Privacy notice for community members

This notice is for people who are members of a Discord or Telegram community that uses the Veyramesh bot. You do not need a Veyramesh account for this to apply to you. Veyramesh is operated by Turners OÜ (Estonia, registration number 16963491).

The owner of the server you joined decides to use Veyramesh and configures how it works. For moderation, XP/levels, verification, and support tickets, the server owner is the data controller and Veyramesh acts on their instructions.

Veyramesh is separately responsible, as its own controller, for a limited set of security features that work across servers. For example detecting someone who has been banned from one community and tries to rejoin under a new account.

• Your platform user ID, display name, and avatar
• When you joined, and activity timestamps used for XP and levels
• Moderation actions taken in the server (warnings, mutes, kicks, bans) and the reason recorded
• The contents of support tickets you open
• Your verification status
• Where the server owner has turned on removal of members who don't verify: the deadline by which you must verify. The bot also briefly keeps the ids of its own welcome and goodbye messages (no message text) so it can delete them after a set time.
• On Telegram, the bot may delete Telegram's own "joined", "left" and "removed" messages from the group chat. The event stays in the server's moderation log.
• Where the server owner has enabled it: automated sentiment analysis of your messages, using AI
• In Discord servers: your messages are automatically checked for spam and scams, first with simple pattern rules and then, for longer messages, using AI (Anthropic). Messages flagged as spam or scam are removed automatically. A copy of a removed message may be posted to the server's moderation log so moderators can review it and restore it if it was a mistake.
• In Telegram groups: your messages are checked for spam and scams with simple pattern rules only (no AI). A message that matches is removed automatically and the group is told that a filter removed it. There is no review step in Telegram, so contact a group admin if a message was removed by mistake.
• In Telegram groups: if the same text or the same picture is posted repeatedly in a few seconds, in this group or in other groups using Veyramesh, the bot removes the copies and mutes the account for 10 minutes. To do this it keeps a one-way fingerprint of the text, or Telegram's id for the picture, with your member id, for at most ten minutes. The message text itself is not stored.
• In Telegram groups: to stop spam waves and scam images, the bot may look at photos in memory only. A photo is never saved and nothing about its content leaves our servers. If a picture is flagged as spam, a short fingerprint of it (not the picture and not who posted it) is kept for six hours so copies of it can be removed. If the group owner has switched on QR code reading, the bot also reads any QR code in members' photos and checks the link inside it like a typed link; the code's contents are discarded afterwards. The bot never identifies people from photos.
• For cross-server security only: a fingerprint of your avatar image and username-similarity patterns, used to detect ban evasion and impersonation

The server owner processes your data to run and moderate their community (their legitimate interests, or the performance of the community's own rules). Veyramesh processes the cross-server security signals on the basis of its legitimate interest, and the legitimate interest of every community it protects, in preventing ban evasion, impersonation, raids, and scams. These signals are deleted automatically after 12 months, or sooner on request or together with the related server. They are not used for any other purpose.

Where AI is used to analyse messages, you are interacting with an automated system. AI output can be wrong. Apart from removing individual messages flagged as spam or scam, it is not the sole basis for any decision about you.

Anti-raid and anti-nuke protection can restrict a member automatically, without a person reviewing each case first, because attacks happen too fast for that. The spam and scam filter likewise removes flagged messages automatically, and on Telegram a spam wave (the same message posted repeatedly) mutes the account for 10 minutes without a person reviewing it first. If the server owner has turned it on, the bot also removes a member who doesn't verify within the set time, with no person reviewing each case; you can rejoin and try again, and Discord members get a message explaining why. If you were affected by an automatic action and think it was a mistake, contact the server owner, or contact Veyramesh at support@veyramesh.com and we will arrange a review.

The server owner and their moderators, through the Veyramesh dashboard. Veyramesh's infrastructure and AI providers, listed at /subprocessors. We do not sell your data.

Our database is in the European Union (Ireland). Some providers are in the United States; where data is transferred there we use the EU Standard Contractual Clauses or an equivalent safeguard.

You can ask us to give you a copy of the data we hold about you, correct it, delete it, or stop certain processing. Use our privacy request form (no account needed) or contact support@veyramesh.com. Some requests about moderation or XP data may need to go to the server owner, and we will tell you if so. You can also complain to a data protection authority. In Estonia the Andmekaitse Inspektsioon (www.aki.ee), in the UK the ICO (ico.org.uk), or the authority where you live.

You can link members to this page (for example in your server rules or a pinned message) to help meet your own obligation to inform members under Article 14 GDPR. It does not replace your own privacy notice for anything else you do in your community.