Privacy Policy
Lestapenna ("the Bot", "we") is a Discord application that records tabletop role-playing sessions in voice channels, transcribes them, and generates AI-powered narrative summaries. This policy explains what data we process and why.
1. Data we collect
- Voice recordings — captured per user, only while a recording session is explicitly active (started by a server member with the dedicated command). The Bot never records outside an active session.
- Transcriptions and derived content — text transcripts of the recordings and AI-generated summaries, character sheets, and campaign notes.
- Discord identifiers — server (guild) IDs, channel IDs, user IDs, and display names, used to organize campaigns and attribute speech.
- Email addresses — only if voluntarily provided to receive session recaps.
- Billing data — subscription and payment status. Payments are processed by Stripe; we never see or store card numbers.
- Usage metrics — number of sessions, audio minutes, and processing costs per server, used to enforce plan quotas.
2. Consent for voice recording
Recording is started manually and announced by the Bot's presence in the voice channel. Server administrators are responsible for informing participants that sessions are recorded. Users who do not wish to be recorded should not join a voice channel while a session is active.
3. How data is processed
Audio is transcribed with speech-to-text software (Whisper) on our own infrastructure. Transcripts are corrected and summarized using third-party AI providers (such as OpenAI, Google, or Anthropic), which receive transcript text but not raw audio. Embeddings for the campaign knowledge base are computed on our own infrastructure.
4. Storage and retention
- Data is stored on Oracle Cloud Infrastructure in the EU (Milan region).
- Raw audio recordings are retained temporarily for processing and backup and are periodically deleted by automated cleanup once a mixed session archive exists or storage thresholds are reached.
- Transcripts, summaries, and campaign data are retained for as long as the server uses the Bot, so the campaign archive keeps working.
5. Sharing
We do not sell or share personal data with third parties beyond the processors listed above (Oracle Cloud, Stripe, and the AI providers used for text processing) and Discord itself.
6. Your rights (GDPR)
You may request access to, rectification of, or deletion of your personal data. Server administrators can delete campaign data directly via Bot commands; removing the Bot from a server stops all collection. For any request, contact us at the address below.
7. Contact
Data controller: the operator of Lestapenna — gabligetta@gmail.com