What changed
Date of effect: 5/2/26
- Updated to reflect full data handling disclosures
- Added third-party service detail for Exchange Rate API and Discord
- Clarified data deletion policy for confirmed vs. unconfirmed loans
Information We Collect
Personal Information
The Bot collects the following information:
- Reddit Usernames: Both lender and borrower usernames are stored
- Loan Amounts: The principal amount and currency of each loan
- Loan Dates: Creation date, confirmation date, payment dates, and status change dates
- Post and Comment IDs: Reddit post and comment identifiers for loan tracking
- Loan Status: Whether loans are confirmed, paid, unpaid, or defaulted
What We Do NOT Collect
We do NOT collect:
- Real names or personal identification
- Email addresses
- Physical addresses
- Phone numbers
- Financial account information (bank account numbers, credit card numbers, etc.)
- Social security numbers or government-issued identification
- Any sensitive or financial data
- Any information beyond Reddit usernames and loan transaction data
Important: The Bot serves as a ledger only and records interactions between users. At no point does the Bot collect, store, or process any sensitive or financial data. Users should never send any type of sensitive data to the Bot, as it is not designed to receive, process, or store such information. The Bot has no fees for its usage and is provided free of charge.
How We Use Your Information
Primary Purpose
Your information is used to:
- Track and record loan transactions (as a ledger only)
- Maintain loan history and status
- Enable users to verify loan history using the
$checkcommand - Provide transparency in loan tracking
Note: The Bot functions solely as a ledger that records interactions. It does not process payments, handle financial transactions, or collect sensitive financial information. The Bot has no fees and is provided free of charge.
Data Processing
- Loan data is processed automatically when you use Bot commands
- Data is stored to maintain a permanent record of loan transactions
- Data is displayed when users request loan history
Data Storage
Storage Location
Your loan data is stored in Devvit Redis — per-subreddit data storage managed by Reddit's Devvit platform. All data remains within Reddit's infrastructure and Reddit controls all data retention and deletion.
Data Retention
- Loan records are stored in Devvit Redis (Reddit's infrastructure)
- Deleted loans (unconfirmed only) are marked with a deletion timestamp
- Confirmed loans cannot be deleted and are retained indefinitely
- All data retention is controlled by Reddit's infrastructure
Data Access and Visibility
Public Access
- Loan data is visible to anyone using the
$checkcommand - Loan history is public and transparent by design
- This transparency helps build trust in the loan tracking system
Moderator Access
- Subreddit moderators can view all loans in their subreddit
- Moderators have access to loan management features
Third-Party Access
- Exchange Rate API: Used to fetch published exchange-rate tables for currency conversion. No Reddit usernames, loan IDs, post IDs, comment IDs, or loan-history content are sent.
- Discord Webhooks (Optional): If subreddit moderators enable Discord notifications, loan event metadata is sent to the configured Discord webhook endpoint. This may include lender username, borrower username, loan ID, amount, currency, and the event type (created, confirmed, paid, unpaid, or deleted).
- Reddit/Devvit: Platform provider has access to data stored on their infrastructure.
User Rights
View Your Data
- You can view your loan history using the
$check <username>command - Loan data is publicly accessible for transparency
Delete Your Data
- Unconfirmed Loans: Lenders can delete accidental, unconfirmed loans using the
$deletecommand - Confirmed Loans: Once a loan is confirmed by the borrower, it cannot be deleted
- This restriction protects the integrity of the loan tracking system
Data Correction
- Loan amounts and status can be updated by authorized users (lender for payments, borrower for confirmation)
- Historical loan records cannot be modified after confirmation
Data Sharing
No Sale of Data
- We do not sell your personal information
- We do not share your data with third parties for marketing purposes
Service Providers
We share data only with necessary service providers:
- Exchange Rate API: Currency conversion service used to retrieve current exchange-rate tables. We do not send Reddit usernames, loan IDs, or comment/post content to this provider.
- Discord: Optional webhook delivery provider used only when moderators enable Discord notifications for a subreddit. In that case, the webhook payload may include lender username, borrower username, loan ID, amount, currency, and loan event status needed to render the notification.
- Reddit/Devvit: Platform infrastructure (all data stored on Reddit's infrastructure)
These providers are bound by their own privacy policies and data protection measures.
Data Security
Security Measures
- Data is stored on secure, encrypted databases
- Access is controlled through Reddit's authentication system
- API keys and sensitive credentials are stored securely
Limitations
- While we implement security measures, no system is 100% secure
- We cannot guarantee absolute security of your data
- Users should be aware that loan data is publicly visible by design
Third-Party Services
Exchange Rate API
- Purpose: Currency conversion for multi-currency loans
- Data Shared: No Reddit usernames, loan IDs, post/comment IDs, or loan-history content. Requests are limited to the configured API key and standard request metadata needed to retrieve published exchange-rate tables.
- Provider: exchangerate-api.com
Discord Webhooks (Optional)
- Purpose: Deliver moderator-enabled loan event notifications outside Reddit
- Data Shared: Lender username, borrower username, loan ID, amount, currency, and loan event status needed to render the notification message
- Provider: discord.com
Reddit/Devvit
- Purpose: Platform hosting and infrastructure
- Data Shared: All data stored on Reddit's Devvit platform (Devvit Redis)
- Privacy Policy: Reddit Privacy Policy
Children's Privacy
The Bot is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us.
International Data Transfers
Your data may be stored and processed in servers located outside your country of residence. By using the Bot, you consent to the transfer of your data to these locations.
Compliance
This Bot complies with:
- Reddit's Data API Terms: All data stored within Reddit's infrastructure (Devvit Redis)
- Reddit's Terms of Service: We operate within Reddit's platform rules
- Devvit Data Governance Requirements: All data operations comply with Devvit's data governance policies
- User Consent: All data is collected with explicit user consent (users create loans via commands)
Content Deletion Policy: Since all data is stored in Reddit's infrastructure (Devvit Redis), Reddit controls all data retention and deletion. We have no external copies of user data to manage.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date. Continued use of the Bot after changes constitutes acceptance of the updated policy.
Your Consent
By using the LoanLedger bot, you consent to:
- The collection and storage of your loan data as described in this policy
- The public visibility of your loan history
- The use of third-party services for data storage and processing
- The permanent retention of confirmed loan records
Contact
For questions about this Privacy Policy or your data:
- Contact the subreddit moderators
- Contact the Bot administrator
- Review loan data using the
$checkcommand - Devvit support: support@loanledger.dev
- Devvit privacy: privacy@loanledger.dev
Data Deletion Policy
Unconfirmed Loans
- Lenders can delete accidental, unconfirmed loans
- Deleted loans are marked with a deletion timestamp
- Deletion is permanent and cannot be undone
Confirmed Loans
- Confirmed loans cannot be deleted
- This protects the integrity of the loan tracking system
- Loan history is permanent once confirmed
Account Deletion
- If you wish to stop using the Bot, you can simply stop creating new loans
- Existing loan records will remain in the system as part of the permanent history
- We cannot delete confirmed loan records
Acknowledgment
By using the LoanLedger bot, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree to this policy, please do not use the Bot.