Privacy Policy

Freshy Fresh Productions LLC ("we", "us", "our") operates freshyfreshproductionsllc.net (the "Site"), the Freshy Fresh Discord server, and a Discord bot. This Policy explains what personal information we collect, why we collect it, how we use it, and the rights you have over it.

This Policy sits alongside our Terms of Service. If anything here conflicts with the Terms, this Policy controls for privacy questions.

When you sign in with Discord, we ask Discord for the following pieces of information via OAuth. You see the full list on Discord's consent screen before you approve:

• Discord ID (snowflake). A permanent numeric ID Discord assigns you.
• Username and display name. Your public Discord handle.
• Avatar URL. Your Discord avatar image.
• Email address (if you granted Discord permission to share it).
• The full list of Discord servers ("guilds") you belong to. This is essential for our safety system — see Section 5 below.
• Your Discord OAuth access & refresh tokens. We store these so we can (a) refresh your role list without asking you to re-sign-in, (b) add the Members role to your Discord profile, and (c) auto-rejoin you to our server if we approve your ban appeal.
• Your Discord roles inside our server. We fetch these from Discord after sign-in to map you to a site role (Founder / Admin / Moderator / Employee / Host / User).

We do not receive your Discord password, direct messages you send to other users, or your friends list. Discord does not expose those to third-party applications.

• Show ratings and feedback you leave on show pages.
• Job applications you submit through the Careers page (name, contact, resume/portfolio, answers you provide).
• HR case submissions (subject, description, and any evidence you attach).
• Ban appeal statements you write.
• Profile customizations (display name, bio, notification preferences).
• Payment information you enter into Stripe's checkout form. Stripe processes and stores it; we only see the last four digits of your card and a token.

• Standard server logs (IP address, timestamp, path, user agent) retained for up to 30 days for security and debugging.
• Session cookies / a JWT stored in your browser's local storage so you stay signed in.
• Feature-usage counters that never contain your identity (e.g. "how many people viewed this show's page today").

We do not use third-party advertising cookies or ad-network tracking pixels.

This is the section that matters most to Discord users, so we're being extremely direct here.

• We store your list of Discord servers because our safety system checks it against a maintained list of Discord servers we've blacklisted (usually because their communities have targeted our hosts or shows in the past).
• Every user's guild list is checked automatically on sign-in, every 6 hours in the background sync job, and whenever you press "Refresh roles" or the blacklist is updated.
• Guild-adjacency rule: in addition to the server blacklist, we keep a list of individual Discord users we've blacklisted. If you share any Discord server with a blacklisted user, our bot may auto-ban you from ours. This is called the "adjacency rule" — it is the widest net a Discord bot is technically capable of. It is nota claim that you are a friend of that user — Discord does not expose friend lists to bots. It only means the two accounts co-exist in at least one shared server.
• What happens when the rule fires: our bot sends you a DM with the reason, a link to appeal, and a bans your Discord user from our guild. Your Site account is flagged banned so paid features and moderation-restricted features are unavailable.
• Your data on the blacklisted servers stays on those servers. We never store or read the content of any server other than our own. We only compare guild IDs (numeric strings) to our maintained list.
• Appeals are reviewed by a human moderator. Approved appeals restore Site access, lift the Discord ban, and (if we still have a valid OAuth refresh token) auto-rejoin you to our Discord server.

If you do not want us to use your Discord guild list this way, do not sign in with Discord. Fan features that require Discord (memberships, verification, watchlist reminders) will be unavailable, but you can still browse the Site anonymously.

• To create and maintain your account and provide the Services.
• To process membership payments, compute host payouts, and record earnings ledgers.
• To send critical DMs (ban notices, appeal outcomes, verification codes, membership confirmations, warnings).
• To enforce the moderation and blacklist system described in Section 5.
• To personalize your experience (watchlist, preferred timezone, notification preferences).
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations (e.g. tax records for host payouts).

We share personal information only in these situations:

• Discord Inc. — We call Discord's API to fetch your identity, guild list, and roles, and to send DMs, register slash commands, and manage bans. What we send Discord is limited to what's necessary for those API calls.
• Stripe, Inc. — For payment processing and host payouts. Stripe collects card data directly; we receive tokens and transaction metadata.
• Anthropic (Claude Sonnet 4.5) — For our AI Assistant. Your question text is sent to Anthropic to generate a response. Freshy AI conversations are retained on our servers for up to 24 hours to provide conversational context.
• Emergent Platform — Our infrastructure provider (hosting, object storage, managed LLM API key).
• Law enforcement or a court order — Only when compelled by valid legal process.

We do not sell personal information. We do not share your data with advertisers.

• Your account & profile data: for as long as your account is active.
• Discord OAuth tokens: refreshed as needed while your account is active; revoked upon unlink.
• Ban logs & appeal records: retained indefinitely for moderation continuity.
• Server / access logs: up to 30 days.
• Freshy AI chat history: up to 24 hours per session.
• Payment records: as long as required by tax and financial-record laws (typically 7 years in the U.S.).

• Access: You can see everything we have about you on your Profile page. Request a full export via legal@freshyfreshproductionsllc.net.
• Correction: Update your display name, bio, and preferences from Profile at any time.
• Deletion: Delete your Site account from Profile. Deletion removes your Site profile and Discord OAuth tokens; it does not remove content already published by moderators (e.g. HR disclosures with your name in them) unless legally required.
• Unlink Discord / Re-link: Available from Profile. Re-linking resets verification.
• Opt out of DMs: Turn off notification preferences from Profile, or block the Freshy Fresh bot on Discord.
• Region-specific rights: If you're in the EEA, UK, California, or another jurisdiction with additional data-subject rights, contact us and we will honor requests consistent with those laws (right to portability, right to object, right to lodge a complaint with your DPA).

We use TLS for all traffic, hash passwords with bcrypt, and store sensitive fields (OAuth tokens, Stripe customer IDs) in a database not accessible from the public network. No system is perfect — if you become aware of a vulnerability, please email security@freshyfreshproductionsllc.net so we can address it.

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

We host in the United States. If you're accessing the Services from outside the U.S., your data will be transferred to and processed in the U.S. under whatever safeguards our infrastructure providers have in place.

When we materially change this Policy, we'll update the "Last updated" date at the top and, when practical, post a notice on the Site or via Discord. Continued use of the Services after changes take effect constitutes acceptance.

Privacy questions? Email privacy@freshyfreshproductionsllc.net. Security issues? Email security@freshyfreshproductionsllc.net. General legal: legal@freshyfreshproductionsllc.net.