Privacy policy

1.Who we are

CodeFour is a Discord bot and web dashboard for FiveM communities. In this policy, “we” and “us” mean the team that runs CodeFour. You can reach us in our Discord server.

This policy explains what information CodeFour handles, why, who it’s shared with, and the choices you have. It covers the CodeFour bot in Discord, this website and dashboard, and the codefour_bridge resource for FiveM servers.

2.Information we collect

When you log in to the dashboard

Logging in uses your Discord account. Discord shares your user ID, username, display name and avatar, and the list of servers you’re in with your permissions in each. We keep you logged in for 7 days using a cookie in your browser, and we store an access token so we can refresh your server list.

When CodeFour is in your server

• Server details: the server’s ID and name, its channels and roles, and the settings admins choose in the dashboard.
• Tickets: the messages in each ticket, links to attachments, the names of the people involved, the transcript, and any rating or review.
• Support channels: the questions posted in the channels admins choose, and the assistant’s answers.
• What CodeFour learns: text copied from the server’s public information channels, like #rules, short notes the assistant writes from public conversations, and web pages linked from those channels. By default it only learns from channels regular members can see. It never learns from age-restricted channels, ticket channels or its own log channels.
• Members: the IDs and display names of members who use a feature, with what they did there: XP and message counts for leveling, applications, suggestions, giveaway entries, moderation cases, verification and auto-whitelist results, and votes in button polls (never shown to anyone in anonymous polls, and deleted 30 days after a poll ends; only the totals are kept). If admins switch on member notes, the assistant also keeps short notes about a member’s setup, such as the platform they play on.
• Activity counts: daily numbers of messages, joins and leaves, and a list of which members were active each day, for the Stats page.
• Staff activity: which staff claimed, answered and closed tickets, for staff stats and payroll.
• Dashboard changes: a record of who changed what in the dashboard.

CodeFour reads messages in the channels it can see so it can respond to them, count activity for leveling and stats, and apply the server’s moderation rules. It only stores message text where this policy says so.

When the assistant answers

To write an answer, CodeFour sends the relevant text to our AI provider: the member’s question and the conversation so far, matching parts of what it has learned about the server, live server status, and any notes about that member. We keep a record of how many AI requests each server makes.

FiveM features

For server status, CodeFour reads public information about a FiveM server from Cfx.re, such as its name, player count and resources. Network statistics come from Heartbeat, a service that tracks public FiveM servers. If a server installs the codefour_bridge resource, it sends us the names, Discord IDs, Rockstar license identifiers and ping of players as they connect, play and leave. We use this for the whitelist check, the live player list and the join and leave log.

If you add CodeFour to a server, or own one

We note who added CodeFour to each server (their Discord user ID and username), from the server’s audit log or from adding it through the dashboard. The team behind CodeFour uses this, and the server owner’s ID, to contact you about the bot, for example about a new version or a problem with your setup.

If you link your streaming channel

Members can link their YouTube, Twitch or Kick channel. We keep which channel they linked, so CodeFour can give them the server’s Live role and announce their streams. Unlink any time with /creator unlink. Leaving the server removes the link.

If you appeal a ban

When you appeal on a server’s appeal page, we keep your answers, any questions staff ask you and your replies, and the decision, so staff can review it and you can see the outcome. Appeals are deleted a year after they’re decided.

Direct messages

CodeFour keeps direct messages only from people the team has messaged, and from the people who added CodeFour to a server or own one, so the team can read and answer them. Reply STOP to CodeFour to stop messages from the team. Direct messages from anyone else are ignored.

What we don’t collect

We don’t collect passwords or payment details. This website doesn’t use advertising or tracking cookies.

3.How we use information

• To run the features server admins turn on, like tickets, support channels, the whitelist and stats.
• To write answers with the AI assistant.
• To keep CodeFour secure, prevent abuse and fix problems.

We don’t sell personal information, we don’t use it for advertising, and we don’t train AI models on it.

4.Our legal bases

Where data protection laws such as the UK GDPR or the EU GDPR apply, we rely on these legal bases:

• Legitimate interests: providing a service that server admins have chosen to add to their server, and keeping it secure.
• Contract: providing the dashboard when you log in and use it.
• Legal obligation: where the law requires us to keep or share information.

Server admins decide which features to switch on in their server, so they should let their members know, for example by linking to this policy in their rules.

5.Who we share it with

• Discord, which runs the platform CodeFour works on.
• Our AI provider, xKiro, and the AI model companies it passes requests to, so they can write answers.
• Heartbeat and Cfx.re, when we look up public FiveM server information. We send them a server’s address or join code, not information about members.
• Our hosting provider, which runs the computers CodeFour works on.
• Authorities or others, if the law requires it or it’s needed to protect someone’s safety.

Each of these companies handles information under its own terms and privacy policy. If someone else takes over running CodeFour, this information may move to them, and this policy keeps applying until it’s changed with notice.

6.International transfers

Discord and our providers may process information in other countries, including the United States. Where the law requires safeguards for these transfers, we rely on the safeguards our providers offer, such as standard contractual clauses.

7.How long we keep it

When admins delete their server’s data in the dashboard, it’s removed straight away. If we keep backups, deleted information drops out of them as they’re replaced.

8.Your choices and rights

Server admins

Admins can switch off any feature, including the assistant, learning and member notes. They can delete individual knowledge sources and member notes, delete all of the server’s data in Settings, and remove CodeFour from the server at any time.

Members

Members can ask the server’s staff to remove information, or ask us in our Discord server. We can delete what CodeFour holds about you in every server: member notes, levels, activity, support questions, applications, suggestions, giveaway entries, FiveM join logs and tickets you opened. Your messages in other people’s tickets stay, with the text removed. We may keep moderation cases where we need them to keep communities safe.

Your rights under data protection law

Depending on where you live, you may have the right to access, correct, delete or move your information, and to object to or restrict how we use it. To use these rights, open a ticket in our Discord server. We’ll reply within one month.

If you’re in the UK or the EU and you’re unhappy with how we’ve handled your information, you can complain to your data protection authority. In the UK, that’s the Information Commissioner’s Office.

9.Security

We protect information with access controls, so only people with permission in a server can open its dashboard. Login sessions are stored as one-way hashes, transcript links can’t be guessed, and CodeFour refuses to open private network addresses when it reads web pages.

No system is perfectly secure, so we can’t promise information will never be accessed without permission. If a breach affects you, we’ll tell you as the law requires.

10.Children

CodeFour is for people who meet Discord’s minimum age, which is 13 in most countries. We don’t knowingly collect information from younger children. If you believe a child’s information is in CodeFour, tell us in our Discord server and we’ll delete it.

11.Changes to this policy

We’ll update this page when the way we handle information changes, and change the date at the top. For significant changes, we’ll give notice in the dashboard or our support server before they take effect.

12.Contact

For questions or requests about your information, open a ticket in our Discord server.