Privacy and data
Blify Mod is, by necessity, a service that reads chat messages. This page is the plain-English version of what gets sent where, what's stored, and for how long. The legal version lives at /privacy.
#What gets sent to AI providers
When the bot scans a message, the message content is sent to:
- OpenAI —
gpt-5-nanois the fast pre-screen on every tier;gpt-5-miniis used as a judgment fallback. - Fireworks AI (DeepSeek V4 Flash) — the open-weight DeepSeek V4 Flash model, hosted on Fireworks' US-based infrastructure. Used as the primary judge on the Free tier, as the screening fallback on every tier, and as a judgment fallback on Pro/Premium. Data goes to Fireworks, never to DeepSeek's own servers.
- Anthropic —
Claude Sonnet 4.6is the primary judge on Pro/Premium tiers;Claude Haiku 4.5is used as a screening/judgment fallback.
The exact order each step tries providers (it stops at the first that succeeds):
- Screening (all tiers): gpt-5-nano → DeepSeek V4 Flash → Claude Haiku 4.5
- Free-tier judgment: DeepSeek V4 Flash → gpt-5-mini → Claude Haiku 4.5
- Pro/Premium judgment: Claude Sonnet 4.6 → gpt-5-mini → DeepSeek V4 Flash
Each provider is sent only the content being scanned and a small slice of channel context needed to make the decision (typically 8–20 messages). That context slice can include other bots' messages, since the model uses them to understand who a user is replying to or reacting to — but only humans are ever moderated. Messages from non-moderated channels are never sent anywhere.
Important: None of these providers — OpenAI, Anthropic, or Fireworks AI — use Blify Mod's API traffic to train their models. Blify Mod has not opted into any training program with any provider. The DeepSeek model used on the Free tier runs on Fireworks' US-based servers under Fireworks' no-training terms; no data is ever sent to DeepSeek or any DeepSeek-operated infrastructure.
#What we store ourselves
Blify Mod uses a MongoDB database. Per server, we store:
- The bot's configuration: enabled/disabled, moderated channel IDs, log channel ID, custom rules, immune roles/users, strictness, dry-run flag, appeal link.
- A moderation history for each user who has been actioned: action type, severity, rule, reason, channel ID, the first 500 characters of the offending message, the timestamp, and whether it was reversed.
- A rolling per-day total of AI API cost incurred for this server (in USD), used to enforce the per-tier daily moderation throughput cap. These records contain no message content — only the guild ID, the date, and the running cost total. Auto-purged after 30 days.
Authorized members of the Blify Mod operations team can access this stored configuration (including your custom rules) to investigate abuse reports or rule setups that may break Discord's Terms of Service or Community Guidelines.
Per user (across all servers), we store:
- Vote credits, daily streak, and last-vote timestamp (only for users who have ever voted).
- Active Pro/Premium role redemptions, with their expiry timestamps.
- Pro/Premium claim records (which servers your subscription is currently active on).
Web sessions for the dashboard are stored in MongoDB with a 7-day TTL.
We do not store:
- Message content from non-moderated channels.
- Message content from moderated channels that was scanned and found clean.
- Anything from DMs.
#Retention
- Server config is kept while the bot is in your server. When the bot leaves a server, all of that server's config and moderation history is deleted automatically.
- User credits and Pro records are kept for as long as the account exists.
- Web sessions expire after 7 days of inactivity.
#Telling your members
Discord requires bots that send messages to AI services to disclose this to users. We recommend pinning a note like:
This server uses Blify Mod for AI moderation. Messages in
#general,#off-topic, and#helpmay be sent to OpenAI's, Anthropic's, and Fireworks AI's APIs for evaluation. None of these providers train on this data. See https://blifymod.com/privacy for details.
The bot's welcome DM (sent to whoever invites it) includes a similar note you can copy.
#Deleting your data
- Server data: kick the bot. Everything for that server is deleted within seconds of the GuildDelete event firing.
- Personal data (credits, Pro records, dashboard sessions): open a ticket in the support server — owner deletes within 7 days.
- Moderation history about you, in someone else's server: that's the server owner's data, not yours, since they configured the bot to log it. Ask the server's staff.