Last updated: August 12, 2026
The short version is a summary - the detailed sections below are the legally binding part.
These terms are an agreement between you (personally, or the entity you represent) and wallubot.com ("Wallu", "we", "us"), operated as a sole trader in Finland. They cover the Wallu Discord bot, our website, the admin panel, and any related services (together, the "Services"). Our Privacy Policy is part of this agreement.
By using the Services you agree to these terms. If you don't agree, please don't use the Services.
You must be at least 13 years old (and meet Discord's minimum age in your country). If you're a minor where you live, you need a parent or guardian's permission.
Wallu answers questions on Discord servers using AI models and the knowledge you configure (documents, FAQs, websites, channel history). It's intended for communities, businesses, and individuals providing support for their products and services.
AI answers are generated automatically and can be inaccurate, incomplete, or outdated. You're responsible for the knowledge you give the bot and for reviewing how it performs on your server. Don't rely on Wallu's answers as professional advice (legal, medical, financial, or similar), and always verify information that matters.
The Services are not designed for regulated data or industry-specific compliance regimes (such as HIPAA, FISMA, or GLBA). If your use case is subject to such rules, don't use Wallu for it. You must also use the Services in compliance with applicable data protection laws (such as the GDPR) and with the usage rules of our AI providers (for example OpenAI, Google, and providers reached through OpenRouter) - in short, no abusive or illegal use.
You own what you upload. When you add documents, FAQs, imported Discord content, or anything else for the bot to use ("Your Content"), it stays yours. You grant us a non-exclusive, worldwide license to store, process, and use it - only to operate, provide, and improve the Services (for example generating answers or analyzing how well they work). We do not train AI models on Your Content, and we don't publicly display it except as the bot's normal operation on your server.
By uploading content, you confirm that:
You're responsible for Your Content. If legal issues arise from content you've shared, you agree to address them and not hold us responsible. We don't actively monitor uploads, but we may remove content that violates these terms or is harmful.
Keep your own copies: Wallu is not a backup or archival service. To the extent permitted by law, we're not liable for loss or corruption of Your Content despite reasonable safeguards - keep your own backups of anything important.
Feedback: if you send us suggestions, bug reports, testimonials, or other feedback, we can use it freely to improve and promote Wallu. For content you intentionally submit for public display (like testimonials or reviews), you grant us a non-exclusive, royalty-free license to publish it in connection with the Services and our marketing - and if you ask us to stop using it, we will, within a reasonable time.
If you believe content available through the Services infringes your copyright, contact us at [email protected] and we'll look into it promptly.
Don't do bad things with Wallu. In particular, you agree not to:
If you break these rules we may suspend or terminate your access (see section 8).
Payments are processed by Stripe and Paddle - by purchasing, you also agree to their terms. You agree to provide accurate billing information and keep it up to date. Prices are in Euros; applicable taxes are added where required. We may change prices, and will communicate changes to you as required by law before they affect you.
We may refuse or cancel orders (for example on suspected fraud) and correct pricing errors, even after payment was requested or received - if we cancel something you already paid for, you'll be refunded.
We own (or license) the Services and everything in them - source code, design, text, graphics, logos, and trademarks. We grant you a non-exclusive, non-transferable, revocable license to use the Services for your personal or internal business purposes, subject to these terms. Don't copy, resell, republish, or commercially exploit the Services or our content without our written permission. All rights not expressly granted are reserved.
If you add Wallu to a Discord server, you're the one in control of what it can access and how it's used. You're responsible for:
We're not liable for issues arising from how you've configured the bot's access or from content it processes on your instruction. For GDPR purposes, the Data Processing Agreement below applies between you and us.
You can stop using Wallu at any time - remove the bot and/or cancel your subscription. We may suspend or terminate your access if you breach these terms, abuse the Services, or where we reasonably need to (for example for legal or security reasons). Where practical, we'll warn you first - but for serious violations we may act immediately. After termination, data deletion follows our Privacy Policy and the DPA below.
Wallu evolves constantly - we may add, change, or remove features at any time, and we can't guarantee uninterrupted availability. We're not liable for downtime, modifications, or discontinuance of the Services, though for paid plans the refund policy above applies.
We may also update these terms. The "Last updated" date at the top reflects the current version, and changes take effect when posted here unless we state a later date. For significant changes we'll aim to give reasonable notice (for example via our Discord or the panel). Continuing to use the Services after changes take effect means you accept them.
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. TO THE EXTENT PERMITTED BY LAW, YOUR USE OF THE SERVICES IS AT YOUR OWN RISK. IN PARTICULAR, WE DO NOT WARRANT THAT AI-GENERATED ANSWERS ARE ACCURATE, COMPLETE, OR FIT FOR ANY PARTICULAR PURPOSE.
TO THE EXTENT PERMITTED BY APPLICABLE LAW: (A) WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, DATA, OR GOODWILL; AND (B) OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICES IS LIMITED TO THE AMOUNTS YOU PAID US IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, OR EUR 50 IF YOU HAVEN'T PAID US ANYTHING.
Nothing in these terms limits liability that can't be limited by law (such as liability caused by fraud, gross negligence, or willful misconduct). If you're a consumer in the EEA or UK, your statutory rights are not affected.
You agree to defend and indemnify us against third-party claims, losses, and expenses (including reasonable legal fees) arising from your use of the Services in breach of these terms, Your Content, or your violation of law or third-party rights.
These terms are governed by the laws of Finland. If something goes wrong, talk to us first - we're small and responsive, and most issues can be sorted out informally. Both parties agree to attempt informal resolution for at least 30 days before formal proceedings.
If informal resolution fails, disputes shall be finally resolved by arbitration under the rules of the Finland Chamber of Commerce, in English, on an individual basis (to the extent permitted by law). This arbitration clause does not apply to consumers in the EEA/UK or where prohibited by law - such users may bring claims in the courts of their country of residence, and EU consumers may also use the European Commission's online dispute resolution platform. Either party may seek injunctive relief in court to protect its rights (such as intellectual property or data security). California residents may also contact the Complaint Assistance Unit of the California Department of Consumer Affairs.
This DPA is part of these terms, between the Discord server administrator or customer ("Controller") and Wallu ("Processor"), operated as a sole trader (elinkeinonharjoittaja) in Finland. Terms like "Personal Data", "Processing", and "Data Subject" have the meanings given in the GDPR (EU 2016/679).
This DPA applies when we process Personal Data on your behalf while providing the Services: collecting and storing Discord data via the Discord API, analyzing message content to generate answers, processing uploaded documents and FAQs, and usage analytics and error logging. We process Personal Data only to provide the Services and on your documented instructions (your configuration of the bot counts as instructions), unless required by law to do otherwise.
Data obtained through the Discord API: user IDs and usernames, message content and IDs, channel and server IDs, timestamps, roles and permissions, and message attachments. Data you provide: documents, FAQs, and any other content you upload or configure.
You authorize us to engage subprocessors to provide the Services. Our current primary subprocessors are:
- OpenAI and Google (Gemini) - AI processing to generate answers
- OpenRouter - AI gateway routing requests to a whitelist of approved inference providers
- Perplexity - web search, where the web search feature is enabled
- Anthropic - internal AI tooling used to operate, maintain, and develop the service
- Hetzner - EU cloud hosting and backups
- Cloudflare - CDN and security
The AI subprocessors don't train models on this data; they either operate under zero data retention or retain inputs for a limited time for abuse and security monitoring, and may process data outside the EEA (see section 7).
Where requests are routed through OpenRouter, we restrict routing to a whitelist of approved inference providers. A provider is only whitelisted if it (a) does not train on the data we send it, (b) either offers zero data retention or retains inputs for a limited time for abuse and security monitoring, and (c) operates from the EU, UK, US, or another jurisdiction with comparable data protection standards - providers based in jurisdictions that don't meet that bar, including China, are excluded.
We ensure our subprocessors are bound by data protection obligations consistent with this DPA and will inform you of intended additions or replacements (for example via this page's "Last updated" date or our Discord); you may object on reasonable grounds. A current list is available on request.
We keep Personal Data only as long as needed to provide the Services. Discord message content follows the retention rules in our Privacy Policy: deleted within 30 days, with backups expiring within another 30 days. Upon termination of the Services, imported content and stored credentials are wiped within about 30 days, and all remaining Personal Data is deleted within 180 days, unless the law requires us to keep it (for example records of consents). Contact us if you need deletion sooner.
We implement appropriate technical and organizational measures: encryption in transit and at rest, access controls and authentication, secure development practices, and regular security review. Considering the nature of the processing, we'll provide reasonable assistance with Data Subject requests (access, deletion, etc.) and with your GDPR obligations regarding security and impact assessments.
We will notify you without undue delay after becoming aware of a Personal Data breach affecting your data.
Our own servers and backups are hosted in the EU. Where a subprocessor processes Personal Data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses.
Our total liability under this DPA is limited to the amounts you paid us in the twelve months preceding the incident. This DPA is governed by the laws of Finland.
Questions about these terms, or want to resolve a complaint? Reach out: