Privacy — Creator Toolkit Discord bot
Last updated 2026-10-21. Operated by ReadyStack (getreadystack.com).
What the bot receives from Discord
- Gateway intents: Guilds, Guild Messages and Guild Message Reactions only. No Message Content, no Server Members, no Presence.
- For each message or reaction in a server where the bot is added: the author's user ID, username, display name, server nickname and role IDs. Message text is not available to the bot and is never stored.
- Slash command inputs from members with the Manage Server permission.
What the bot stores, per server
- Settings: report channel, language, weekday and hour, paid role, quiet-day threshold, manual Whop↔Discord links.
- Activity counts: number of messages and reactions per member per UTC day, kept for 70 days, plus the names above for matching.
- If the server owner connects Whop: the Whop company ID and the API key, encrypted (AES-256-GCM). Whop member and payment data is read when a report is made and is not stored, except a hashed state per membership used for the daily change note (Pro).
- If Pro is used: the licence key, encrypted, re-checked once a day.
- CSV files sent with
/toolkit uploadare read once for the reply and not stored.
What it does not do
- It never sends direct messages to members. It never contacts members outside Discord.
- It does not sell, share or give data to anyone, and does not use it to train AI models. No AI service processes your data.
Where and how long
Data is stored on ReadyStack's server in the United States (DigitalOcean, New York). /toolkit disconnect deletes the keys; /toolkit disconnect wipe:True deletes everything for the server; removing the bot from a server deletes that server's data automatically.
Contact
Questions or deletion requests: through the support chat of the ReadyStack Whop store or the contact on getreadystack.com.