Skip to main content

Gordie Voice (Discord) — Privacy Policy

Companion document to the main CanadaGPT Privacy Policy. Where the two conflict on a Discord-voice-specific topic, this page governs.

Last updated: Draft — pending counsel review
Effective: TBD on launch

What this policy covers

This policy applies to the Gordie Voice Discord application — the bot that joins voice channels when an authorized user runs the /gordie listen or /gordie transcribe slash commands. It does not apply to the separate Gordie Discord text bot, which is covered by the main CanadaGPT Privacy Policy.

Gordie Voice processes audio from Discord voice channels in order to (a) produce a transcript of the conversation and (b) surface evidence summaries for factual claims made during the conversation. We designed it to minimize what is collected and how long it is kept; this page describes those choices in detail so that participants in a voice channel can make an informed decision about speaking while the bot is present.

What we collect and how long we keep it

Voice audio

  • How: While a session is active, Gordie Voice receives the audio streams of speaking participants in the voice channel as transmitted by Discord.
  • Where it goes:Audio is forwarded in real time to OpenAI's Realtime API for speech-to-text transcription and claim extraction (see "Third-party processors" below).
  • Retention by CanadaGPT: None. Audio is streamed; we do not write it to disk and do not retain copies after forwarding. The in-memory buffer is released as soon as a chunk is sent.
  • Retention by OpenAI:Per OpenAI's Enterprise Privacy commitments for API customers, prompts and audio are not used to train models and are subject to OpenAI's own retention policy (zero data retention is available on request for eligible accounts; see OpenAI Enterprise Privacy).

Transcripts

  • What:The text that OpenAI's API returns for each utterance, along with a session identifier and start/end timestamps relative to the session.
  • Storage: In Google Cloud Logging at INFO severity, retained 30 days, then auto-purged. Transcripts are not stored in our primary databases (Supabase or Neo4j).
  • Purpose: Operational debugging only. Transcripts are not made available to anyone outside the engineering team and are not used for any product feature or training.

Extracted claims and verdicts

  • What: When Gordie Voice is in fact-check mode (/gordie listen), it extracts short factual claims from the transcript (a sentence or two each) and submits them to our existing fact-check pipeline, which returns an evidence summary with source citations.
  • Storage: Claim text is hashed and cached alongside the verdict in our knowledge graph (Neo4j), keyed by the hash. This matches how fact-checks submitted via the CanadaGPT website are stored.
  • Retention: Indefinite, by design — cached verdicts speed up repeat fact-checks across the platform. Claim text itself is stored in plain form alongside the hash.
  • Visibility: Verdicts and the originating claim text become public artifacts when posted to the Discord thread. Discord owns those messages under their Privacy Policy; once posted, deletion requests for those specific messages must be addressed to the Discord server administrator.

Discord account identifiers

  • What: The Discord user ID of the person who invoked the slash command, the Discord guild (server) ID, and the voice and text channel IDs involved in the session.
  • Storage: In a discord_voice_sessions row in our Supabase database for cost tracking and abuse prevention. Retained for the lifetime of your CanadaGPT account; deleted within 30 days if you delete your account.

What we do not collect

  • We do not record or retain any audio file or audio-derived embedding.
  • We do not perform speaker diarization — the transcript does not attribute utterances to specific Discord users.
  • We do not capture or retain text messages posted in the voice channel's text chat by participants. (The bot only reads its own messages and posts new ones to a thread it creates.)
  • We do not subscribe to any voice channel without a fresh /gordie listen or /gordie transcribe invocation. The bot leaves voice and stops processing the moment the session ends.

Third-party processors

We rely on the following providers to deliver Gordie Voice. Each processes the data described above strictly to provide the service.

Disclosure to participants

We require Gordie Voice to make its presence and recording behaviour unambiguous to every voice-channel participant. The disclosure surfaces are:

  1. The bot's server nickname is changed to [LISTENING] Gordie for the duration of every session, visible in the Discord member list to every voice-channel participant.
  2. The bot's Discord activity status is set to Listening to #voice-channel-name for the duration of the session.
  3. A session-start announcement is posted to the voice channel's text chat naming the bot, the mode, the thread where output will be posted, and how to stop the session.
  4. Any user who joins the voice channel after the session has begun receives a direct message from the bot disclosing the active session.
  5. The bot does not connect to voice until the invoking user confirms an ephemeral consent dialog naming the disclosure behaviour above.

Server administrators are responsible for ensuring that voice-channel participants are made aware of Gordie Voice's presence in accordance with any applicable local consent law. CanadaGPT provides the disclosure surfaces described above; the server administrator decides whether to invoke the bot in the first place.

Legal basis

We process the data described above under the contractual necessity basis (to provide the service you requested by invoking the slash command) and the legitimate-interest basis (operational debugging of an automated system you have opted into). Voice channel participants who did not invoke the bot are processed under the legitimate interest of the invoking user and the server they have joined; participants who do not wish to be processed should leave the voice channel for the duration of the session.

Your rights

  • Access. Email privacy@canadagpt.ca with the Discord user ID you used to invoke the bot. We will return the rows from discord_voice_sessions and any extracted claims associated with that user ID.
  • Deletion. Deleting your CanadaGPT account via the existing in-app flow cascades through discord_voice_sessions within 30 days. To delete specific session records without deleting your account, email privacy@canadagpt.ca.
  • Discord messages.Verdicts and claim text posted into a Discord thread are owned by the server under Discord's policy. For deletion of those messages, contact the server administrator or use Discord's in-app message deletion if you have the necessary permission.
  • Correction. If you believe a posted verdict is materially inaccurate, email privacy@canadagpt.ca with the thread link. We will review and, where appropriate, update the cached verdict and post a correction in the thread.

Children

Gordie Voice is not directed at users under 13, and we do not knowingly process voice data from users under 13. If you become aware that a minor is participating in a voice channel where Gordie Voice is active, please stop the session and contact privacy@canadagpt.ca.

Changes

We will update this policy when the underlying processing changes — for example, if we add speaker diarization, change retention windows, or onboard a new third-party processor. Material changes will be announced in the canadagpt.ca changelog and via a message in any active Discord server where Gordie Voice has been installed.

Contact

Privacy questions, deletion requests, and correction requests: privacy@canadagpt.ca.