Short answer: it can only do what you allow. Start with the basics, and add permissions only for the features you want.
/configure setups (building channels and roles for you) may ask for Administrator: you can grant it
just for that setup and remove it straight after.Levels, rank cards, level-up messages, the economy, AI chat, the starboard and minigames all work with just these 9 permissions:
| Permission | Used for |
|---|---|
| View Channels | Seeing the channels it works in |
| Send Messages (and in threads) | Replies, level-ups, rank cards |
| Embed Links | Formatted replies |
| Attach Files | Rank, level-up and welcome images |
| Read Message History | Replying to messages |
| Add Reactions | Starboard, polls |
| Use External Emojis | VoidBox's own emojis |
| Use Application Commands | Slash commands |
Each extra feature needs one more permission. Add it in Server Settings → Roles → VoidBox whenever you're ready:
| Feature | Permission |
|---|---|
| Level-reward roles, reaction roles, verification | Manage Roles |
| Anti-nuke, moderation stats | View Audit Log |
| Spam and word filters | Manage Messages |
| Timeouts for spam and warnings | Moderate Members |
| Tickets, lockdown, stat channels | Manage Channels |
| Anti-raid, honeypot, moderation commands | Kick / Ban Members |
VoidBox has a free anti-nuke you can switch on (Dashboard → Moderation → Anti-nuke). If anyone, including another bot or a hacked admin, bans, kicks or deletes too fast, it takes their roles away and alerts the owner. It needs Manage Roles and View Audit Log, and it never acts on the server owner.
Scam and malware protection is free on every server. VoidBox checks against public lists and a malware database, plus its own checks. Nothing is opened or run, and none of the free checks use AI.
The lists are fetched every 6 hours. Big safe sites such as YouTube, Tenor and Spotify can never be blocked, even if a list adds them by mistake. Premium adds AI moderation for text and images.
| What | Kept? |
|---|---|
| Messages, for levels and stats | Only that a message happened and when. Never the text. |
| Your chats with the AI | Your last few exchanges, names removed, for 7 days. Card numbers, phone numbers, emails and ID numbers are stripped first. |
| The AI's note about you | Until you delete it. You can read and edit it on the dashboard. |
| Message log (if your server turns it on) | Recent message text in logged channels for 24 hours, to show edits. |
| Voice and voice messages | Turned into text, and the recording is not saved by VoidBox. |
| Images | If image moderation is on, checked for nudity on VoidBox’s own server and not stored. |
| Your email, real name, password | Never collected. |
AI prompts are never used to train models. The full details are in the Privacy Policy.
/ai memory forget clears the AI's memory from Discord.To keep VoidBox within Discord's rules, the operator can ask an AI for an overview of a server that may be breaking them: channel and role names and a sample of recent messages, with every author replaced by "member 1", "member 2" and so on. It's done by hand, only when needed, and nothing from it is stored. A person makes every decision, and a banned server's owner is told why and can appeal.
Nobody from VoidBox joins your server without asking. The team only gets in if you press Allow on a request VoidBox DMs you, with the reason. The one exception is a server our review strongly suspects of breaking Discord's rules. Either way the invite is single-use, expires in 24 hours, and shows in your audit log with the reason.
Questions? Ask in the support server, or read the Terms, Privacy Policy and live status.