mobile network. Kiyora does not store the results of these checks. proxycheck.io’s handling of information is governed by its Privacy Policy.

4. Information We Collect

Kiyora collects only the information reasonably needed to provide the Services, operate verification features, maintain server settings, prevent abuse, and keep the Services secure.

4.1 Discord Account and Dashboard Information

When you sign in to the Kiyora dashboard through Discord, we may collect:

  • Your Discord user ID
  • Your Discord username, display name, and avatar
  • Your email address, when made available through Discord OAuth
  • Authentication and session information needed to sign you in and maintain your dashboard session
  • Information about Discord servers you can access, when needed to display and manage dashboard settings

Kiyora does not permanently store your Discord server list.

4.2 Website Sessions

When you use the Website, Kiyora may process:

  • A session identifier stored in a necessary cookie
  • Limited browser or device information
  • A hashed User-Agent value
  • Your IP address, when needed for session management, security, verification, or abuse prevention

For details about cookies used on the Website, see Section 9.

4.3 Server Verification

When you complete verification in a Discord server that uses Kiyora, the information collected depends on the verification method selected by that server.

Kiyora may collect or store:

  • Your Discord user ID
  • Your IP address, including prior IP address records when the address changes
  • Browser and device fingerprint hashes
  • Discord account IDs that Kiyora identifies as potentially linked accounts
  • Verification status and verification-related records
  • Information selected by a server administrator as part of that server’s verification settings

For the meaning of browser and device fingerprint hashes, see Section 1.

During verification, Kiyora may temporarily process information such as Discord account age, profile status, server name, server icon, email address, email verification status, or multi-factor authentication status when required by the verification method. When OAuth verification is enabled, your Discord email may be processed temporarily to check verification or multi-factor authentication requirements. This information is not added to your dashboard profile or stored in verification identity records.

During website verification, Kiyora may send your IP address to third-party providers for VPN, proxy, Tor network, and mobile network checks. Kiyora does not store the results of those checks.

4.4 Discord Server Information

When Kiyora is added to or used in a Discord server, we may collect or store:

  • The server’s Discord ID
  • Server configuration and verification settings
  • IDs of channels or roles selected by server administrators as part of those settings
  • Bot installation or presence information
  • Premium entitlement or subscription status, where applicable

Kiyora may retrieve channel, role, and server information from Discord as needed to provide dashboard and bot functionality. Kiyora does not independently retain channel or role names unless they are included in server configuration.

4.5 Logs, Security, and Operational Information

Kiyora may create temporary or limited logs to operate, secure, and troubleshoot the Services. These logs may include:

  • Error messages and diagnostic information
  • Discord user IDs or server IDs associated with an error or security event
  • IP addresses or browser and device fingerprint hashes relevant to a verification or security event
  • Verification attempt records
  • Rate-limit records
  • Command cooldown records

Error and diagnostic logs may be retained for up to seven days. Some error logs may also be sent to a Discord channel used for operational monitoring.

When a server administrator enables verification logging, Kiyora may send a verification summary to a Discord channel selected by that administrator. The summary may include a Discord account name, avatar, user mention, verification method, verification outcome, and linked-account information.

4.6 Account Enforcement Information

Kiyora may retain limited account enforcement information for dashboard accounts, including an account restriction status, the restriction’s expiry date, and the reason for the restriction.

4.7 Information We Do Not Collect

Kiyora does not collect or store:

  • General Discord message content
  • Payment card or billing information
  • Raw browser or device fingerprint inputs
  • Advertising identifiers or product analytics data for targeted advertising
  • Contact form submissions, because the contact page does not accept submissions

Information you expressly provide through Kiyora commands, the dashboard, or verification flows may still be processed as described in this Privacy Policy.

5. How We Use Information

We use the information described in this Privacy Policy to:

  • Provide, operate, and maintain the Services, including the Discord bot, Website, and dashboard
  • Authenticate you when you sign in through Discord and maintain your dashboard session
  • Display and manage server settings configured by administrators
  • Retrieve server, channel, and role information from Discord when needed to provide bot and dashboard functionality
  • Process server verification, including assigning roles, applying verification requirements, and recording verification outcomes
  • Detect verification abuse, ban evasion, and potentially linked Discord accounts using IP addresses and browser and device fingerprint hashes
  • Run network and connection checks during website verification when enabled by a server’s settings
  • Protect the Services against abuse, fraud, and unauthorized access, including through rate limiting, cooldown enforcement, and account restrictions
  • Create temporary logs to troubleshoot errors and security events
  • Send verification summaries to Discord channels when a server administrator enables verification logging
  • Maintain premium entitlement or subscription status, where applicable

We do not use personal information for targeted advertising.

6. Legal Bases and Our Roles

Where applicable law requires a legal basis for processing personal information, we rely on the following:

  • Contract: To provide the Services you or a server administrator request, including dashboard access, verification, and Paid Services.
  • Legitimate interests: To secure the Services, prevent abuse and ban evasion, detect potentially linked accounts, troubleshoot errors, and enforce our rules, balanced against your rights and interests.
  • Consent: Where required for specific processing, such as when you agree to these practices before completing verification on the Website.

For dashboard accounts and general operation of Kiyora, the Owner acts as the data controller.

When a Discord server administrator configures verification, logging, or related settings for that server, that administrator decides how Kiyora is used for their community. In those cases, the server administrator is responsible for their own compliance obligations toward their members, and Kiyora processes information on the administrator’s instructions to provide the configured functionality.

7. Advertising, Sale, and Sharing of Personal Information

Kiyora does not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising.

The categories of personal information we collect are described in Section 4. We retain personal information as described in Section 10.

Third-party providers identified in this Privacy Policy process information only as needed to operate, secure, or deliver the Services.

If you are a California resident, you may submit a request to know, delete, or correct personal information, or to limit certain uses of sensitive personal information, by contacting [email protected] or using the contact channels on our Contact page. We do not discriminate against you for exercising privacy rights allowed by law.

8. International Transfers

Kiyora’s primary service data is stored on servers located in Amsterdam, Netherlands, using database and cache systems operated on those servers.

Some information may also be processed by the third-party providers described in this Privacy Policy. These providers may process information in locations other than the Netherlands under their own privacy practices.

Authorized Maintainers may access information from the United States when reasonably necessary to operate, support, secure, or maintain the Services. Where required by applicable law, we rely on appropriate safeguards for international transfers, such as standard contractual clauses or equivalent mechanisms offered by service providers.

9. Cookies

Kiyora uses a limited set of cookies on the Website. We do not use cookies for targeted advertising, interest-based advertising, or cross-site advertising tracking.

9.1 Necessary Cookies

  • session: Authenticates your dashboard session and links your browser to your signed-in account. The cookie contains a session identifier, while session data is stored server-side. This cookie expires when your session ends or you sign out.
  • popup: Displays a one-time message after certain redirects, such as verification outcomes. This cookie expires within approximately 60 seconds.

These cookies are used only to operate the Website and dashboard. They are not used for advertising.

9.2 Language Preference

When multiple languages are available on the Website, your selected language may be stored in a cookie so that pages can be shown in that language on future visits. This cookie is used only for language display and not for advertising.

9.3 Your Choices

You can control cookies through your browser settings. Blocking necessary cookies may prevent you from signing in to the dashboard or using Website features that require a session.

10. Data Retention

Kiyora retains personal information only for as long as reasonably necessary to provide the Services, enforce rules, and protect against abuse.

Unless a longer retention period is required by law or described elsewhere in this Privacy Policy:

  • Dashboard accounts: If a dashboard account has no sign-in or related account activity for one year, Kiyora deletes the account record.
  • Server configuration: If a Discord server’s Kiyora configuration has no settings changes, premium updates, or verification activity for one year, Kiyora deletes that server’s stored configuration. This does not remove Kiyora from the server if the bot remains installed.
  • Verification identity data: If verification-related records for a Discord account have no verification activity for one year, Kiyora deletes those records. Identifying a potentially linked account resets the one-year retention period for the affected accounts.

As described in Section 4.5, error and diagnostic logs may be retained for up to seven days. Fingerprint history used for linked-account detection may be retained for up to 90 days. These shorter retention periods are not extended by this section.

Banned dashboard accounts and servers with active premium entitlements are not deleted under this policy while the restriction or entitlement remains active. After it ends, the applicable retention period resumes.

11. Privacy Rights and Requests

Depending on applicable law, you may have the right to request access to, correction of, deletion of, restriction of, or objection to the processing of your personal information. Where applicable, you may also have the right to data portability or to withdraw consent where processing is based on consent.

To make a privacy-related request, contact us through our Contact page or email [email protected]. Before responding, we may request information reasonably necessary to verify your identity and protect personal data.

We will respond within the time required by applicable law. If you are in the European Economic Area or United Kingdom and believe our processing violates applicable data protection law, you may also lodge a complaint with your local supervisory authority.

12. Children’s Privacy

Kiyora is not directed to children under 13 or to anyone below the minimum age required to use Discord in their country.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it as soon as reasonably practicable.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on the Website with a new Last Modified Date.

If we make material changes, we may provide additional notice through the Website, dashboard, Discord, or another reasonable method before the changes take effect, where required by applicable law.

Your continued use of Kiyora after changes are posted means you accept the updated Privacy Policy, except where applicable law requires otherwise.

14. Contact

If you have questions about this Privacy Policy, privacy rights, or personal information, contact us through our Contact page.