Last updated: March 31, 2025
Kordis ("we", "our", "us") operates the website kordis.app and the dashboard at dash.kordis.app (the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and how you can exercise your rights.
By using the Service, you agree to the practices described in this Policy. If you do not agree, please stop using the Service.
Kordis is a Discord server management platform that lets communities use an AI assistant, a moderation bot, economy systems, ticketing, music playback, and more — all from a single web dashboard. For questions about this Policy, contact us at support@kordis.app.
When you sign in with Discord we receive and store:
guilds OAuth scope, used to let you connect servers to Kordis We request the following Discord OAuth scopes: identify, email, and guilds.
When you connect a Discord server to Kordis, we store:
When you use the Kordis AI assistant, your messages and the assistant's replies are stored in our database so you can review your conversation history. Your connected server names and IDs may be included in the context sent to the AI model to provide relevant responses.
Subscription and payment processing is handled entirely by Polar.sh. We do not store raw card numbers or full payment details. We do store: your Polar customer ID, your active subscription ID, your current plan tier, and the subscription's billing interval and expiry date.
Each user may be assigned a unique referral code. If you join Kordis through a referral link, we record which user referred you and grant you a one-month Pro trial. The referrer can see your display name, username, avatar, current plan, and the date you joined.
We automatically collect:
| Purpose | Legal basis |
|---|---|
| Authenticate you and maintain your session | Contract performance |
| Power the AI assistant and chat history | Contract performance |
| Connect and manage your Discord servers | Contract performance |
| Process subscription payments via Polar | Contract performance |
| Enforce plan limits (AI quota, server count, features) | Contract performance |
| Operate the referral program | Legitimate interest |
| Detect abuse, fraud, and security threats | Legitimate interest |
| Send transactional emails (e.g., account alerts) | Contract performance |
| Improve the Service through aggregate analytics | Legitimate interest |
| Comply with legal obligations | Legal obligation |
We do not sell your personal data. We do not use your data for advertising profiling.
We share data with the following sub-processors only to the extent necessary for the Service:
| Service | Purpose | Data shared |
|---|---|---|
| Discord (discord.com) | OAuth authentication, bot operations | Your Discord ID, tokens; guild data |
| Google Gemini (Google LLC) | AI assistant inference | Your chat messages and server context |
| Perplexity AI | Web-search tool inside the AI assistant (Pro/Ultra plans) | Search query derived from your message |
| Polar.sh | Subscription billing and payment processing | Email, billing details you provide to Polar |
| Vercel | Hosting & edge delivery; cookieless analytics on kordis.app | Anonymised page-view metrics |
Each third party is bound by its own privacy policy and data processing agreements. We do not control their practices beyond what is governed by those agreements.
Your data is stored in a PostgreSQL database and Redis cache, hosted on servers within the European Union / United States (depending on deployment region). We use encryption in transit (TLS) for all connections. Discord OAuth tokens are stored in the database and are only used to communicate with Discord's API on your behalf.
Access to production data is restricted to authorised team members. Despite our safeguards, no method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@kordis.app.
Depending on your jurisdiction, you may have the following rights:
To exercise any of these rights, email support@kordis.app. We will respond within 30 days. We may ask you to verify your identity before processing your request.
We use:
We do not use any advertising or tracking cookies.
The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. Discord itself requires users to be at least 13 years old. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
If you are located outside the country where our servers are hosted, your data may be transferred internationally. Where required, such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes your acceptance of the updated Policy.
For privacy-related inquiries, contact:
Kordis Support
Email: support@kordis.app
Website: kordis.app
© 2026 Kordis. All rights reserved.