Privacy Policy
Last updated: August 15, 2026
This explains what data the Swiggy Instamart Discord Bot ("the Bot") collects, why, and what you can do about it.
1. What We Collect
From Discord
- Your Discord user ID, username, and server membership, needed to route commands and responses to the right person and server.
From Swiggy, once you link your account
- An OAuth access token scoped to the permissions you approve during login. We do not collect or store your Swiggy password.
- Order and cart data necessary to complete the actions you request, such as what's in your cart and order status. This is fetched live through Swiggy's API.
We do not collect
- Payment card details, which are handled entirely by Swiggy.
- Your Swiggy password.
- Location data beyond what you provide directly to Swiggy through its own app or site for delivery purposes.
2. Why We Collect It
Solely to make the Bot function: authenticating you, showing your cart, placing orders you request, and confirming order status back to you in Discord. Nothing here is used for advertising, resold, or shared with third parties beyond what's needed to complete your request through Swiggy's API.
3. How Long We Keep It
- OAuth tokens are stored only as long as your account stays linked. Unlinking or revoking access removes them.
- Discord IDs are retained only while you're using the Bot in a server it's active in.
- We do not keep a permanent log of your order history beyond what's needed for the Bot to function in the moment. Your actual order history lives with Swiggy.
4. Your Controls
- Unlink anytime: revoke the Bot's access via Swiggy's account settings or the Bot's own unlink command. This immediately invalidates the stored token.
- Data deletion: if you want any residual data tied to your Discord ID removed, reach out through the support server and it'll be handled.
5. Security
Tokens are handled over HTTPS end-to-end, and the OAuth flow follows the PKCE extension, an industry standard for preventing token interception. This is an independently run project, not a corporate-grade security operation, so treat it accordingly and do not expect enterprise SLAs.
6. Third Parties
The only third party involved is Swiggy/Instamart itself, since that's who the Bot integrates with. We do not sell, rent, or share your data with advertisers, analytics brokers, or anyone else.
7. Changes to This Policy
If what's collected or how it's used changes, this page will be updated with a new “Last updated” date. Material changes affecting how your data is handled will also be flagged in the support server.
8. Contact
Questions, data deletion requests, or concerns can be raised in the support Discord server or via the contact listed on the Bot's website.