🛡️ NXI System
Last Updated: October 14, 2026

Privacy Policy

How NXI collects, handles, protects, and retains your data across our Discord bot and web services.

1. Overview & Principles

NXI is designed with privacy-first and data-minimization principles. We only collect the minimal technical metadata necessary to operate verification gates, execute automated moderation, and track virtual multi-chain economy balances.

We do NOT sell, rent, or monetize your personal data.

2. Information We Collect

Depending on which features you interact with, we collect:

3. What We Do NOT Collect or Store

To minimize data exposure and protect user privacy, our systems enforce the following boundaries:

4. How We Use Your Data

Data collected is used exclusively for:

Anti-Raid Data

When Anti-Raid is enabled by a server, NXI checks relevant Discord audit-log events for configured trusted bots and rapid server-management activity. For burst detection, NXI temporarily keeps the guild ID, executor ID, action type, and event timestamps in process memory for a 10-second window; these counters are not written to NXI's persistent account database. Discord audit logs remain subject to Discord's own retention and policies.

Depending on the event, the bot may attempt to undo recent bans or resource changes, remove manageable roles from a trusted bot, kick an unauthorized bot with staff permissions, and post a warning to the configured security channel. The warning can identify the bot or executor and summarize the detection. Operational logs may include server names, executor tags, action reasons, and enforcement outcomes. Server administrators control whether to enable the feature and are responsible for appropriate member notices and reviewing automated actions. Anti-Raid is a security aid, not a guarantee that every raid will be detected or prevented.

5. Data Storage & Security

Data is stored in access-controlled service infrastructure and protected with reasonable technical and organizational safeguards. Sessions use HTTP-only cookies and expire after 24 hours; public web traffic is served over HTTPS. Rate-limiting and debouncing mechanisms help prevent API abuse and safeguard data integrity.

Retention periods

  • For an active account, stored account data may be retained for up to 40 years from the start of service where needed for security, accounting, legal, abuse-prevention, or operational purposes.
  • Web sessions expire after 24 hours. Verification link tokens expire after 15 minutes or when consumed.
  • During an active account, verification security records may contain the Discord User ID and source IP for security auditing and abuse prevention. After account deletion, those identifiers are kept in a restricted record and deleted no later than 10 years after deletion.
  • Discord identity and profile data, public blockchain addresses, and related balances are targeted for deletion 30 days after a verified deletion request, subject to security, accounting, transaction-record, or legal-hold obligations. A completed deletion remains flagged for up to 2 years for security and audit purposes.
  • Other verification security records and enforcement metadata may be retained as needed for security, abuse prevention, appeals, incident response, and legal compliance, then deleted or anonymized when no longer needed. NXI does not retain safety scan inputs or scores.

Ad records and provider credentials

  • The first verified ad completion, provider, and completion time are kept while needed to maintain the Supporter Title.
  • Optional counts of later attempts and completions are kept only with your consent. Turning consent off clears those counts but preserves the first completion record for the title.
  • Ad records are written to service storage and, when GitHub sync is configured, the current data file is synced to the configured repository.
  • Provider API credentials configured in the developer console are stored server-side. Saved system-config credentials are excluded from automated GitHub config sync.

Backups

  • Premium backup cycles are retained for up to 7 days and Premium+ cycles for up to 14 days. Scheduled cleanup may be delayed by outages, provider limits, storage failures, or other operational issues.
  • Backup artifacts may be stored in Redis or local files depending on deployment configuration. Storage warnings may appear before configured thresholds are reached.
  • When Premium access ends, new backup collection stops immediately. Existing copies remain subject to the applicable retention period and cleanup process where technically possible.
  • Deletion requests include removal from active systems and scheduled backup copies. Some third-party providers may retain disaster-recovery copies for a limited period under their own policies.

6. Third-Party Integrations

The Service interacts with trusted third-party APIs to deliver its functionality:

Advertising providers

  • Linkvertise: Processes ad visits under its own terms and privacy policy. NXI sends its verification API the returned completion hash and a server-side publisher credential.
  • LootLabs (Lootlinks): Receives content-locker requests with a title, task settings, and a return URL containing temporary ad-flow state. It does not provide NXI with a verifiable completion receipt, so returning to NXI is not counted.
  • Work.ink: NXI uses its Link Override API to create a per-attempt destination with temporary callback state. NXI verifies the returned token through its account-authenticated API and requests one-time token deletion. The Work.ink API key is sent only from NXI's server and is not placed in your browser.
  • These providers may process technical information about your visit, such as IP address, device, or browser data, under their own terms and privacy policies. Temporary callback state and completion tokens are not stored in your persistent ad record.

Other integrations

  • Discord Inc.: For Gateway events, OAuth2 authentication, and role assignments.
  • Blockchain Infrastructure Providers: For querying on-chain deposits and broadcasting approved transactions. Only the public blockchain information and transaction data needed for those operations is shared.
  • FalixNodes API: For remote Minecraft starter management (if configured).
  • Stripe: For Premium and Premium+ checkout, recurring subscription billing, payment status, and subscription lifecycle events. NXI does not receive or store full card numbers or payment security codes.
  • External Content Safety Provider: For image safety evaluation, a public Discord CDN URL may be submitted to an authorized content-safety provider for AI-based classification. This occurs before an image is eligible for Premium+ backup storage. No raw image data is stored by NXI during scanning. The provider processes the publicly accessible URL under its own terms and privacy policy and returns a classification result. NXI does not retain that result beyond the in-memory enforcement decision. AI-based content analysis may produce false positives or false negatives; detections should be independently verified by server staff before final moderation action.

7. Your Rights & Data Deletion

Depending on your location and the law that applies, you may have rights to request access to, correction of, portability of, or deletion of personal data, or to object to or restrict certain processing. Examples of potentially applicable frameworks include the EU General Data Protection Regulation (GDPR), the UK GDPR and Data Protection Act 2018, and the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), as well as other regional or state privacy laws. These laws do not apply to every user or every processing activity, and their rights and exceptions differ. This policy is not a representation that NXI is certified or compliant with every listed law.

Where GDPR or UK GDPR applies, processing may be based on providing requested services, legitimate interests in protecting users and servers, or legal obligations, as applicable to the particular processing. Where consent is legally required, we will seek it before the relevant optional processing. A server administrator's decision to use NXI is not consent on behalf of individual members. Where CCPA/CPRA applies, eligible California residents may exercise applicable access, correction, deletion, and opt-out rights, subject to statutory exceptions.

Ads and supporter data

  • Verified completions: Linkvertise and Work.ink completions are verified with their provider APIs. The first verified completion, provider, and time are recorded to grant and maintain the Supporter Title. LootLabs (Lootlinks) returns are not verifiable and are not counted.
  • Optional statistics: Supporters may consent to saving counts of later ad attempts and verified completions. Turning consent off clears those optional counts but leaves the first completion record needed for the title.
  • Temporary data: Ad-flow state is held in your session. Completion tokens are sent to the relevant provider for verification and requested to be deleted after use where supported.
  • Deletion and synced copies: When account deletion is processed, NXI removes the active individual ad record and title and queues an updated data file for GitHub sync when configured. Earlier versions may remain in the configured repository's commit history; copies held by third parties follow their own retention and deletion practices and cannot be erased by NXI.

The dashboard's Delete all NXI account data control can be used for an authenticated self-service deletion request. You may also submit a privacy request through the NXI support channel associated with the server where you used the Service, or through the designated NXI support server, and include your Discord User ID and the requested action. Do not include passwords, private keys, seed phrases, or unnecessary sensitive information. We will verify ownership and respond within the period required by applicable law; where no specific period applies, we generally aim to complete verified requests within 30 days.

CSSecurity is enabled as a non-optional safety baseline and cannot be disabled from the dashboard or commands. Processing may be unavailable temporarily when the authorized safety provider, quota, or required bot enforcement permissions are unavailable. You may raise a privacy concern or complain to the data protection or privacy regulator with jurisdiction over you, where applicable.

9. Account Data Deletion

Schedule and cancellation

  • Confirmed dashboard deletion requests are scheduled for processing 30 days later. During that period, the account and its data remain available.
  • Logging back into NXI automatically cancels a pending request unless a legal hold applies.
  • When processed, deletion voids all NXI grants and benefits, including Premium/Premium+ access, credits, unused membership time, virtual balances, wallet access and metadata, backup access, saved appeals, and dashboard access.
  • Deletion removes the NXI profile, bot enforcement and verification records, anti-dox review records, and owned automatic backups where NXI can control them. Completion remains flagged for up to 2 years for security and audit purposes.

Legal holds

  • If an authorized government body legally requires NXI to preserve account data, NXI may place the account under legal hold before or after deletion. The dashboard will notify the user; NXI cannot deny or remove a required hold.
  • If a hold is formally released, a developer may resume a paused deletion. The original 30-day deadline remains and is not restarted.

Records and services outside deletion

  • Discord User ID and collected source IP addresses remain in a restricted record for no more than 10 years. Stripe subscription and payment-status records are retained for billing and audit purposes and marked as deleted; NXI does not store full card numbers or security codes.
  • Deletion does not remove blockchain transactions or public addresses, immutable or historical accounting ledgers, confirmed safety-incident archives, records belonging to other users or servers, or copies held by third parties under their own policies.
  • Cancel any active Premium or Premium+ subscription before deleting your account. Deletion does not stop recurring payments, and NXI may be unable to cancel the subscription or issue refunds afterward.
  • NXI may retain limited information where necessary for legal compliance, fraud prevention, security, disputes, accounting, or legal claims.

10. Children’s Privacy

NXI is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Discord's own minimum-age rules apply to every user. If you believe a child under 13 has provided personal data to NXI, submit a request through the NXI support channel associated with the relevant server so we can investigate and delete it where appropriate.

Enforcement limitations: NXI may be limited in its ability to take complete or immediate action when a report involves Discord, an external service, unavailable APIs, missing permissions, rate limits, or another third-party system. Where appropriate, NXI may direct the user or server staff to Discord or the relevant third-party provider's support, reporting, or safety process. NXI cannot guarantee that another provider will investigate, remove content, suspend an account, or take any requested action.

11. Hosting, Payments & Security Incidents

The web service uses third-party cloud hosting and infrastructure providers. NXI does not use a separate card-payment processor; the economy records virtual balances and blockchain transactions, while blockchain infrastructure providers process network queries and broadcasts.

If we discover unauthorized access to Discord API data or a security incident affecting your data, we will investigate, take containment measures, and provide notices to Discord and affected users when required by law or applicable platform rules.

12. Changes to This Policy

We may update this policy when the Service, providers, or legal requirements change. We will update the date above and provide notice through the Service or the bot's designated support channels for material changes. Continued use after the effective date means the updated policy applies to future processing.