Last updated: June 11, 2026
XcoreAi ("XcoreAi", "we", "us") provides an AI-powered Discord bot and a web dashboard at xcoreai.xyz. This policy explains what data we collect, why, who we share it with, and the choices you have. It applies to server administrators who sign in to the dashboard and to members of servers where the bot is installed. By using XcoreAi you agree to this policy.
Account data. When you sign in with Discord we receive your Discord user ID, username, avatar, email address, and the list of servers you belong to (so we can show the ones you can manage).
Server & configuration data. Settings you create in XcoreAi — ticket setup, automod and moderation rules, knowledge base documents, role menus, newspaper config, game settings, and similar.
Operational data. To run the features you enable, the bot processes messages and events in your server (for example, a question in a support channel, a message an automod rule inspects, or activity counted toward leveling and the server newspaper). We store the minimum needed for a feature to work — such as moderation case logs, leveling totals, invite counts, and game records — and process the rest transiently.
Game data. If you play the Dino game, we store your global game profile, your dinos, eggs, items, coin balance, battle and marketplace records. This profile is tied to your Discord user ID and is shared across every server that runs the game.
Billing data. Payments are handled by Stripe. We store your plan, subscription status, and usage counts. We do not store full card numbers — Stripe processes payment details directly.
We use your data only to operate and improve XcoreAi: authenticating you, displaying your dashboard, running the bot features you turn on, enforcing plan limits, billing, preventing abuse, and providing support. We do not sell your data, and we do not use the contents of your server or your knowledge base to train AI models.
When you use AI features (support replies, chat bots, auto-moderation scoring, AI server management, the newspaper, NPCs, and similar), the relevant content is sent to a third-party AI provider for processing. Providers may retain inputs for a short period for abuse monitoring but do not use them to train their models. Some retrieval features generate embeddings that are stored locally to power search. You can disable AI features at any time, which stops new content from being sent.
We share data with the processors needed to run the service: Discord (authentication and bot operation), Stripe (payments), our AI provider(s) (AI features), and our hosting/database infrastructure. Each receives only what it needs to perform its function. We do not sell or rent personal data to anyone.
We use a small number of strictly necessary cookies to keep you signed in and secure your session. We do not use advertising or cross-site tracking cookies.
We keep account and configuration data while your account is active. You can delete your account at any time from Settings; we remove associated data within 30 days, except where we must retain it by law (for example, billing and tax records).
Stored message content is bounded: message excerpts attached to moderation cases are automatically removed after 90 days(the case record itself — action, reason, moderator — is kept for the server's staff), and operational event logs are deleted after 180 days. Ticket transcripts are created for a server's staff when a ticket closes and are retained until the server's data is deleted. Other operational logs are kept only as long as needed for the relevant feature, security, and abuse prevention.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise most of these directly in the dashboard, or contact us using the details below and we'll respond within a reasonable time.
XcoreAi is not directed to children under 13 (or the minimum age required to use Discord in your country). We do not knowingly collect data from anyone under that age. If you believe a child has provided us data, contact us and we'll delete it.
We use reasonable technical and organizational measures to protect your data, including encrypted transport and scoped access controls. No system is perfectly secure, but we work to limit what we collect and how long we keep it.
Your data may be processed in countries other than your own, including by the service providers listed above. We may update this policy from time to time and will surface significant changes to active users; the "last updated" date above always reflects the current version.
Questions, requests, or concerns? Reach us in our support Discord and a member of the team will help you.