Bot Permissions

When you click "Install to Discord", Discord asks you to authorize the KeepGrid bot with a set of permissions. Here is every permission we request, exactly why we need it, when we use it, and whether you can remove it after the install is done.

Permission Matrix

What the Bot Never Does

• Never reads messages in any channel. We do not have, do not request, and never activate the Read Message History intent at a level that sees content.
• Never monitors voice. No voice state tracking, no recording, ever.
• Never collects member lists or user profile data.
• Never uses Discord data to train AI models. This is prohibited by Discord Developer Policy.
• Never creates Administrator roles. Staff/VIP/member roles are created with no guild-wide permissions; access is controlled through category/channel overwrites. If you want a human admin role, create and position it manually in Discord.
• Never acts without authorization. Launch OS ($49) operates entirely on-demand: nothing runs unless you click Install, Re-install, or Roll back. Pro ($19/mo) adds two things: (a) opt-in scheduled scans — read-only, every Monday, never modify your server; and (b) Fix Buttons — write actions that run ONLY after you click them, review the exact change in a confirmation modal, and approve. Every Fix Button is audit-logged with full before/after state and is one-click revertible. Schedule scans never trigger Fix Buttons automatically.

When Permissions Are Used

During install (~60-120 seconds)

The bot uses Manage Channels, Manage Roles, Send Messages, Embed Links, and Manage Messages in a single burst to build the server structure, set permissions, and pin documents. Before the burst, the install page runs a preflight: current channel/role counts, install scope, rollback coverage, docs-only target checks, and role-hierarchy warnings. Every step is logged in your install progress view.

If you click "Re-install" or "Update"

Same permissions, same burst, but only affecting items that don't already exist (idempotent). Re-running is safe.

Ongoing / passive

Launch OS ($49): none. After install, the bot sits silent in your server. No cron jobs, no message listeners, no event handlers. If you never re-run it, it never does anything.

Pro ($19/mo): a single scheduled read-only scan runs every Monday for projects with a complete install. It reads channel/role/permission metadata via Discord's public API to compute your Ops Score and detect drift since the last scan. Scheduled scans never modify your server. Fix Buttons modify your server only when you click and confirm. Both are auditable and revertible. You can pause Pro at any time to stop scheduled scans entirely.

Removing the Bot

At any point you can:

1. Right-click the bot in your Discord member list → Kick.
2. Or go to Server Settings → Integrations → KeepGrid → Remove.

Everything the bot created (channels, roles, permissions, pinned messages) remains intact. Removing the bot doesn't undo the install — your structure stays untouched.

One-Click Rollback (Installer 2.0)

Before any install runs, KeepGrid takes a snapshot of your guild's existing channels and roles, and records the exact ID of every item it creates. Rollback uses this record to remove only what the bot added — never anything that was already there.

You can also preview the full install plan before authorizing the bot with the "Preview install plan" button. The preview shows every channel, role, and message that will be created, with nothing touched yet. Export the plan as JSON if you want to inspect it offline.

Role Hierarchy Safety

Discord only lets a bot manage roles below the bot's highest role. KeepGrid's preflight explains this before install, and the executor fails closed if Discord rejects a role/channel operation. If you see a 403 during install, move the KeepGrid bot role above the roles it needs to manage in Server Settings → Roles, then re-run. The installer is idempotent, so existing KeepGrid-created items are skipped instead of duplicated.

Reviewing Permissions in Discord

You can review or modify permissions at any time:

1. Open Server Settings.
2. Go to Integrations → KeepGrid → Manage.
3. Uncheck any permission you no longer want the bot to have.

Note: removing Manage Channels or Manage Roles after install will prevent re-running the installer or using dashboard-driven updates, but the current install remains intact.

Discord Compliance Notes

• The bot does not request the privileged Message Content intent or the Server Members intent. We never read message content or maintain a member roster.
• Ticket SLA tracking uses ticket / channel metadata only — never reads message bodies. The Pro Ops Health scan computes ticket SLA (open / stale >24h / breach >72h) from thread created_at, last_message_id timestamp, channel category, and archived/locked flags. The text of any single message is never read, parsed, or stored.
• We do not use any data from your Discord server to train AI models. This is required by Discord Developer Policy.
• Payments for Docs Pack / Launch OS / Pro / Done-for-you happen on KeepGrid's website via Stripe. The bot itself does not sell features in-app or in-server. If Discord's Premium Apps policy applies to a future feature we add inside the bot, we'll integrate Discord Premium Apps before launching it.
• Privacy Policy URL and Terms of Service URL are registered in our Discord Developer Portal listing.

Contact

If any permission feels unclear, or you want us to add a "no X permission" install mode for your use case: ops@keepgrid.net.