Devvit Policy

LoanLedger Bot Privacy Policy

Last Updated May 2, 2026

Devvit Policy

LoanLedger Bot Privacy Policy

How data is collected, used, retained, and protected for this service scope.

Reddit usernames and loan data onlyNo sensitive or financial data collectedAll data stored in Reddit infrastructure
Date of effect 5/2/26

What changed

Date of effect: 5/2/26

  • Updated to reflect full data handling disclosures
  • Added third-party service detail for Exchange Rate API and Discord
  • Clarified data deletion policy for confirmed vs. unconfirmed loans
Information We Collect

Personal Information

The Bot collects the following information:

  • Reddit Usernames: Both lender and borrower usernames are stored
  • Loan Amounts: The principal amount and currency of each loan
  • Loan Dates: Creation date, confirmation date, payment dates, and status change dates
  • Post and Comment IDs: Reddit post and comment identifiers for loan tracking
  • Loan Status: Whether loans are confirmed, paid, unpaid, or defaulted

What We Do NOT Collect

We do NOT collect:

  • Real names or personal identification
  • Email addresses
  • Physical addresses
  • Phone numbers
  • Financial account information (bank account numbers, credit card numbers, etc.)
  • Social security numbers or government-issued identification
  • Any sensitive or financial data
  • Any information beyond Reddit usernames and loan transaction data

Important: The Bot serves as a ledger only and records interactions between users. At no point does the Bot collect, store, or process any sensitive or financial data. Users should never send any type of sensitive data to the Bot, as it is not designed to receive, process, or store such information. The Bot has no fees for its usage and is provided free of charge.

How We Use Your Information

Primary Purpose

Your information is used to:

  • Track and record loan transactions (as a ledger only)
  • Maintain loan history and status
  • Enable users to verify loan history using the $check command
  • Provide transparency in loan tracking

Note: The Bot functions solely as a ledger that records interactions. It does not process payments, handle financial transactions, or collect sensitive financial information. The Bot has no fees and is provided free of charge.

Data Processing

  • Loan data is processed automatically when you use Bot commands
  • Data is stored to maintain a permanent record of loan transactions
  • Data is displayed when users request loan history
Data Storage

Storage Location

Your loan data is stored in Devvit Redis — per-subreddit data storage managed by Reddit's Devvit platform. All data remains within Reddit's infrastructure and Reddit controls all data retention and deletion.

Data Retention

  • Loan records are stored in Devvit Redis (Reddit's infrastructure)
  • Deleted loans (unconfirmed only) are marked with a deletion timestamp
  • Confirmed loans cannot be deleted and are retained indefinitely
  • All data retention is controlled by Reddit's infrastructure
Data Access and Visibility

Public Access

  • Loan data is visible to anyone using the $check command
  • Loan history is public and transparent by design
  • This transparency helps build trust in the loan tracking system

Moderator Access

  • Subreddit moderators can view all loans in their subreddit
  • Moderators have access to loan management features

Third-Party Access

  • Exchange Rate API: Used to fetch published exchange-rate tables for currency conversion. No Reddit usernames, loan IDs, post IDs, comment IDs, or loan-history content are sent.
  • Discord Webhooks (Optional): If subreddit moderators enable Discord notifications, loan event metadata is sent to the configured Discord webhook endpoint. This may include lender username, borrower username, loan ID, amount, currency, and the event type (created, confirmed, paid, unpaid, or deleted).
  • Reddit/Devvit: Platform provider has access to data stored on their infrastructure.
User Rights

View Your Data

  • You can view your loan history using the $check <username> command
  • Loan data is publicly accessible for transparency

Delete Your Data

  • Unconfirmed Loans: Lenders can delete accidental, unconfirmed loans using the $delete command
  • Confirmed Loans: Once a loan is confirmed by the borrower, it cannot be deleted
  • This restriction protects the integrity of the loan tracking system

Data Correction

  • Loan amounts and status can be updated by authorized users (lender for payments, borrower for confirmation)
  • Historical loan records cannot be modified after confirmation
Data Sharing

No Sale of Data

  • We do not sell your personal information
  • We do not share your data with third parties for marketing purposes

Service Providers

We share data only with necessary service providers:

  • Exchange Rate API: Currency conversion service used to retrieve current exchange-rate tables. We do not send Reddit usernames, loan IDs, or comment/post content to this provider.
  • Discord: Optional webhook delivery provider used only when moderators enable Discord notifications for a subreddit. In that case, the webhook payload may include lender username, borrower username, loan ID, amount, currency, and loan event status needed to render the notification.
  • Reddit/Devvit: Platform infrastructure (all data stored on Reddit's infrastructure)

These providers are bound by their own privacy policies and data protection measures.

Data Security

Security Measures

  • Data is stored on secure, encrypted databases
  • Access is controlled through Reddit's authentication system
  • API keys and sensitive credentials are stored securely

Limitations

  • While we implement security measures, no system is 100% secure
  • We cannot guarantee absolute security of your data
  • Users should be aware that loan data is publicly visible by design
Third-Party Services

Exchange Rate API

  • Purpose: Currency conversion for multi-currency loans
  • Data Shared: No Reddit usernames, loan IDs, post/comment IDs, or loan-history content. Requests are limited to the configured API key and standard request metadata needed to retrieve published exchange-rate tables.
  • Provider: exchangerate-api.com

Discord Webhooks (Optional)

  • Purpose: Deliver moderator-enabled loan event notifications outside Reddit
  • Data Shared: Lender username, borrower username, loan ID, amount, currency, and loan event status needed to render the notification message
  • Provider: discord.com

Reddit/Devvit

  • Purpose: Platform hosting and infrastructure
  • Data Shared: All data stored on Reddit's Devvit platform (Devvit Redis)
  • Privacy Policy: Reddit Privacy Policy
Children's Privacy

The Bot is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us.

International Data Transfers

Your data may be stored and processed in servers located outside your country of residence. By using the Bot, you consent to the transfer of your data to these locations.

Compliance

This Bot complies with:

  • Reddit's Data API Terms: All data stored within Reddit's infrastructure (Devvit Redis)
  • Reddit's Terms of Service: We operate within Reddit's platform rules
  • Devvit Data Governance Requirements: All data operations comply with Devvit's data governance policies
  • User Consent: All data is collected with explicit user consent (users create loans via commands)

Content Deletion Policy: Since all data is stored in Reddit's infrastructure (Devvit Redis), Reddit controls all data retention and deletion. We have no external copies of user data to manage.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last Updated" date. Continued use of the Bot after changes constitutes acceptance of the updated policy.

Contact

For questions about this Privacy Policy or your data:

Data Deletion Policy

Unconfirmed Loans

  • Lenders can delete accidental, unconfirmed loans
  • Deleted loans are marked with a deletion timestamp
  • Deletion is permanent and cannot be undone

Confirmed Loans

  • Confirmed loans cannot be deleted
  • This protects the integrity of the loan tracking system
  • Loan history is permanent once confirmed

Account Deletion

  • If you wish to stop using the Bot, you can simply stop creating new loans
  • Existing loan records will remain in the system as part of the permanent history
  • We cannot delete confirmed loan records
Acknowledgment

By using the LoanLedger bot, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree to this policy, please do not use the Bot.