← Twin Paths

Privacy Policy

Privacy Policy

Draft notice. Tentative draft for The Oracle ("Lucy") by Twin Paths, not yet reviewed by a lawyer. Replace bracketed placeholders and have counsel review before publishing. Not legal advice.

Effective date: 2026-06-21 Operator / data controller: Twin Paths ("we", "us"). Contact: [CONTACT EMAIL]

This Policy explains what we collect when you use The Oracle Discord bot and related web pages (the "Service"), how we use it, who we share it with, and your choices.

1. Information we collect

You give us, or it comes from Discord:

  • Discord identifiers: your user ID, username, and (where applicable) server and channel IDs needed to deliver responses.
  • Messages and commands you send to the bot, including prompts and any files you upload or share for the bot to read.
  • Profile / "idol" inputs: names you enter, the image you select from search results, and the source URL of that image.
  • Astrology inputs: birth date, time, and place you provide for charts (note: birth time/place are sensitive to you — see §6).
  • Payment information: handled by our payment processor; we receive limited billing metadata (e.g. status, plan), not full card numbers.

We generate or derive:

  • AI outputs created for you (readings, generated images/audio/video, replies).
  • Memory / personal-context notes: to provide continuity, the Service may store summarized facts and preferences derived from your interactions.
  • Usage and token metrics: per-feature counts and AI token usage for limits, billing, and abuse prevention.
  • Provenance records for selected images (who selected, source URL, timestamp).
  • Technical/operational logs: timestamps, feature used, and error diagnostics.

We do not intentionally collect special-category data beyond what you choose to provide (e.g. birth details, or images/photos you select). Please don't submit others' sensitive personal data without a lawful basis.

2. How we use it

  • To operate and provide the Service and its features you request.
  • To maintain continuity (memory/preferences) so the assistant is useful over time.
  • To enforce usage limits, process payments, and prevent abuse and fraud.
  • To secure, debug, and improve the Service.
  • To respond to legal requests and copyright complaints, and to keep provenance needed for our takedown process.

We rely on these legal bases (where GDPR/UK GDPR applies): performance of a contract (to provide features you request), legitimate interests (security, abuse prevention, improvement), consent (where required, e.g. certain optional features), and legal obligation.

3. AI processing and third parties (sub-processors)

To generate responses and media, your inputs are sent to third-party AI and infrastructure providers, which process them under their own terms:

  • Discord — message transport and identity.
  • Anthropic, Google (Gemini), OpenAI, xAI (Grok) — text, image, audio, and/or video generation. (Update this list to match what is actually in use.)
  • Search/metasearch infrastructure for web and image search.
  • Hosting & object storage (e.g. Cloudflare / self-hosted storage) for generated and selected media.
  • Payment processor (e.g. Stripe) for paid features.

We do not sell your personal information. We share data only with such providers to run the Service, with your direction (e.g. posting a result in your Discord channel), or when required by law.

4. Public/visible content

Outputs the bot posts in a Discord server are visible to others in that server per Discord's design and that server's settings. Hosted images you select for a public idol profile may be viewable via their hosting URL. Don't put anything in a shared channel you wouldn't want others in it to see.

5. Retention

We keep information for as long as needed to provide the Service and for legitimate business, legal, security, and accounting purposes, then delete or anonymize it. Memory/ context notes persist to provide continuity until you request deletion or stop using the Service. Provenance and takedown records may be retained as long as reasonably necessary to administer our copyright process. Backups are purged on a rolling schedule.

6. Your choices and rights

  • Access / deletion / correction: contact us at [CONTACT EMAIL] to request a copy of, correction of, or deletion of your data, including stored memory/context and idol profiles you created, subject to legal/operational limits.
  • Stop processing: remove the bot or stop sending it messages; you can ask us to erase associated stored data.
  • Birth data: you may ask us to remove birth date/time/place from a profile you made.
  • Depending on where you live (e.g. EEA/UK, California), you may have additional rights (access, portability, objection, restriction, non-discrimination for exercising rights). We honor verifiable requests as required by law. We do not "sell" or "share" personal information for cross-context behavioral advertising.

7. Security

We use reasonable technical and organizational measures to protect data (access controls, encrypted transport, scoped credentials). No system is perfectly secure; we cannot guarantee absolute security.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact [CONTACT EMAIL] and we will delete it.

9. International transfers

We and our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Changes

We may update this Policy; material changes will be posted here with a new effective date and, where practical, announced in-Service.

11. Contact

Privacy questions or requests: [CONTACT EMAIL]. For copyright matters, see the DMCA / Copyright Policy.