Privacy Policy — GoMobSec for Discord

This policy covers the GoMobSec app for Discord (“the App”), operated by GoMobSec Inc. (“We”, “Us”). It explains what the App keeps when a Discord server uses it. What happens to an application file once it reaches GoMobSec is covered by the main GoMobSec Privacy Policy, which also applies.

What the App keeps

For each Discord server that adds the App, We store:

• the server’s Discord ID;
• the key GoMobSec issues to the App when the account owner approves the link, encrypted (AES-256-GCM, under a key used only by the App and bound to that server), plus the linked GoMobSec account’s username and plan name;
• the Discord user ID of the manager who linked the account;
• whether the server holds a GoMobSec for Discord subscription, as Discord reports it to the App;
• while a link is waiting for approval, its one-off code (for up to ten minutes);
• the IDs of the role allowed to use the App and of the alert channel, if set;
• the IDs and status of recent scans on the linked account, and the Discord user ID of whoever started a scan from Discord, so that a finished scan can be announced once;
• the times of recent uploads, to apply the per-server hourly limit.

Our service logs also record server IDs, user IDs and scan IDs when commands are used, for security and troubleshooting.

What the App does not collect

The App does not read messages, member lists, presence or direct messages, and asks Discord for none of those permissions. It only sees the commands You run and what You put in them.

Files You upload

When You attach an APK or IPA to /gomobsec scan, the App downloads it from Discord into a private temporary file, sends it to GoMobSec under the linked account, and deletes the temporary copy as soon as GoMobSec has it. From then on it is Customer Application Data under the main Privacy Policy: encrypted at rest, analysed, and kept or deleted as described there. The file also exists on Discord’s servers as an attachment, under Discord’s own policies.

How We use it

Only to run the App: to call GoMobSec with the server’s own key, to decide who may use it, to post scan summaries where a server manager asked for them, and to keep the service secure. We do not sell it, use it for advertising, or use it to train models.

Who else sees it

• Discord processes everything sent through Discord, including the forms the App shows, under the Discord Privacy Policy.
• Members of Your server see the scan summaries posted in the alert channel a server manager chose. Other replies are visible only to the person who ran the command. Summaries show counts and, if a manager turns it on, finding titles — never descriptions, code locations or evidence.
• GoMobSec (the platform) receives the API calls and files, as described in the main Privacy Policy.

How long it is kept

• Removing the App from a server revokes its key in GoMobSec and deletes everything the App stored for that server, straight away.
• /gomobsec-admin unlink revokes and deletes the key and the scan history straight away.
• A scan’s status record is deleted once the App has not seen that scan for 30 days.
• Upload times are kept for one hour.
• Service logs follow the usage-data period in the main Privacy Policy.

Security

No key ever passes through Discord: the account owner approves the link in GoMobSec, and GoMobSec issues a key to the App directly. The App stores it encrypted and never shows it. The App has no access to GoMobSec’s database; everything it does goes through the public API with the server’s own key, so it can see only what that account can see. If You want to disconnect a server, revoke its “Discord: …” key on the API keys page in GoMobSec.

Your choices and rights

Server managers can unlink or remove the App at any time. Anyone can ask Us for a copy of, or the deletion of, data about them, and has the rights set out in the main Privacy Policy. The App is not meant for anyone under 16.

Changes

We will update the date above when this policy changes, and announce material changes in the GoMobSec community server.

Contact

Email support@gomobsec.ai, or ask in the GoMobSec community server at discord.gg/uMVEBJyX2E.