Privacy Policy

Last updated: July 10, 2026

This Privacy Policy describes how Shopping Assistant (the "Bot") collects, uses, and shares information when you interact with it on the Discord platform. By using the Bot, you consent to the practices described in this policy.

1. Information We Collect

When you send a message containing an image in a Discord channel where the Bot is configured, the Bot processes the following information:

• Image content — the image file you attach to your message, downloaded temporarily for processing;
• Message metadata — your Discord user ID, username, the channel ID, and the message ID;
• Image hash — a SHA-256 hash of the image, used solely to avoid re-processing the same image.

We do not collect or process Discord tokens, passwords, payment information, or direct message content. The Bot only reads messages in channels it has been explicitly configured to monitor.

2. How We Use Information

We use the information collected solely to operate the Bot's core function:

• To search for products that match the image you submitted;
• To list matching products on the configured e-commerce platform;
• To reply to your message with a product link;
• To cache results so that identical images are not re-processed repeatedly;
• To maintain server logs for reliability, debugging, and abuse prevention.

3. Information We Share

To perform the service, the Bot transmits your image and related data to the following third parties:

• Image search provider (RepFind, https://www.repfind.ai) — receives your image to perform the visual product search;
• E-commerce platform (Weidian / Vdian, https://www.vdian.com) — receives the image and generated product data to create a product listing;
• Discord — receives the Bot's reply containing the product link.

These third parties process data under their own privacy policies and terms. We do not sell your information, and we do not share it for advertising purposes.

4. Data Retention

Images

Images are held in the Bot's process memory only for the duration of processing and are not written to persistent disk storage. Once a request completes, the image data is no longer retained.

Deduplication Cache

To avoid redundant processing, the Bot keeps an in-memory cache mapping image hashes to recent results. This cache holds a maximum of 500 entries and each entry expires automatically after 24 hours. The cache is cleared whenever the Bot process restarts.

Server Logs

The Bot writes operational logs that may include your Discord user ID, channel ID, message ID, a random trace identifier, and timestamps. These logs are used for monitoring and troubleshooting and are rotated by the process manager. See our Data Deletion page for retention details.

5. Data Security

We take reasonable measures to protect the information we process, including restricting server access and using HTTPS for all external API communications. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction (for example, under the EU/UK GDPR or California's CCPA), you may have the right to:

• Request access to or a copy of your personal data;
• Request correction or deletion of your personal data;
• Object to or restrict certain processing;
• Withdraw consent (by removing the Bot from the server).

To exercise any of these rights, see our Data Deletion page or the contact page.

7. Children's Privacy

The Bot is not directed to children under 13 (or the minimum age required to use Discord in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has used the Bot, please contact us so we can take appropriate action.

8. International Data Transfers

Your information may be processed in countries other than your own, including the United States and China, where the Bot's servers and third-party services are located. By using the Bot, you acknowledge and consent to such transfers.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available at this page with the "Last updated" date above. We encourage you to review it periodically.

10. Contact

If you have any questions about this Privacy Policy, contact us at vvenvw@gmail.com or visit our contact page.