Privacy Policy

This Privacy Policy explains how SR Tools ("we," "us," or "our") collects, uses, stores, and shares information when you use TornBot(the "Bot"), our website dashboard, and related services (collectively, the "Service").

This policy applies to information we process as a service provider for Discord communities using the Bot, and to information we process when you sign in to our website with Discord.

1. Who we are

Service: TornBot
Operator: SR Tools
Contact: [email protected]

TornBot is an independent third-party application. We are not affiliated with Discord Inc. or the operators of Torn City.

2. Information we collect

Depending on how you use the Service, we may collect the following categories of data.

2.1 Discord information

• Discord user ID, username, display name, and avatar
• Discord server (guild) IDs and server names
• Channel IDs, role IDs, and configuration choices made by server administrators
• Discord permissions relevant to bot commands and dashboard access
• OAuth tokens and session data when you sign in to our website dashboard (scoped to identify and guilds)
• Messages or interaction metadata needed for bot commands, logs, and moderation features

2.2 Torn City information

• Torn player ID, name, and account-linking status
• Faction ID, company ID, and related membership or position data
• Torn City API keys that you voluntarily submit, including access level and whether you enabled optional TornStats usage
• Game data retrieved through the Torn API or TornStats on your or your faction's behalf, such as attacks, armoury activity, activity logs, drug records, bookie logs, banking records, chain data, crime data, company data, items, and other logs supported by enabled features

2.3 Website and technical information

• Session cookies used to keep you signed in to the dashboard
• Basic request logs, timestamps, and security-related events
• Configuration changes made through the dashboard or bot setup flows

3. How we collect information

• Directly from you — for example when you run verification or pairing commands, submit an API key, configure a server, or sign in with Discord
• From Discord — when the Bot is present in a server or when you authorize our website OAuth application
• From Torn City and TornStats APIs — when enabled features request game data using keys or permissions you or your faction have provided
• From server administrators — when they configure channels, roles, factions, and feature settings for a Discord server

4. How we use information

We use collected information to:

• Provide, operate, maintain, and improve the Service
• Link Discord accounts to Torn City accounts when you request verification
• Fetch and display game logs, stats, alerts, and faction tools you or admins enable
• Authenticate dashboard users and enforce server-management permissions
• Store server and faction configuration
• Prevent abuse, troubleshoot errors, and protect the security of the Service
• Comply with legal obligations and respond to lawful requests

We do not sell your personal information. We do not use Discord data to send unsolicited marketing messages.

5. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on:

• Performance of a contract or steps at your request — to provide features you or your server administrators enable
• Legitimate interests — to secure, operate, and improve the Service, prevent abuse, and support faction-management tools, balanced against your rights
• Consent — where required, such as for optional API key submission or website sign-in through Discord OAuth
• Legal obligation — where we must retain or disclose information under applicable law

6. How we share information

We may share information only in these circumstances:

• Service providers and infrastructure — hosting, database, and operational providers that process data on our behalf under appropriate safeguards
• Discord — as necessary for bot operation and OAuth sign-in, subject to Discord's policies
• Torn City and TornStats — when the Service makes API requests you or your administrators have authorized
• Server administrators — faction and server configuration data may be visible to admins who manage the Bot in a Discord server
• Legal and safety — if required by law, court order, or to protect rights, safety, and security
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this Privacy Policy

7. Data retention

We keep information only as long as reasonably necessary to provide the Service and for legitimate operational, security, and legal purposes.

• Account-linking, API key, and faction data are generally retained while the Bot remains in a server, while your account remains linked, or while a feature you enabled still needs the data
• Historical game logs and analytics may be retained after initial collection so factions can review past activity, unless deletion is requested and technically feasible
• Dashboard session data expires according to our session settings or when you sign out
• We may retain limited records longer where required for security, dispute resolution, or legal compliance

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information we process. No method of transmission or storage is completely secure. API keys are sensitive credentials; you should rotate them if you believe they have been exposed.

9. International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Your choices and rights

Depending on where you live, you may have rights to:

• Access, correct, or delete certain personal information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request portability of information you provided
• Lodge a complaint with a supervisory authority

You can also take practical steps without contacting us:

• Remove the Bot from a Discord server where you are an administrator
• Leave a Discord server that uses the Bot
• Delete or rotate Torn API keys in Torn City
• Sign out of the website dashboard

To make a privacy request, email [email protected] with enough detail for us to verify your identity and locate relevant records. We will respond within a reasonable time and as required by applicable law.

11. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes may also be communicated through the website or Bot where appropriate.

13. Related terms

Use of the Service is also governed by our Terms of Service.