Privacy Policy

What we collect

From Discord sign-in: your Discord user ID, username, display name and avatar, and the list of servers you belong to with your permissions in each. We use the server list only to show servers you can manage and to check that you may change their settings. We do not store the full list.

For servers that use PullCall: the server ID, name and icon, its settings, plan and billing status, and usage counts (number of answers, voice seconds, AI tokens and cost).

Consent records: which document version you accepted, when, a fingerprint of the document text, and the IP address and browser the request came from.

If you choose to add one: the character profile you type in (region, realm, character name, class, spec, level, game version and goals).

Billing: Stripe handles card details. We store only the Stripe customer and subscription IDs. Discord handles in-app purchases and tells us which servers are entitled.

Voice

PullCall only listens to people who have opted in to voice for that server. Audio from anyone else is discarded before it is decrypted.

Opting in to voice requires you to confirm again that you are 18 or older. Server admins can also limit PullCall to age-restricted voice channels and to members with a specific role.

Audio from opted-in users is streamed to our AI provider to produce a spoken answer, then discarded. We never store voice recordings. Transcripts, if any, are kept only for the request and a short debugging window of up to 7 days.

You can turn voice off at any time on your account page.

Analytics, cookies and error reports

Google Analytics 4 runs on our website only if you accept analytics cookies in the banner. Until then no analytics script is loaded and no analytics cookie is set (Google Consent Mode v2, everything denied by default). It records pages visited and a few product steps (for example clicking Add to Discord, signing in, starting a trial or a checkout), with an anonymous cookie ID, your browser and an approximate location derived from your IP address. We do not send your Discord ID, name or any content to Google Analytics. You can change your choice at any time from the Cookies link in the footer.

The bot and the website record product statistics on our own servers: counts and timings such as voice session length, number of answers, which tool answered, response latency and errors, tied only to internal server IDs. They never include what anyone said or typed.

If an error happens we may send a technical error report (error message, stack trace, app version) to our error-tracking provider, Sentry. Reports are scrubbed of cookies, authorization headers, IP addresses, user names and message content before they leave our servers.

We use Google Search Console to see how the website appears in Google Search. It uses aggregated search data and no data about you.

Who processes your data

Google (Gemini API, paid tier) generates text and voice answers. On the paid tier Google does not use prompts or responses to improve its products. Google keeps them for up to 55 days to detect abuse.

Amazon Web Services hosts our servers and database and delivers the website (CloudFront). Stripe processes web payments. Discord provides sign-in, the voice channel and in-app purchases. Google Analytics (only with your consent) and Sentry (scrubbed error reports) help us run the website.

We do not sell your data, share it with advertisers or data brokers, or use message content or voice to train AI models.

Discord data

We use data from Discord only to provide PullCall's features, as Discord's Developer Policy requires. We do not build profiles of users across servers.

When PullCall is removed from a server, we delete that server's data within 30 days.

Retention and deletion

Usage counts are kept for billing and abuse prevention for as long as the server uses PullCall, plus the period the law requires for financial records.

You can ask us to delete your data from your account page. We stop voice processing for you immediately and complete deletion within 30 days. We keep consent records and billing records where the law requires us to.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or CCPA) you may have the right to access, correct, delete or export your data, and to object to processing. Contact scott@scottsdevelopment.com.

Our legal bases are: performing our contract with you (the service and billing) and your consent (voice processing and the optional character profile).

Security

Data is encrypted in transit and at rest. Secrets are kept in a managed secrets store.

Contact

Scotts Development LLC, scott@scottsdevelopment.com.