Privacy Policy

Last Updated: July 29, 2026

NAVCOM AI is committed to protecting your privacy while providing tools to enhance your Star Citizen Discord server experience. This Privacy Policy explains how we collect, use, store, and protect your data, as well as your rights regarding your information.

1. Data We Collect

NAVCOM AI collects the following data to provide its functionality:

• Discord User Data: We collect Discord user IDs (and, when you link Discord or use Sign in with Discord, OAuth tokens and basic profile data Discord provides) to associate users with RSI handle verifications, role assignments, guild membership for portal manage access, and server-specific settings (e.g., welcome messages, dynamic voice channels, action logs).
• RSI Handle Information: When you use Discord /verify, portal Account → RSI bio verification, /local_verify, or portal local verify, we collect your RSI handle to prove Star Citizen identity. Bio verification uses a one-time code you place in your public RSI bio; we check that bio via the SENTRY API (public data only). We may also fetch publicly available RSI data (e.g., org memberships and ranks that are not redacted). Hidden org memberships are not available without a future optional browser-extension path.
• Server Configuration Data: We store server-specific settings such as role mappings, nickname formats, welcome messages, dynamic voice channels, reaction roles, command access rules, action log channels, and org auto-ban security settings.
• Command Usage Data: We log command usage (e.g., /citizen, /org) to ensure functionality and troubleshoot issues, including the user ID of the command issuer and the command parameters.
• NAVCOM Account Data: Email address (hashed password if set), Discord link metadata, optional email OTP codes (hashed, short-lived), portal session identifiers for sign-out/revocation, and account security event logs (link/unlink/merge/verify/revoke). Sign in with Discord may create or link a portal account using your Discord identity.

2. How We Use Your Data

Your data is used solely to provide NAVCOM AI’s functionality:

• Verification and Role Management: Discord user IDs and RSI handles are used to verify identities and assign roles based on org memberships and ranks, ensuring secure access to your server.
• Server Functionality: Server settings and command usage help us manage dynamic voice channels, welcome messages, action logs, security auto-ban, reaction roles, and lookup tools for Star Citizen players and orgs.
• Account Management: Email/password or Discord OAuth credentials are used to manage NAVCOM accounts, link Discord, and configure servers via the web portal (including delegated access based on Discord roles).
• Support and Improvement: Command logs and portal usage data help us troubleshoot issues and improve NAVCOM AI’s performance.

3. Data Storage and Security

We take your privacy seriously:

• Storage: Data is stored securely in our database, hosted on servers with industry-standard encryption and access controls.
• Retention: Server configuration data is deleted if NAVCOM AI is removed from your server. NAVCOM account data is retained until you request deletion. Email verification tokens are deleted after use or expiration.
• Security: We implement measures to protect your data from unauthorized access, including encryption for sensitive data (e.g., Discord tokens, passwords) and restricted access to our systems.

4. Data Sharing

NAVCOM AI does not share your data with third parties, except as required to provide its services:

• SENTRY API: We query the SENTRY API, an external service not affiliated with NAVCOM AI, to fetch publicly available RSI data for verification and lookup commands. SENTRY’s privacy practices are governed by their own policy.
• Legal Requirements: We may disclose data if required by law or to protect the safety and rights of our users and the public.

5. Your Rights

You have control over your data:

• Access and Review: Admins can use /check_verification. Portal users can review linked Discord, RSI status, and sessions under Account.
• Data Removal: Clear global RSI verification with Discord /remove_verification or Account → Revoke RSI / global verification. Local verify: /remove_local_verification or Members tab. Revoke portal sessions under Account → Sessions. Account deletion: contact support. Removing the bot from a server deletes that server’s configuration data.

6. Children’s Privacy

NAVCOM AI is not intended for use by children under 13 years of age. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately to have it removed.

7. Changes to This Policy

We may update this Privacy Policy as NAVCOM AI evolves. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

8. Contact Us

If you have questions about this Privacy Policy or NAVCOM AI’s data practices, please reach out to us via Discord. You can contact us by joining the official NAVCOM AI support server, accessible through the invite link provided when you add the bot to your server.