When we say “Ibbi”, “Ibbi Wibbi”, “we,” “us,” and “our” in this policy, we mean IBBI Group, its subsidiaries, and its related companies.
When we say “services” in this policy, we mean Ibbi Wibbi’s services, apps, websites (including ibbi.dev, discourse.ibbi.dev, and associated subdomains), web dashboards, Discord bots, form/application systems, and connected products.
When we say “you” or “your,” we mean you as an individual user. If you are accessing our services on behalf of a legal entity (such as your employer or community organization), you agree that you have the authority to bind that entity to this policy, and “you” and “your” will refer to that entity.
1. Scope of This Policy
This policy describes the types of information we may collect from you or that you may provide when you use ibbi.dev, discourse.ibbi.dev, or any other related or connected IbbiWibbi service ("Service" or "Website"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.
This policy applies to information we collect:
- On this Website and its associated subdomains.
- On any other IbbiWibbi related service, web dashboard, application engine, API, system, server, or Discord bot.
- In email, text, support tickets, and other electronic messages between you and this Website or service.
- When you interact with our forms, applications, or integrated tools on third-party websites and services, if those features include links to this policy.
It does not apply to information collected by:
- Any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Website.
Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or Services. By accessing or using this Website, you agree to this Privacy Policy. This policy may change from time to time (see Changes to the Privacy Policy). Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
2. Governance & Legal Framework
This document was created as required by several legal frameworks, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), which dictate how personal information is collected, stored, used, and protected in Australia. It also incorporates provisions aligned with international privacy legislation, such as the General Data Protection Regulation (GDPR) for users in the European Union and the California Consumer Privacy Act (CCPA/CPRA) for residents of California. These statutes establish clear statutory standards for user data transparency, access rights, and security across digital services.
In addition, the legal text addresses consumer protection legislation, including the Australian Consumer Law under the Competition and Consumer Act 2010 (Cth) and the Children's Online Privacy Protection Act (COPPA) in the United States. These laws regulate fair user agreements, limit platform liability, and set strict age threshold standards for accessing online applications. Integrating these regulatory requirements ensures full legal compliance while protecting user rights across local and international jurisdictions.
3. Data We Collect
We collect information directly from you when you provide it to us, automatically as you navigate through our site or interact with our Discord bot and form engines, and from third-party services like Discord.
3.1 User & Account Data
When you log in to the web dashboard or authenticate via OAuth, we collect:
- Your email address
- Your Discord username, display name, and avatar image
- Your Discord user identification number
- Your OAuth2 authorization and access tokens
Purpose: This data is used to verify your identity, manage active login sessions, and confirm your administrative permissions across connected communities.
3.2 Discourse Forum Data
- When you register, post, or browse our Discourse forum (discourse.ibbi.dev), we collect:
- Your forum username and display name
- Your email address and account credentials
- Your forum posts, topics, replies, private messages, and uploaded files
- Your activity data, including likes, bookmarks, reading time, trust levels, and awarded badges
- Purpose: This data is used to maintain community discussions, send topic notifications, display member profiles, and facilitate forum moderation.
3.3 Form & Application Interaction Data
When you fill out, submit, or interact with any form or application hosted on our Services, we collect:
- Network Identifiers: Your IP address, network location data, browser type and user-agent string, operating system details, and connection headers.
- Input & Behavioral Metrics: Completion duration, interaction timestamps, window blur/focus changes, tab-switching events, typing cadence, and clipboard copy/paste interactions.
- Discord Integration Data: A record of what discord servers your in, profile details, unique user identifier, and other publicly available information about your account may be stored.
- Google Integration Data: Email Address attached to your google account, unique user identifier, and other publicly available information about your account may be stored.
- Roblox Integration Data: Profile information, a record of what groups you are in, your Roblox avatars, unique user identifier, and other publicly available information about your account may be stored.
Purpose: This data is processed based on our legitimate interest in fraud prevention, maintaining application fairness, protecting forms against automated bots or script abuse, and validating submission integrity.
3.4 Guild & Server Data
When you configure the Discord bot or manage a server through the dashboard, we collect:
- Server (Guild) identification numbers
- Channel and role configurations and permission levels
- Custom bot settings, modules, and user preferences
- Administrative activity records and audit logs
Purpose: This data is used to store your customized server preferences, maintain feature settings, and execute automated community workflows.
3.5 Bot Interaction Data
When you issue commands or interact with the Discord bot, we collect:
- Your command execution history and input parameters
- Your user identification number and server (guild) context
- Command execution timestamps
- Technical diagnostic data, including error tracebacks and rate-limit counters
Purpose: This data is used to monitor bot performance, troubleshoot system errors, enforce rate limits, and preserve platform stability.
3.6 Discord Message Data
When the Discord bot is present in a server, we collect:
- Every message sent across all text channels accessible by the bot
- The full text content, message timestamps, channel identifiers, and author user identifiers
- Media attachments, links, and embed metadata contained within messages
Purpose: This data is saved permanently in our databases. It is used to maintain server moderation logs, power automated moderation utilities, compile communication statistics, and train artificial intelligence or machine learning models.
3.7 Web & Network Usage Data
When you visit the website, browse the forum, or navigate the dashboard, we collect:
- Your IP address and coarse geolocation (country/region level)
- Your browser user agent string and device profile
- Essential session cookies
- HTTP connection metadata and request headers
Purpose: This data is used to prevent automated attacks, secure dashboard and forum access, enforce rate limits, and analyze network traffic trends.
4. Legal Basis for Processing & Automated Decision-Making (AI Moderation)
4.1 Legal Bases for Processing
We process personal information under recognized legal grounds, including:
- Contractual Necessity: To provide our web dashboard, Discord bot, and form features in accordance with our Terms of Service.
- Legitimate Interests: To maintain system security, prevent form abuse, optimize network traffic, compile statistics, and train/refine machine learning models.
- Consent: Provided by you upon account creation, form submission, or OAuth authorization.
4.2 Automated Decision-Making & AI Moderation
Algorithmic moderation systems and artificial intelligence models utilize automated decision-making tools to evaluate chat interactions and form submissions in real time. These algorithms may automatically flag policy breaches, reject suspicious form entries, or apply server moderation restrictions (such as muting or kicking users).
Users who believe an automated moderation or form evaluation action was executed erroneously retain the right to contest the outcome and request manual human review by contacting our administration team at [email protected].
5. Data Retention Policy
The duration for which information is stored depends on the specific register and function of the service used across IbbiWibbi:
- Account & Profile Data: Account details, OAuth tokens, and Discourse forum profile data are kept while your account remains active to maintain user authentication and community continuity.
- Discord Message Records: Message content, timestamps, author identification numbers, and media metadata are archived permanently in our databases to support long-term moderation, statistical analysis, and machine learning training unless a formal deletion request is processed.
- Form & Telemetry Data: Form responses and anti-abuse telemetry metrics are retained for as long as necessary to evaluate applications, prevent duplicate/fraudulent entries, and maintain community staff records.
- Technical Logs: Operational usage data, command logs, error tracebacks, IP logs, and session cookies are retained on a temporary cycle and systematically purged to preserve infrastructure performance and user privacy.
When you remove the bot from a guild or terminate your account, active configuration settings are revoked, although historically processed datasets and anonymized text samples remain securely stored to ensure the structural integrity of our platform and analytical models.
6. International Data Transfers**
Because our digital infrastructure relies on global hosting providers and network acceleration platforms like Cloudflare, personal information and raw server datasets may be transferred, stored, and processed across international boundaries (including in Australia, the United States, and the European Economic Area).
All international transfers are safeguarded through data processing agreements, standard contractual clauses, and robust encryption protocols (both in transit and at rest) to ensure your data remains protected under equivalent statutory privacy standards.
7. Data Security, Governance & Incident Notification
7.1 Data Governance & Database Access
Database access is restricted to the minimum number of IBBI Group administrators and operational staff necessary to maintain, develop, and operate the service. All stored information, including user account details, form responses, forum content, and message logs, is safeguarded using strict role-based permission controls and multi-factor access authentication to prevent unauthorized internal exposure.
7.2 Data Breach Notification Protocol
In the event of a security incident or eligible data breach that creates a real or serious risk of harm to individuals, IBBI Group will promptly notify impacted users and report the incident to the Office of the Australian Information Commissioner (OAIC) and other relevant statutory privacy authorities as required by applicable laws.
8. Cookies & Tracking Technologies
We use essential cookies and similar tracking technologies to log you into your account, keep your session secure, and save your UI preferences. Cookies are small text files placed on your computer to collect standard Internet log information. For more information, please visit allaboutcookies.org.
- Note: Session cookies are a critical operational requirement to use our web dashboard and forum. If you do not agree to cookie placement, you must discontinue using our online dashboard and web services.
9. Third-Party Services
To deliver our website, web dashboard, Discord bot, and Discourse forum, IbbiWibbi relies on external infrastructure and third-party service providers. These integrated platforms include:
- Discord Inc.: For user authentication via OAuth2, guild permission checks, and message interaction.
- Cloudflare Inc.: For DNS management, web application firewall protection, and global content delivery.
- Discourse: For community forum hosting and message delivery.
- External Hosting Facilities: Where our databases, application servers, and AI models operate.
Each third-party service provider operates under its own terms of service and privacy policy, governing how they process and safeguard data within their systems. While we select established providers to ensure platform stability, IBBI Group does not control and cannot be held responsible for service disruptions, API updates, or privacy practices initiated by these external entities. We encourage users to review the privacy policies of Discord, Cloudflare, and any other connected service to fully understand how their data is handled.
10. User Data Rights
Under the Australian Privacy Principles, GDPR, and applicable privacy laws, every user is entitled to the following rights regarding their personal information:
- The Right to Access: You have the right to request copies of your personal data. We may charge a reasonable administrative fee for fulfilling excessive or repetitive requests.
- The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- The Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data under certain conditions (subject to statutory record-keeping obligations and legitimate research interests).
- The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- The Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, machine-readable format.
- The Right to Object: You have the right to object to our processing of your personal data, including automated profiling or machine learning usage, under certain conditions.
To exercise any of these rights, please contact our legal team at [email protected]. We will require you to verify your identity before processing your request and will respond within 30 days as required by law.
11. Children's Privacy (COPPA Compliance)
IbbiWibbi does not knowingly collect or solicit Personal Identifiable Information from children under the age of 13. If you are under 13, please do not use our services or submit any personal information through our forms, dashboard, or Discord bot. If you believe a child under 13 has provided personal information to us, please contact us immediately at [email protected], and we will take prompt steps to purge such information from our records.
12. California Privacy Rights (CCPA / CPRA & Shine the Light)
If you reside in California, California law provides you with specific rights regarding your personal information:
Shine the Light Law (Civil Code § 1798.83): Permits California residents to request details regarding disclosures of personal information to third parties for direct marketing purposes. IBBI Group does not sell or share your personal data with third parties for direct marketing.
California Consumer Privacy Act (CCPA/CPRA): Grants California residents the right to know what personal data is collected, request deletion of personal information, opt out of the sale or sharing of personal data, and receive non-discriminatory treatment for exercising privacy rights.
To submit a California privacy request, please send an email to [email protected] with the subject line "California Privacy Request".
13. Changes to the Privacy Policy
IbbiWibbi reserves the right to modify or update this Privacy Policy at any time. Revised versions will be posted directly to this page with an updated "Last Updated" date. Unless otherwise specified, changes take effect immediately upon posting. Your continued use of the Websites and Online Services after an updated policy is published constitutes your binding acceptance of the revised policy.
14. Contact Information & Regulatory Complaints
If you have questions, concerns, or legal inquiries regarding this Privacy Policy, or if you wish to lodge a complaint about how your data has been handled, please contact us at:
IBBI Group Legal & Privacy Team
Email: [email protected]
Website: ibbi.dev
If you are not satisfied with our response to a privacy complaint, Australian residents may escalate their grievance to the Office of the Australian Information Commissioner (OAIC):
Website: www.oaic.gov.au
Phone: 1300 363 992