At a glance
Business brief
- For server content, the customer is generally the controller and Panda acts as a processor under documented instructions.
- Panda uses tenant-scoped access controls, audited privileged changes, entitlement checks, backup practices, and deployment secret management.
- Business customers can request a signed DPA and current subprocessors list before rollout or renewal.
01
Roles
For server content, the customer is the controller and Panda acts as a processor. For account administration, billing, fraud prevention, and service security, Panda may act as an independent controller.
Business customers can request a signed DPA before production rollout or renewal.
02
Processing details
Subject matter: hosted Discord assistant services. Duration: subscription term plus retention and backup windows. Categories: Discord users, server admins, billing owners, support contacts, and invited members.
Personal data may include Discord IDs, names visible to the bot, role and channel metadata, command content, server knowledge, memory preferences, billing metadata, audit events, and support correspondence.
03
Customer instructions
Panda processes server content to provide the configured assistant service, follow server owner instructions, enforce permissions, support billing and security, and comply with lawful obligations.
Customers are responsible for configuring Panda consistently with their own notices, internal policies, member expectations, and legal obligations.
04
Security commitments
Panda uses access controls, tenant-scoped repository queries, audit logging, secrets management, backups, webhook verification, and entitlement checks before paid provider-spend paths.
Access to production systems is limited to operational needs, and support workflows are designed to avoid raw prompts, raw Discord messages, API keys, and billing secrets by default.
05
Subprocessors
Subprocessors are limited to providers needed for hosting, payment, security, support, managed AI, search, email, and observability. A current list is available on request.
Business customers may request notice of material subprocessors changes through their support contact.
06
Assistance
Panda will provide reasonable assistance for verified export, deletion, incident, and data subject requests related to server content processed by Panda.
Requests should include the relevant server, account, billing, or support identifiers so Panda can verify authority before taking action.
Next step Need a paper trail?
Support can route verified billing, privacy, security, export, deletion, and setup requests to the right owner context.