Nefarious Copytrading privileged intents

• Message Content — YES (limited). Limited use: the process polls GET /channels/{id}/messages on one operator-configured signal channel and must read embed titles and descriptions (Pair, Order, Entry, SL, TPs) so it can copy those signals to the operators’ cTrader account. Discord blanks those fields without Message Content. There are no prefix or slash commands. The bot does not scan the rest of the server, DMs, or ordinary chat.
• Server Members — NO. The process never lists members, assigns roles, welcomes joins, or reads nicknames. It does not open a Gateway connection with Server Members.
• Presence — NO. The process never reads online, idle, DND, device, or streaming status.

What Discord is used for

• Message Content — read embed title/description on one signal channel (NEW TRADE / REENTRY / UPDATE)
• REST GET /channels/{id} — baseline last_message_id on startup
• REST POST /channels/{log}/messages — operator execution and error embeds
• No Guild Members, no Presence, no slash commands, no prefix commands

What does your application do?

Nefarious Copytrading is an internal, admin-only operations tool. It is not a public consumer product, not listed for other communities to install, and not an offer of a trading service to the public.

The Discord application polls one operator-configured analyst signal channel over the Discord REST API (GET /channels/{id}/messages) about every five seconds. It looks for existing rich embeds titled NEW TRADE ALERT / NEW TRADE IDEA / REENTRY / TRADE UPDATE. When the embed text matches a pair / order / entry / stop / take-profit card, the process may place orders on a cTrader account that the live-account operators already connected via Spotware’s Open API. It posts execution and error logs to a private operator Discord channel. There are no slash commands and no prefix commands. Ordinary members cannot attach a broker, cannot run the bot, and are not end users.

The bot does not welcome members, assign roles, level users, track invites, read presence, scan DMs, or read the rest of the server.

Do you have a public Privacy Policy?

Yes

Where is your Privacy Policy available?

Official Nefarious website (nefarious.trading) and this application's Discord profile.

Privacy Policy URL

https://www.nefarious.trading/legal/nefarious-copytrading/privacy

Terms of Service URL

https://www.nefarious.trading/legal/nefarious-copytrading/terms

Install URL (operators only; not a public listing): https://discord.com/oauth2/authorize?client_id=1523859110016188536&scope=bot

Why do you need the Message Content intent?

Message Content is required, and only for a limited job: reading the embed text of analyst trade cards in one configured channel.

The process does not use a Discord Gateway client for chat. It calls GET /channels/{channel.id}/messages on a single signal channel. Without Message Content, Discord returns empty content and empty embed titles/descriptions, so the parser cannot see Pair, Order, Entry, SL, or TP fields and cannot copy those signals to the operators’ cTrader account. It also cannot see TRADE UPDATE embeds (for example “TP1 HIT”) that move stops to breakeven or cancel pending orders.

This is not a command bot. There are no prefix commands and no slash commands. Members are not invoking the bot. The bot does not scan other channels, DMs, or ordinary chat. It does not welcome, level, or auto-moderate. Message text is not used to train machine-learning or AI models.

Proof links

• https://www.nefarious.trading/legal/nefarious-copytrading/intents#proof
• https://www.nefarious.trading/legal/nefarious-copytrading/privacy
• https://discord.com/channels/909011353342181426/1081025463654297640

Can users opt-out of having their message content data tracked?

Yes.

Yes, in the only way this tool works: the bot reads one operator-configured signal channel and ignores the rest of the server. Ordinary members are not end users and are not profiled. Anyone who does not post in that channel is not read. There is no public product and no always-on keyword scan. Operators can stop the process or change the channel id. Deletion requests: Business@nefarious.trading.

Are you storing message content data off-platform?

Yes.

Yes, limited operational copies for the operators — not a public member archive.

On the operator host (nefarious-copytrading data volume) we keep: (1) trades.json — parsed signal fields (pair, side, entry, SL, TPs), update text, execution metadata, and Discord message ids; unmatched messages may log the first ~200 characters plus embed titles; (2) state.json — last_message_id, a rolling list of processed message ids, and open-signal fields. This is so the process does not re-enter the same card after a restart.

We do not store a general chat log of the Discord, DMs, or public member profiles. cTrader OAuth tokens and broker client credentials are stored as operator secrets for the live account they already operate. Those are not Discord end-user credentials and are not published.

Will the message content data be used to train machine learning or AI models?

No.

• Storing API Data off-platform? Yes (parsed signal fields, message ids, operator event log, operator broker tokens).
• 30 days or less? No. trades.json appends events and is not auto-pruned to 30 days in the running code. state.json keeps the last 2000 processed Discord message ids plus open-signal fields while the process runs. Operator cTrader tokens persist on the data volume until rotated. Answer Discord’s “30 days or less?” question No.
• Deletion contact: Business@nefarious.trading (Business@nefarious.trading).
• Encrypting at rest? Discord requires encryption at rest if you store API Data. Select Yes only if the host volume that holds trades.json, state.json, and tokens.json is actually encrypted (for example BitLocker, LUKS, or NAS dataset encryption). Do not check Yes if those files sit unencrypted on disk.

Leave those boxes unchecked. If Discord asks why you do not need them:

Server Members: The process never lists members, assigns roles, welcomes joins, or reads nicknames. It does not open a Gateway connection with Server Members.

Presence: The process never reads online, idle, DND, device, or streaming status.

N/A — we are not applying for Presence
No — we do not collect presence

Signal channel (Nefarious / Czarfx cards): https://discord.com/channels/909011353342181426/1081025463654297640. The operator log channel is private. Privacy: /legal/nefarious-copytrading/privacy.

1. Signal embed (needs Message Content)

An analyst posts a rich embed. The process reads title and description — fields Discord blanks without Message Content — and extracts pair, side, entry, SL, and TPs. Members are not typing a command.

2. Operator “COPIED” log

The same process posts a confirmation embed to a private log channel and may send orders to the operators’ cTrader account. That is the entire product. It is not a public copytrading marketplace.