Privacy policy

Sunatia, the service publisher, is the controller of data collected on sunatia.com and through the Sunatia Discord bot. See the legal notice for the publisher’s identity. You can exercise your rights or ask a question through the dashboard’s support module.

Account data (Discord sign-in). Sign-in takes place exclusively through Discord OAuth2. Sunatia receives your Discord ID, username, avatar and the email address associated with your account. Sunatia never sees your Discord password.

Server data. For servers where the bot is installed: module settings — moderation, XP, levels, tickets, suggestions, giveaways and welcome messages —, moderation and audit logs, activity statistics, RPG system data and the Sunas virtual currency.

Technical data. Sign-in sessions and cookies, interface preferences — theme, language and sidebar layout — and the support tickets you open.

Payments. Stripe processes Premium subscriptions. Your banking details are entered directly with Stripe and never pass through Sunatia’s servers. Sunatia retains your subscription status and, to prevent repeated use of the free trial, a pseudonymous HMAC fingerprint of the IP address.

AI assistant. When you use the SunatIA chatbot on the website or the /rpg ia command on Discord, your message and any attached images are sent to the Google Gemini API to generate a response. Do not submit sensitive information.

• Providing the service — authentication, server configuration and synchronization between the bot and dashboard — on the basis of contract performance.
• Managing Premium subscriptions and billing on the basis of contract performance and legal obligations.
• Securing the service — audit logs, abuse detection and suspended-account management — on the basis of legitimate interests.
• Remembering your preferences, including theme and language, on the basis of legitimate interests or consent, depending on the circumstances.

• OVH SAS (France) — application server hosting.
• MongoDB, Inc. — production database hosting through MongoDB Atlas.
• Stripe — payment processing and subscription management.
• Google (Gemini API) — generating AI assistant responses from your messages.
• Discord Inc. — OAuth2 authentication and operation of the bot on servers you can access.

No data is sold or shared with third parties for advertising.

Sunatia uses strictly necessary cookies — sign-in session and security — and preference cookies. You can review and manage your choices at any time from the Cookies page in your user area (/dashboard/cookies). No advertising cookies are set.

• Account data and preferences: while your account remains active.
• Server settings and data: while the bot remains on the relevant server.
• Audit and moderation logs: for as long as necessary to secure the service.
• Billing data: for the statutory accounting and tax retention periods.
• Free-trial anti-abuse fingerprint: while the trial programme is available, then deleted when it ends.

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have rights of access, rectification, erasure, restriction, objection and portability concerning your personal data.

To exercise these rights, open a request through the dashboard’s support module. If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the CNIL (www.cnil.fr), the French supervisory authority.

Communications with the website are encrypted using HTTPS. Dashboard access is based on your actual Discord permissions, and additional security checks, such as a sign-in challenge, may protect your account. The test (beta) and production environments are strictly separated.