Legal / Acceptable Use Policy
Acceptable Use Policy
What you can and can't do with Phantom.
Effective April 30, 2026
1. Who this applies to
This policy applies to anyone who interacts with Phantom — server admins who add the bot, moderators who use its commands, members of those servers when their messages are processed by features the admins enable, dashboard users, and developers using the Custom Branding feature to operate their own bot through Phantom. The policy is referenced from and incorporated into the Terms of Service; violating it is violating the Terms.
2. Prohibited content
You may not use Phantom to host, distribute, link to, schedule, or otherwise process:
- Child sexual abuse material (CSAM) or any sexualised content involving minors. Zero-tolerance, immediate termination and reporting per the Content Safety Policy.
- Content that promotes or organises terrorism, violent extremism, or imminent real-world violence.
- Non-consensual intimate imagery, doxxing material, or other content that violates the privacy of identifiable individuals.
- Content that infringes intellectual-property rights you don't own or have permission to use.
- Malware, phishing kits, credential stealers, or content designed to compromise other users.
- Content that facilitates the sale or distribution of illegal drugs, weapons regulated under your local law, or stolen goods.
- Hate speech directed at protected classes — racial, ethnic, religious, sexual orientation, gender identity, disability, or other categories protected under applicable law.
- Self-harm or suicide promotion content, except where expressly framed as harm-reduction or recovery support.
- Content explicitly prohibited by Discord's Community Guidelines or Terms of Service.
3. Prohibited conduct
Regardless of the content involved, you may not use Phantom to:
- Harass, intimidate, threaten, stalk, or coordinate harassment against any person.
- Impersonate another person, organisation, or entity in a way calculated to mislead. Custom Branding does not change this — even if your bot has its own identity, the bot must not pretend to be a person or organisation it isn't.
- Engage in fraud, deception, or misrepresentation — including pretending an automated message is from a human, or operating fake reviews / fake giveaways to deceive users.
- Manipulate Phantom's leaderboards, levelling system, or analytics by automating fake engagement.
- Use Phantom in a workplace, school, or other regulated setting in violation of that setting's rules.
- Encourage members to violate any of the rules in this section.
4. Technical rules
To keep Phantom available and stable for everyone, you may not:
- Attempt to reverse-engineer, disassemble, or otherwise extract the source code or models behind any non-public part of the service, except where applicable law explicitly permits it.
- Probe, scan, or test the vulnerability of any system or network without prior written permission. Coordinated disclosure is welcomed — open a private ticket in the Phantom support server.
- Bypass or attempt to bypass rate limits, IP blocks, or other access controls on the dashboard or the bot.
- Access the service via automated means other than published APIs and within their published limits — no scraping the dashboard, no spamming the bot with crafted gateway events, no using residential proxy pools to evade rate limits.
- Interfere with or disrupt the integrity or performance of Phantom, including by sending malicious payloads through fields the dashboard accepts.
- Use the service to mine cryptocurrencies, run distributed compute jobs, or otherwise consume resources for purposes unrelated to running a Discord community.
- Run multiple accounts to evade suspensions or bans imposed by Phantom or by Discord.
5. Discord platform rules
Phantom runs on Discord. You and we both have to comply with Discord's Terms of Service, Community Guidelines, and (for developers) Developer Policy. If something is prohibited there, it's prohibited here.
This includes restrictions on age-gated content, on collecting and storing message content for purposes other than what the bot needs, and on Discord-platform-specific abuses like fake account creation and circumventing Discord's safety measures.
6. Custom Branding
If you operate your own Discord application through Phantom's Custom Branding feature, you are the developer responsible for that application. In addition to the rules above:
- You must comply with Discord's Developer Policy, Verified Bot guidelines (if and when your application becomes verified), and Privileged Intents requirements for any intent your bot subscribes to.
- Your bot's own user-facing materials (privacy policy, terms, support contact) must accurately describe what your bot does. Don't claim functionality you don't have.
- You must keep your bot token confidential — even from your own moderators. Anyone with the token can act as the bot.
- You must not use Custom Branding to operate a bot that competes with Phantom by reselling Phantom's features under your own brand to unrelated third parties. (Operating your own community's bot is fine — that's the entire point. Reselling Phantom's runtime as a service is not.)
7. Reporting violations
If you see something through Phantom that violates this policy, report it through the Phantom support server. Open a ticket — it keeps the report private and routes it to the right team.
- Safety-critical reports (CSAM, threats of violence, terrorism): flag the ticket as a safety report — see the Content Safety Policy.
- Copyright takedowns: follow the formal flow on the DMCA Policy page.
- Other policy violations: open a ticket with enough context to investigate (server ID, channel ID, the bot feature involved, screenshots if relevant).
- Security vulnerabilities: open a private ticket — please don't disclose publicly until we've had a chance to fix.
8. Enforcement
We investigate reports proportionate to severity. Our response can include:
- A direct conversation with the responsible admin to clarify or correct.
- Removing the offending content from systems we control.
- Disabling specific Phantom features in the affected server.
- Removing Phantom from the server and refusing reinstallation by the responsible admins.
- Suspending or terminating Custom Branding applications.
- Suspending or terminating dashboard accounts associated with the violation.
- Reporting to Discord Trust & Safety, law enforcement, or copyright holders as appropriate.
We don't run a strict "three strikes" system; severity matters more than count. The most serious categories (Section 2's content list) get immediate termination and, where required, reporting.
9. Contact
Questions and active reports both go through the Phantom support server. Use the ticket flow described in Section 7 for anything you'd rather keep private.
Questions about this policy?
Reach us in the Phantom support server — open a ticket if it's a private matter (data request, safety report, takedown notice) so it goes straight to the team. Copyright takedowns follow the formal flow on the DMCA Policy page.