Antonio — Full Documentation

Privacy Policy

1. What Information We Collect

When you use Antonio, we collect and process only what is strictly required to deliver the requested feature:

We do not collect, store, or process:

• Message content except what you explicitly send as a command or application answer
• Voice data, video, or screen share content
• IP addresses or device fingerprints
• Direct messages between users
• Payment or financial information of any kind
• Location data

2. How We Use Your Information

Your data is used solely to operate and improve Antonio:

• Providing all bot features (moderation, giveaways, tickets, verification, QOTD, music, AI, etc.)
• Persisting server-specific configuration between bot restarts and reconnects
• Enforcing moderation actions at the request of server administrators
• Detecting and preventing abuse, spam, self-bots, and AUP violations
• Responding to support requests and data rights requests
• Generating aggregate, anonymised usage statistics with no personally identifiable information

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases are:

• Legitimate Interests — Processing is necessary to provide functionality and prevent misuse
• Consent — By inviting Antonio or using its commands, you consent to this policy
• Legal Obligation — We may process data if required by applicable law

4. Data Sharing and Third Parties

We never sell, rent, or trade personal data. Limited sharing occurs only where technically necessary:

• Cloudflare Workers — Verification and application portals hosted on Cloudflare infrastructure. Cloudflare logs basic request metadata under their own privacy policy.
• Upstash Redis — When configured, provides fast in-memory persistence with AES-256 encryption at rest. Data is replicated, not shared externally.
• Discord API — All bot actions interact with Discord's API. Discord's own Privacy Policy governs their data handling independently.
• Legal Compliance — We may disclose data if compelled by a valid legal process, court order, or government authority.

5. Your Rights

Depending on your jurisdiction, you may have rights including: Access · Rectification · Erasure ("right to be forgotten") · Portability · Objection · Restriction of processing. To exercise any right, contact us via the Contact section. We respond within 30 days.

6. Data Security

We implement technical and organisational measures including encrypted storage (AES-256), TLS 1.2+ in transit, environment-variable secret management, restricted access controls, and regular dependency audits. No system is 100% secure; we cannot guarantee absolute security.

7. Children's Privacy

Antonio is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe a child has submitted data, contact us immediately and we will delete it.

8. Changes to This Policy

Material changes will be announced in our support server. Continued use after any change constitutes acceptance of the updated policy.

Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you and the Antonio development team ("we", "us", "our"). By accessing or using Antonio ("the Service"), you confirm that you are at least 13 years of age, have read and understood these Terms, and agree to be bound by them in their entirety.

2. Description of Service

Antonio is a multi-purpose Discord bot providing the following capabilities (among others): real-time moderation, automated rule enforcement (automod), music playback in voice channels, AI-powered conversation and image analysis, giveaway management with quantum-random winner selection, member verification via Cloudflare Turnstile and Discord OAuth, ticket-based community support systems, staff application portals, Question of the Day automation, welcome and booster event messages, anti-raid and anti-nuke server protection, role management, sniping, AFK tracking, reminders, tags, notes, and a web-based management dashboard. The Service is provided free of charge. We reserve the right to modify, suspend, or discontinue any feature at any time without notice.

3. Eligibility

• You must comply with Discord's Terms of Service and Community Guidelines at all times
• You must be at least 13 years of age (or the minimum legal age in your jurisdiction)
• Server administrators who invite Antonio accept responsibility for ensuring their community's use complies with these Terms
• You must not use Antonio if you are legally prohibited from doing so in your jurisdiction
• You must not use a self-bot, user-bot, or automated account to interact with Antonio

4. Permitted Uses

Antonio may be used for:

• Legitimate server moderation and community management
• Community entertainment: giveaways, music, games, fun commands
• Member verification, onboarding, and application management
• AI-assisted conversation and question answering within Discord's content policies
• Automated moderation (automod) to enforce server-defined rules
• Ticket-based support systems for community members
• Server analytics, QOTD, welcome messages, and role automation

5. Prohibited Uses

You agree not to use Antonio to:

• Harass, bully, threaten, stalk, or abuse any user
• Spread hate speech, discriminatory content, or content targeting protected characteristics
• Distribute CSAM, non-consensual intimate imagery, or any illegal content — zero tolerance, reported immediately to authorities
• Engage in spamming, message flooding, or repeated mass command invocations
• Exploit bugs, unintended bot behaviour, or race conditions for personal gain or to harm others
• Circumvent moderation actions, server bans, global bans, or rate limits imposed by us or server administrators
• Impersonate Antonio, our staff, other bots, or other users
• Distribute malware, phishing links, scam links, or harmful executables
• Reverse engineer, decompile, disassemble, or attempt to extract Antonio's proprietary source code
• Use Antonio to facilitate fraud, market manipulation, account theft, or any other illegal scheme
• Access or attempt to access our HTTP API endpoints beyond normal usage patterns (no scripted scraping or automated requests)
• Use Antonio in any manner that degrades service availability for other users

6. Server Administrator Responsibilities

If you are a server administrator who has invited Antonio:

• You are solely responsible for how Antonio is configured and used within your server
• You must not configure Antonio to discriminate against, harass, or harm users based on protected characteristics
• You must not use Antonio's moderation tools as a weapon against users for illegitimate reasons
• You agree to cooperate with our team if we investigate suspected misuse originating from your server
• You are responsible for ensuring that your server's automod configuration, verification requirements, and application questions comply with applicable law and Discord's policies
• You acknowledge that bot owner-reserved commands (global ban, bot-wide toggle, infrastructure management) are not accessible to server administrators under any circumstances

7. AI Features

Antonio includes AI-powered conversation features. You agree that when using AI features:

• You will not attempt to "jailbreak" or manipulate the AI to produce prohibited content
• You understand AI responses may be inaccurate, outdated, or incomplete — do not rely on them for medical, legal, financial, or safety-critical decisions
• Conversations are processed through third-party AI APIs; their data handling is governed by their respective policies
• You will not use AI features to generate content that violates Discord's guidelines or these Terms

8. Music Features

Antonio's music playback streams audio from publicly available sources. You agree that:

• You will only play content you have the right to play in a Discord voice channel
• Music features are for personal, non-commercial, private community use only
• We are not responsible for the content you choose to play through Antonio
• Rights holders may request removal of specific content via our DMCA process

9. Intellectual Property

All code, design, branding, and content comprising Antonio are the exclusive property of the Antonio development team. You receive a limited, non-exclusive, non-transferable, revocable licence to use the Service solely for its intended purpose. You may not copy, modify, distribute, sublicense, sell, or create derivative works without explicit written permission.

10. Disclaimer of Warranties

The Service is provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the Service will be uninterrupted, error-free, secure, or meet your specific requirements.

11. Limitation of Liability

To the maximum extent permitted by applicable law, the Antonio team shall not be liable for any indirect, incidental, special, consequential, or punitive damages — including loss of data, revenue, goodwill, or profits — arising from your use of or inability to use the Service. Our total aggregate liability shall not exceed USD $0, as the Service is provided free of charge.

12. Termination

We reserve the right to terminate or restrict access to Antonio at any time, with or without notice, for any violation of these Terms or conduct we deem harmful. You may terminate your use at any time by removing Antonio from your server. Upon termination, your data will be retained per our Data Retention Policy and then deleted.

13. Indemnification

You agree to indemnify and hold harmless the Antonio development team, its contributors, and affiliates from any claims, damages, losses, liabilities, and expenses (including legal fees) arising from your use of the Service, your violation of these Terms, or your violation of any third-party rights.

14. Dispute Resolution

Any disputes shall first be attempted to be resolved through informal negotiation. Contact us via the Support Server or email. If unresolved within 30 days, disputes may proceed to binding arbitration under applicable arbitration rules. Class action claims are waived to the fullest extent permitted by law.

15. Governing Law

These Terms shall be governed and construed in accordance with applicable law. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

16. Changes to Terms

We may revise these Terms at any time. Continued use after any change constitutes acceptance of the updated Terms. Significant changes will be announced in our official support server with reasonable advance notice where possible.

17. Entire Agreement

These Terms, together with the Privacy Policy and Acceptable Use Policy, constitute the entire agreement between you and the Antonio team regarding the Service and supersede all prior agreements and understandings.

Security Policy

1. Our Security Practices

• Encrypted Storage — All persistent data encrypted at rest (AES-256 via Upstash Redis where applicable)
• TLS in Transit — All HTTP communications use TLS 1.2 or higher
• Secret Management — Bot tokens, API keys, and secrets stored exclusively as environment variables, never hardcoded
• Least Privilege — Antonio requests only the Discord permissions required to function
• Rate Limiting — All HTTP API endpoints include rate limiting to prevent abuse and DoS
• Input Validation — All user-supplied inputs (command arguments, dashboard forms, application answers) are validated and sanitised
• Authentication — Dashboard passwords are stored as bcrypt hashes (never plaintext). Session tokens are cryptographically random UUIDs.
• OAuth CSRF Protection — State parameters used in all Discord OAuth flows to prevent CSRF attacks
• Dependency Monitoring — Third-party Python packages reviewed and updated regularly
• Access Controls — Privileged commands gated behind Discord permission checks; bot-owner commands restricted by hardcoded owner ID allowlist

2. Reporting a Vulnerability

Follow responsible disclosure:

1. Do not exploit the vulnerability beyond demonstration
2. Do not access, modify, or delete others' data
3. Do not publicly disclose until we have patched it
4. Contact us privately via DM to the developer or our support server

Include in your report: clear description · steps to reproduce · potential impact and severity · proof-of-concept code or screenshots (if safe to share).

3. Response Timeframes

4. Anti-Nuke & Anti-Raid

Antonio includes built-in protective modules that monitor for: mass channel/role deletion · mass bans executed in rapid succession · unusual permission changes · webhook creation spikes · join rate anomalies. When triggered, the system removes elevated permissions from the offending account, logs the incident, and alerts the owner. These protections are best-effort and do not guarantee complete prevention of all attacks.

5. Incident Response

In the event of a confirmed security incident affecting user data: contain within 24 hours · notify affected users and server admins promptly · publish post-mortem in support server · notify applicable regulatory authorities if required by law (e.g. GDPR Art. 33).

Data Retention Policy

Requesting Data Deletion

• Server data — Remove Antonio from your server. All server-specific data deleted within 30 days.
• Personal data — Contact us via support channels. Erasure requests processed within 30 days.
• Moderation records — Server administrators can clear records using a.clearcase or a.clearwarns.

Storage Locations

• Primary — data.json on the bot's host server
• Cache — Upstash Redis (if configured) with AES-256 encryption at rest
• Cloudflare Edge — Request logs for web-facing services, subject to Cloudflare's own retention policy

Acceptable Use Policy

Prohibited Uses — Severity Table

Enforcement Actions

• Warning — Formal notice issued to server owner or user
• Feature Restriction — Specific features disabled for offending server or user
• Bot Removal — Antonio removed from server without notice
• Global Ban — User or server permanently blacklisted from all Antonio services
• Authority Report — Applicable for CSAM and credible physical threats — reported immediately

Actions are at our sole discretion. Appeals may be submitted via our support server.

Bot Owner Privileges

The following are reserved exclusively for verified bot owners and are inaccessible to any server administrator or user: global user ban/unban · bot-wide enable/disable toggle · shard management · infrastructure commands. Attempting to access these commands without authorisation is a critical violation.

Cookie & Session Policy

This policy explains how Antonio's web-facing services (Dashboard, Verification Portal, Application Portal) use sessions and storage.

We do not use Google Analytics, Facebook Pixel, advertising cookies, or any third-party tracking technology. We do not build profiles of individual users based on browsing behaviour.

Managing Sessions

• Log out of the dashboard at any time to immediately invalidate your session token
• Clearing your browser's localStorage removes all dashboard session data
• Verification and application tokens expire automatically and are single-use

DMCA & Content Policy

Copyright

Antonio's name, logo, source code, and all associated creative content are copyright © 2024–2026 the Antonio development team. All rights reserved.

Music Playback

Antonio's music features stream audio from publicly available sources. We do not store, cache, or redistribute copyrighted audio files. Music playback is intended for personal, non-commercial use within Discord voice channels. We are not responsible for content users choose to play. If you are a rights holder and believe Antonio's music features infringe your copyright beyond applicable fair use or safe harbours, contact us below.

DMCA Takedown Requirements

A valid DMCA notice must include:

1. Your full legal name, address, telephone number, and email
2. Description of the copyrighted work claimed to be infringed
3. Location of the allegedly infringing content (URL, server ID, message ID)
4. A good faith statement that the use is not authorised by the rights holder
5. A statement under penalty of perjury that the information is accurate and you are authorised to act
6. Your physical or electronic signature

Absolutely Prohibited Content

• Child sexual abuse material (CSAM) — zero tolerance; reported to NCMEC and relevant authorities immediately
• Malware, ransomware, viruses, or malicious code
• Non-consensual intimate imagery (revenge porn)
• Content promoting or facilitating terrorism, mass violence, or self-harm
• Content violating Discord's Community Guidelines

Feature Overview

Antonio is a full-suite Discord bot. Below is a complete overview of every major feature module.

Commands Reference

Prefix commands use a. · Slash commands use /. Arguments in <angle brackets> are required; [square brackets] are optional.

Moderation

Server Management

Information

Fun & Utility

AI

Giveaways

Bot Owner Only

Dashboard Guide

The Antonio dashboard (dash.html) lets you configure every feature visually without Discord commands. Access it via your bot's HTTP server URL.

Authentication

Two login methods are available:

• Discord OAuth — Click "Sign in with Discord". You will be redirected to Discord to authorise. Only servers where you have Manage Server permission will appear.
• Admin Password — Use a username/password account created via "Create Account". Password accounts must be linked to a Discord ID via the OAuth flow during signup.

Server Selection

After login, you are shown a grid of servers where you have Manage Server permission AND Antonio is present. Click a server card to open its configuration.

Configuration Panels

HTTP API Endpoints

All dashboard configuration is backed by an HTTP API running on the bot's server. Key endpoints:

Contact & Support

Questions about these policies, a security issue, or need help? Reach us through any channel below.

Response Times