Privacy Policy

Strom ("we", "our", or "us") is a Discord bot service operated by Ayodhya Enterprises. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you add our bot to your Discord server or visit our website. By using Strom, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of these terms, please discontinue use of the service.

We collect information that is strictly necessary to provide and improve the Strom service. Below is a complete breakdown of every category of data we process.

Information from Discord

When you add Strom to your server, Discord grants our bot access to specific data through its API. We only request the permissions required for bot functionality:

Information from our website

When you visit strombot.com we may collect standard web analytics data including IP address (anonymised), browser type, pages visited, and referral source. This data is aggregated and never linked to your Discord identity.

We use the information we collect exclusively to:

• Operate and maintain the Strom bot and its features
• Track XP, levels, and leaderboard rankings across your server
• Store server configuration (prefix, welcome messages, auto-roles)
• Apply moderation actions and maintain audit logger
• Play music in voice channels when requested
• Track invites and attribute new members to their inviters
• Run giveaways and select winners
• Deliver YouTube feed and game-server status alerts you configure
• Send transactional emails (receipts, subscription notices)
• Detect abuse, fraud, and violations of our Terms of Service
• Improve the product through aggregated, anonymised analytics
• Respond to support requests and bug reports

We use Google Ads conversion tracking to measure the effectiveness of our own advertising. We do not sell your data, we do not build user profiles for sale to third parties, and we do not engage in any form of automated decision-making that produces legal or similarly significant effects.

We do not sell your personal information. We may share limited data with trusted third parties only in the following circumstances:

We may also disclose information when required by law, to protect our legal rights, or to prevent harm to users or third parties.

We retain your data only for as long as necessary to provide the service or as required by law. Specific retention periods are as follows:

When you remove Strom from your server, all associated configuration data is scheduled for deletion within 30 days. Backups are purged on a rolling 90-day cycle.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@strombot.com. We will respond within 30 days. Identity verification may be required.

Our website uses a small number of cookies and similar technologies to keep you logged in, prevent fraud, and understand site usage. You can control cookies through your browser settings — disabling non-essential cookies will not affect bot functionality.

For a full, itemised list of every cookie we set — including its purpose and lifetime — see our Cookie Policy.

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction:

• All data is encrypted in transit using TLS 1.3
• Data at rest is encrypted using AES-256
• Database access is restricted by IP allowlist and requires MFA
• API keys and secrets are stored in a dedicated secrets manager
• We undergo annual third-party security audits
• Employees receive regular security awareness training
• Incident response plan with 72-hour breach notification

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Strom is not directed at children under 13 years of age (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children.

Discord itself requires users to be at least 13 years old. If you believe a child has provided us with personal information, please contact us at privacy@strombot.com and we will promptly delete the information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, notify server administrators via a bot message or email.

Your continued use of Strom after changes become effective constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:

We are based in Delaware, USA. For EU/EEA residents, our data processing is governed by GDPR. For California residents, your rights under CCPA apply.