← Back

Privacy Policy

Last updated: 28 September 2026

This policy explains how Novarys ("we") collects, uses and protects the personal data of users of the Novarys Discord bot and the associated web dashboard (the "Service"). Novarys is published by The Flippin' Labs (contact: theflippinlabs@gmail.com). The data controller under GDPR is The Flippin' Labs.

1. Data we collect

  • Discord ID, username, avatar (via Discord OAuth).
  • Content you voluntarily submit to the Service: messages sent to the AI companion, riddle answers, pet and card customizations, PULSE transactions.
  • Activity metadata from the Discord server(s) where the bot is installed: XP, game participation, event dates.
  • Technical data: truncated IP address, session tokens, language preferences and technical cookies.
  • Payment data: payments are processed by Stripe. We never receive or store card numbers — only Stripe customer identifiers and a subscription status.

2. Purposes

  • Provide Service features (PULSE economy, games, AI companion, analytics).
  • Secure the Service and prevent fraud and abuse.
  • Manage subscriptions and billing through Stripe.
  • Respond to support requests.

3. Legal bases

Performance of the contract for core Service functions; legitimate interest for security and anti-fraud; consent for non-essential cookies and push notifications; legal obligations for billing.

4. Sub-processors

  • Discord — identity and messaging infrastructure of the bot.
  • Supabase (EU) — database and storage.
  • Railway — bot hosting.
  • Vercel — dashboard hosting.
  • Stripe — payment processing.
  • Anthropic — language model for AI companion replies. Messages are sent to Anthropic solely to generate a response and are NOT used for training.

5. Retention

  • User account: as long as you are a member of a server where the bot is active.
  • AI companion conversation history: last 30 messages, automatically purged beyond that.
  • Security logs: 90 days.
  • Invoices and accounting data: 10 years (legal obligation).

6. Your rights (GDPR)

You have the right to access, rectify, erase, object to, restrict and port your data. To exercise these rights, write to theflippinlabs@gmail.com. You may also file a complaint with your local data protection authority (in France, the CNIL).

7. Account deletion

You can delete your AI companion at any time via /compagnon delete. To delete all your Novarys data, email the address above; deletion is completed within 30 days.

8. Cookies

We only use strictly necessary technical cookies (session, language preferences). No advertising or third-party tracking cookies are set.

9. Minors

The Service is not intended for children under 13 (or under 15 in France without parental consent). If you are a parent or guardian and believe a minor has provided us with data, contact us and we will delete it.

10. Changes

Any substantial update to this policy will be announced on the dashboard and via a message in the Discord server at least 30 days before it takes effect.