Privacy and data use

Titan processes only the data needed to operate the bot, dashboard, enabled modules, and requested integrations. The exact data depends on which Discord features and meeting tools a server enables.

Titan is not Discord and cannot delete records held by Discord, Google, payment providers, AI providers, or other third parties. Their own privacy terms and retention controls apply to copies they receive.

• Discord account and session: Discord user ID, username, display name, avatar, the guild list returned by Discord, and a short-lived dashboard session. The OAuth access token is encrypted in the session store while it is needed and the session expires after 24 hours or is removed when the session is deleted.
• Server and dashboard configuration: Bot guild metadata such as trusted channels, roles, permissions, and commands; module settings; embed, welcome, filter, ticket, application, and other configuration values; and safe audit summaries of dashboard changes.
• User-submitted content: Depending on enabled features, ticket messages or transcripts, application answers, meeting titles, participant information, transcript text, summaries, and content submitted to AI or translation features may be processed. Do not submit secrets or data you are not authorized to share.
• Billing and integration metadata: Premium checkout and entitlement metadata, provider event identifiers, Google Drive connection metadata, and identifiers needed to deliver the requested integration. Payment credentials are handled by the payment provider, not stored as raw card data by Titan.

Meeting audio may be sent to the configured speech-to-text provider. Meeting transcript or summary text may be sent to the configured AI provider and, when enabled, exported to Google Docs. Translation and AI modules send the relevant message text to the configured translation or AI service.

The configured provider can be self-hosted or a third-party endpoint. Titan does not make a blanket claim that every provider retains no data or never uses it for training; review the provider terms and configuration before enabling a feature for sensitive content.

Discord receives bot messages and actions required by the enabled modules. Google receives data only after the user connects Google Drive and enables the related export. Premium providers receive checkout and entitlement information needed to validate a purchase.

We process data to perform our contract with you (providing the bot and dashboard), for our legitimate interests (preventing abuse, security, and audit records), and with your consent where consent is required. Legal obligations also apply where necessary for a purpose.

We implement technical and organizational security measures to protect your data against unauthorized access, loss, alteration, or disclosure. Sensitive authentication tokens (such as Discord OAuth tokens) are encrypted at rest in our session store.

All network communication between your browser, our dashboard, and Discord APIs is encrypted in transit using industry-standard TLS/HTTPS protocols. Access to administrative systems is strictly restricted to authorized personnel.

Titan uses strictly necessary cookies and browser local storage to maintain your authenticated session, prevent cross-site request forgery (CSRF), and remember your display preferences (such as dark/light theme and language selection).

We do not use third-party tracking cookies or sell your personal browsing habits to advertising networks.

Dashboard sessions expire after 24 hours. Meeting processing uses the configured retention policy; the current defaults are 24 hours for raw processing data, 14 days for audio, and 90 days for transcript data. A server or operator may configure different supported values where the feature allows it.

Ticket retention is configurable by the server and supports 30, 90, 180, 365 days, or forever. Discord messages and Google Docs copies are separate records and are not removed merely because a Titan database record expires.

Titan does not currently promise a single automatic expiry period for every audit, Discord, external-provider, or payment record. The data deletion page explains how to submit a scoped request for records Titan controls.

Data may be transferred outside the country where the Titan operator resides only as needed by integrations you enable (for example Discord, Google, or AI and speech-to-text providers you configure). For these transfers we aim to apply appropriate safeguards required by applicable law.

Depending on your location (including under GDPR in the European Economic Area, UK GDPR, and CCPA/CPRA in California), you have rights regarding your personal information, including the right to access, rectify, port, restrict processing of, or delete your data.

You can exercise your right to deletion directly via our Data Deletion page or by contacting us at team@ttitan.co. We do not discriminate against users for exercising their privacy rights.

You may object to processing based on legitimate interests for reasons related to your particular situation. We ask you to raise KVKK or GDPR complaints with us first; your right to contact the competent data protection authority remains unaffected.

Titan is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at team@ttitan.co so we can immediately delete such records.

Use the data deletion page while signed in to submit one or more specific scopes. Titan records the request as pending so it can be reviewed and processed; submitting the form is not an immediate deletion confirmation.

A Titan meeting deletion removes the internal meeting, transcript, and linked audio when the record is eligible. A Google Docs copy previously exported outside Titan is not deleted automatically and must be removed from Google Drive separately. Discord messages, ticket channels, and third-party copies require the relevant Discord or provider action.

We may keep a minimal request and audit record needed to prevent duplicate processing, demonstrate that a request was received, or meet a legal or security obligation. We do not put message content, OAuth tokens, API keys, or secrets into the deletion audit entry.

For a privacy, deletion, or abuse question, email team@ttitan.co or use the additional contact option shown on the support page. Do not send credentials, tokens, or other secrets.

Titan is intended to operate within Discord's Developer Policy and Developer Terms. Those documents remain authoritative for Discord platform requirements.