Privacy policy

Needs to cover, at minimum:

• What's collected: Discord ID, username, avatar, your profile fields, conversation content
• That conversations are sent to third-party model providers, and which ones
• Retention: how long backups are kept, and that end-of-rental backups are kept indefinitely
• Your rights: export, correction, deletion — and the buttons that do them
• Payment data is handled by Stripe and never touches these servers
• Cookies: a session cookie and a theme preference, nothing else
• Contact for data requests

Draft these properly — ideally with someone qualified — before the first real customer.