Privacy Policy

July 10, 2026

This Privacy Policy describes how Shopping Assistant (the "Bot") collects, uses, and shares information when you interact with it on Discord. By using the Bot, you consent to the practices described here.

Information We Collect

When you send an image in a configured channel, the Bot processes:

Image content — the attached file, downloaded temporarily for processing;
Message metadata — your Discord user ID, username, channel ID, and message ID;
Image hash — a SHA-256 hash, used only to avoid re-processing the same image.

We do not collect Discord tokens, passwords, payment information, or direct message content. The Bot only reads channels it has been explicitly configured to monitor.

How We Use Information

We use the information solely to operate the Bot: to search for matching products, list them on the e-commerce platform, reply with a product link, cache results to avoid re-processing, and maintain logs for reliability and abuse prevention.

To perform the service, your image and related data are transmitted to:

Image search provider (RepFind) — to perform the visual search;
E-commerce platform (Weidian) — to create a product listing;
Discord — to deliver the Bot's reply with the product link.

Each third party processes data under its own policy. We do not sell your information or share it for advertising.

Data Retention

Images

Held in memory only during processing and never written to disk. Once a request completes, the image data is discarded.

Deduplication cache

An in-memory map of image hashes to recent results, capped at 500 entries. Each entry expires after 24 hours; the cache clears on process restart.

Server logs

May include user/channel/message IDs, a trace identifier, and timestamps. Used for monitoring and troubleshooting, rotated within 30 days (see Data Deletion).

Data Security

We take reasonable measures, including restricted server access and HTTPS for external APIs. No transmission or storage is completely secure.

Your Rights

Depending on your jurisdiction (e.g. GDPR, CCPA), you may request access, correction, deletion, or object to processing. Removing the Bot from a server withdraws consent and stops further collection. See Data Deletion or the contact page.

Children's Privacy

The Bot is not directed to children under 13. We do not knowingly collect their data; contact us if you believe a child has used it.

International Data Transfers

Your information may be processed in countries other than your own, including the United States and China. By using the Bot, you consent to such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page.