Privacy policy

Who is responsible

Hushera is run by its developer, called “we” on this page. Send privacy questions and requests to hello@hushera.app.

What we store

• Servers, settings and panels. The server id, name and icon, the plan, staff role ids, the log channel id, the AI settings and each panel’s text and topics.
• Tickets. The opener’s Discord user id and tag, who claimed and closed it, subject, description, answers to the topic’s questions, status, priority, AI summary, close reason, rating and timestamps.
• Ticket messages. Messages sent in an open ticket: the author’s id, tag and avatar link, the text and links to attachments. Files stay on Discord. Hushera uses the Message Content intent but only stores messages from open tickets. A message deleted in Discord stays in the transcript.
• Knowledge base. Text you paste, split into passages for search.
• Usage, audit log and billing. AI action counts per month, a record of each AI action with its type, model and token counts, a log of ticket and billing events with who did them, and the Stripe customer and subscription ids. Stripe handles card details. We never see them.
• Your own Gemini key, if you add one, encrypted with AES-256-GCM.
• Dashboard sign-in. Your Discord user id, username, avatar link and email, the Discord tokens used to list your servers (encrypted), and sessions with the IP address and user agent they started from.

Why we store it

To run tickets, to show a transcript to the person who opened the ticket and to members with the Manage Server permission, to run the AI features a server turns on, to show the dashboard and bill paid plans, and to fix faults. We do not sell personal data or use it for advertising.

What the AI sees

When an AI feature runs, Hushera sends text to the Google Gemini API:

• Triage sends the ticket’s topic, subject, description and answers.
• A draft reply sends the subject, the description and answers, up to the last 40 messages with their authors’ tags, up to 3 knowledge base passages and your tone guide.
• A knowledge base answer sends the subject, the description and answers, up to 6 passages and your tone guide.
• A close summary sends the subject, the description and up to the last 300 messages with their authors’ tags.

Only your own server’s passages are included. We do not train models on message content. Requests on our key use a paid Gemini API plan, and Google’s terms for paid plans say it does not use prompts or responses to improve its products. With your own key, the terms of the Google account that owns it apply, and on the free tier Google may use the content.

How long we keep it

• Free plan transcripts. 90 days after a ticket closes, the transcript stops loading and, within the next 6 hours, its messages, the opening request, the AI summary and the close reason are deleted. The ticket record stays for history and counts.
• Pro and Team transcripts. Kept while the plan is active. After a move to Free, the 90-day rule applies.
• When the bot is removed. 30 days after the bot leaves a server on Free, we delete all of that server’s data within the next 6 hours. Adding the bot back before then keeps it.
• Paid servers that removed the bot. We keep the data while the plan is paid. When the plan ends, the server moves to Free and the 30 days still count from the day the bot left. If that day is more than 30 days back, the data is deleted within 6 hours.
• AI action records. Deleted 90 days after the action.
• Dashboard accounts. Kept until you delete your account. Stripe keeps invoices as long as tax law requires.

Deleting data

• Anyone with Manage Server can delete the transcript of a closed ticket from its transcript page. The messages, request, AI summary and close reason go. The ticket record stays.
• While the bot is in the server, the server owner can delete all server data from the dashboard in Settings. This deletes tickets, transcripts, panels, the knowledge base, settings, the server’s own Gemini key, past AI usage and the audit log. Hushera keeps the server name and icon, the plan, the Stripe ids, billing events and this month’s AI action count and records, so billing and the monthly limit keep working.
• Removing a knowledge source or a Gemini key in the dashboard deletes it at once.
• On the Account page you can delete your account: your sign-in, every session and the Discord tokens. Tickets you opened stay with their server, which decides about them.

For anything else, email hello@hushera.app with the server id or your Discord user id. We answer within 30 days and may ask you to confirm from that Discord account.

Who processes data for us

• Google (Gemini API) runs the AI features.
• Stripe takes payments for paid plans.
• Vercel hosts the website and dashboard.
• Railway hosts the bot, the API and the database.

We use no analytics or advertising service. Discord hosts the messages and attachments themselves under its own privacy policy. Our providers may process data in the United States and other countries.

Security

Traffic is served over HTTPS and the database only accepts encrypted connections. The dashboard calls the API from the server with signed requests, so browsers cannot reach it.

Children and changes

Hushera is not directed at anyone under Discord’s minimum age. If this policy changes what we store or who we share it with, we will update the date at the top first. The terms of service cover the rest of the agreement.