docs(privacy): disclose support-bot data practices

privacy.md

@@ -12,18 +12,77 @@ css:
 
 ### Your privacy is critically important to us.
 
-It is LizardByte's policy to respect your privacy regarding any information we may collect while operating our website.
-This Privacy Policy applies to [https://app.lizardbyte.dev](https://app.lizardbyte.dev)
-(hereinafter, "us", "we", or "https://app.lizardbyte.dev"). We respect your privacy and are committed to protecting
-personally identifiable information you may provide us through the Website. We have adopted this privacy policy
-("Privacy Policy") to explain what information may be collected on our Website, how we use this information, and under
-what circumstances we may disclose the information to third parties. This Privacy Policy applies only to information we
-collect through the Website and does not apply to our collection of information from other sources.
+It is LizardByte's policy to respect your privacy regarding any information we may collect while operating our website
+and applications. This Privacy Policy applies to [https://app.lizardbyte.dev](https://app.lizardbyte.dev) and the
+LizardByte-bot integrations for Discord and Reddit (hereinafter, "us", "we", or "LizardByte"). We respect your privacy
+and are committed to protecting personally identifiable information you may provide us. We have adopted this privacy
+policy ("Privacy Policy") to explain what information may be collected, how we use this information, and under what
+circumstances we may disclose the information to third parties.
 
 This Privacy Policy, together with the Terms of service posted on our Website, set forth the general rules and policies
 governing your use of our Website. Depending on your activities when visiting our Website, you may be required to agree
 to additional terms of service.
 
+## LizardByte-bot Community Applications
+
+LizardByte-bot is a private community support and moderation application used in Discord servers and Reddit communities
+operated by LizardByte. It provides support and moderator commands, activity-based ranks and leaderboards, GitHub
+account linking, GitHub sponsor role synchronization, and notifications between LizardByte services.
+
+### Discord Information
+
+Depending on the features a user interacts with, LizardByte-bot may process and store:
+
+* Discord user IDs, usernames, global display names, and server IDs.
+* Message activity metadata, including message counts and last-activity timestamps, for ranks and leaderboards. The bot
+  does not read or store message bodies, embeds, attachments, components, or polls.
+* GitHub user IDs and usernames when a user voluntarily links a GitHub account through OAuth, together with derived
+  sponsor status and roles managed by the bot. OAuth access tokens are used to retrieve the authorized account details
+  and are not stored by the application.
+* Moderation event metadata for messages posted in a designated restricted channel, including the Discord user,
+  channel, message ID, and event timestamp. This record does not include the message body or attachments.
+* Command interactions and operational logs necessary to provide, secure, and troubleshoot the application.
+
+### Reddit Information
+
+LizardByte-bot monitors new submissions and comments in configured LizardByte subreddits. Depending on the activity and
+features involved, it may process:
+
+* Reddit account IDs and usernames, subreddit IDs, activity counts, rank experience, and last-activity timestamps for
+  ranks and leaderboards.
+* Comment IDs and comment text. Comment text is used while detecting and responding to supported commands and is not
+  retained in active application records; the bot retains the comment ID and whether processing completed to prevent
+  duplicate processing.
+* Submission IDs, titles, text, authors, timestamps, links, flair, and the author's public profile image while preparing
+  notifications. Active application records retain the submission ID, flair metadata, and notification delivery status
+  and timestamp, but not the submission title, text, author, link, or profile image.
+
+The bot posts Reddit submission notifications to a restricted Discord channel. Those notifications may include the
+Reddit username and public profile image, submission title and text, link, flair, and timestamp, and remain in Discord
+until removed by an authorized moderator.
+
+### How We Use and Share Information
+
+We use this information only to provide the features described above, administer LizardByte communities, prevent abuse,
+and diagnose application failures. We do not sell this information, use it for advertising or user profiling, or use
+Discord or Reddit content to train machine learning or artificial intelligence models.
+
+Application information may be processed by Discord, Reddit, and service providers that host application or storage
+systems under their respective terms and privacy policies. Discord moderation records and Reddit submission
+notifications are posted only to restricted Discord channels available to authorized moderators.
+
+### Storage and Retention
+
+Application records are stored in access-controlled systems managed by LizardByte and its service providers and are
+available only to authorized maintainers. Operational logs are similarly access-controlled.
+
+Account-linking, rank, and processing-status records are retained while needed to provide those features. Operational
+logs are removed on a rolling basis, and records posted to restricted Discord channels are retained until an authorized
+moderator removes them. Users may request access to, correction of, or deletion of their stored application data through
+the [LizardByte support portal](https://app.lizardbyte.dev/support/). We may retain limited information when necessary for
+security, abuse prevention, legal compliance, or resolving disputes. Requests to delete Reddit personal data will be
+completed within 10 days.
+
 ## Website Visitors
 
 Like most website operators, LizardByte collects non-personally-identifying information of the sort that web browsers