Privacy Policy — Giga Rewards

This Privacy Policy explains what information Giga Rewards ("the Bot," "we," "us") collects when you interact with it on Discord, how that information is used, and the choices you have.

1. Who We Are

Giga Rewards is a Discord bot that provides a gamified rewards system: users earn loot-box "chests," complete tasks, climb ranks, and withdraw earned balance. It is operated by TitanFi for use in Discord servers ("guilds") that have added the Bot. The Bot is not a gambling service — all reward flows are one-way (from the Bot to the user); users never pay, wager, or risk anything of value to receive or unlock a reward. See our Terms of Service for details.

2. Information We Collect

We only collect information needed to operate the Bot's features. We do not sell your data.

2.1 Information Discord Provides Automatically

When you interact with a server that has the Bot installed, Discord shares certain data with us as permitted by your server's settings and our requested permissions:

• Discord user ID — used as the primary key to associate you with your balance, chests, and task progress.
• Server membership and join events — to detect new members and track invite attribution (which invite link brought a member in).
• Roles — to determine your rank (pledge, freshman, sophomore, junior, senior) and admin status. Ranks are derived live from your Discord roles and are not stored separately.
• Voice channel / Stage presence — read only to record attendance at "AMA" Stage events you actively join; we do not record or store audio.
• Boost status (premiumSince) — used to detect server boosts for boost-related rewards.
• Message content — read only in designated channels to apply daily activity/quality filters (e.g., detecting low-effort or duplicate messages for the daily streak feature). We do not read or store message content outside of this narrow purpose, and we do not read DMs.

2.2 Information You Provide Directly

• Task submissions — e.g., a blockchain transaction hash, a link, or other proof you submit to complete a task.
• Twitter/X handle — if you use Twitter-follow verification, we check your public follow status via a third-party verification API and store the verification result.
• Withdrawal wallet address — a BSC/BEP20 (EVM-compatible) crypto wallet address you submit when requesting a withdrawal.
• Shop and cosmetic choices — purchases you make with in-bot balance (e.g., color roles, nickname changes).

2.3 Information Generated Through Use

• Balance and balance history — every credit or debit to your balance (chest rewards, withdrawals, purchases, fines) is logged with a timestamp so we can show historical charts and resolve disputes.
• Chest history — chests earned, their rarity, and when they were opened or expired.
• Task completion history — which tasks you've completed and when.
• Invite statistics — number of invites attributed to you and how many were "valid" (non-alt, retained).
• Streaks — daily activity streaks and voting streaks.
• Moderation-related records — if content you submitted for review (e.g., a promotion submission) is rejected, we may send you a one-time direct message explaining why.

3. How We Use Information

We use collected information solely to:

• Operate core gameplay (chests, tasks, ranks, balance, shop).
• Verify task completion (e.g., confirming a Twitter follow or an on-chain transaction).
• Process withdrawal requests, including manual admin review and payout to the wallet address you provide.
• Detect and prevent abuse (e.g., duplicate/alt accounts inflating invite counts, self-approval attempts on withdrawals).
• Maintain leaderboards and historical statistics shown in the bot and the companion dashboard.
• Communicate with you about actions affecting your account (e.g., a rejected submission, a processed withdrawal).

4. Third-Party Services

Some features rely on external services, which receive only the minimum data needed for that feature:

We do not share your data with any other third parties, and we do not use your data for advertising.

5. Dashboard / API Access

A companion web dashboard lets you view your own balance and stats. When you log in with Discord OAuth, we use your Discord identity solely to look up and display your own data (or, if you choose to make your balance public, a public leaderboard view). We do not use OAuth tokens to act on your Discord account beyond identity verification.

6. Data Retention

• Balance, chest, and task history are retained for as long as your account exists in a server using the Bot, so that history, disputes, and leaderboards remain accurate.
• Chests expire automatically after 30 days if unopened, but the record of the chest having been granted is retained for history.
• If you leave every server that uses the Bot, your data may be deleted upon request (see Section 8) or as part of routine data cleanup.

7. Data Storage & Security

Data is stored in a PostgreSQL database operated by us. Access to withdrawal approvals, moderation actions, and other admin functions is restricted to users holding the configured admin role in a given server. We use parameterized database queries and bearer-token/OAuth authentication on our API to reduce the risk of unauthorized access.

8. Your Rights & Choices

• Access/Deletion — You may request a copy of, or deletion of, the data we hold about you by contacting us (Section 10). We will verify your Discord identity before fulfilling the request.
• Balance visibility — You can control whether your balance is publicly viewable via the balance_public setting.
• Removing the Bot — A server admin can remove the Bot from a server at any time, which stops further data collection from that server.
• Opting out of message content scanning — You can turn off message-activity tracking entirely from your /profile (the "Opt Out" button under your profile actions). While opted out, the Bot ignores your messages — their content is not read for activity filtering, is not held in memory, and no message count is stored. Opting out means you forfeit the daily-message streak reward. You can opt back in at any time.

9. Children's Privacy

The Bot is intended for use in accordance with Discord's Terms of Service, which require users to meet Discord's minimum age requirement. We do not knowingly collect data from children under that age.

10. Contact

For privacy questions, data access, or deletion requests, contact us via our contact page or our Discord server.

11. Changes to This Policy

We may update this policy as the Bot's features change. Material changes will be reflected by updating the "Last updated" date above. For our general site terms and privacy practices, see Terms & Privacy.