Privacy Policy

Last updated: April 2026

1. Data Controller

BotNinja is operated by Omika-AI ApS (CVR: 45651258), Gammel Koge Landevej 119, 2500 Valby, Denmark. For privacy inquiries, contact [email protected].

2. Information We Collect

When you use BotNinja, we collect:

  • Discord account data: Your Discord username, user ID, email address, and avatar — provided when you sign in via Discord OAuth.
  • Bot data: The bots you create, their code, configuration, secrets (stored encrypted), and chat history with the AI assistant.
  • Usage data: Pages visited, features used, credit consumption, browser type, device information, and IP address.
  • Payment data: Processed by Stripe. We do not store credit card numbers. We store Stripe customer IDs and transaction references.
  • Cookies: Essential cookies for authentication and session management. Optional analytics cookies (PostHog) with your consent.

3. How We Use Your Data

  • Providing and improving the BotNinja service
  • Processing payments and managing subscriptions
  • Sending transactional emails (credit alerts, discount offers, account notifications)
  • Sending marketing emails and newsletters (only with your explicit consent)
  • Analyzing usage patterns to improve the product
  • Preventing abuse and enforcing our Terms of Service

4. AI and Your Data

Your conversations with the AI assistant and the code it generates are stored to provide the service. We use third-party AI providers (Anthropic, OpenRouter) to process your requests. Your bot code and conversation history may be sent to these providers during active sessions. We do not use your data to train AI models.

5. Data Sharing

We do not sell your personal data. We share data with third parties only as necessary to operate the service: Stripe (payments), Discord (authentication and bot deployment), Anthropic/OpenRouter (AI processing), PostHog (analytics), and Hetzner/Lelantos (hosting infrastructure). All partners are bound by confidentiality obligations.

6. Bot Secrets and Encryption

API keys and tokens you store as "secrets" in BotNinja are encrypted at rest using AES-256 encryption. They are only decrypted when needed to run your bot in the sandbox environment. The AI assistant cannot read your encrypted secrets.

7. Data Retention

Your data is retained as long as your account is active. If you delete your account, your data (including bots, code, chat history, and secrets) will be permanently deleted within 30 days. Usage records may be retained in anonymized form for analytics.

8. Your Rights (GDPR)

Under EU/EEA data protection law, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data ("right to be forgotten")
  • Restrict processing of your data
  • Port your data to another service
  • Object to processing based on legitimate interests
  • Withdraw consent for marketing communications at any time

To exercise your rights, contact [email protected]. You also have the right to lodge a complaint with Denmark's data protection authority (Datatilsynet).

9. Contact

For privacy questions or data requests: [email protected]

Omika-AI ApS · CVR: 45651258 · Gammel Koge Landevej 119, 2500 Valby, Denmark