Privacy Policy

1. Overview

This Privacy Policy explains how Gamelabs Studio ("Gamelabs", "we", "us") collects, uses, and safeguards your information when you use our website and services. It should be read together with our Terms of Service.

2. What information we collect

We collect the minimum information needed to run the service. This includes:

• Account data – such as your email address, display name, password hash, and API key.
• Usage data – such as projects, assets, jobs, prompts, generation parameters, credit usage, and basic device/technical information (like browser type, approximate region, and timestamps).
• Billing data – such as purchase history, subscription details, and credit ledger entries. Payment card details are processed by our payment provider (for example, Stripe) and are not stored by us.
• Content you upload – such as reference images, videos, or other inputs you provide for generating assets.
• Support and admin data – such as admin flags, last login time, error logs, and information you share with us when you contact support.
• Analytics and events – such as page views and feature usage events, collected via analytics tools, to understand how the service is used.

3. How we use your information

We use your information for the following purposes (with the corresponding legal bases where relevant privacy laws like GDPR or UK GDPR apply):

• To provide the service – create and manage your account, authenticate you, generate and store your assets, and keep your projects available. Lawful basis: contract and legitimate interest.
• To operate, secure, and improve the platform – monitor performance, prevent abuse and fraud, debug issues, and develop new features. Lawful basis: legitimate interest.
• To process payments and billing – handle purchases, subscriptions, credits, refunds, and required tax or audit records. Lawful basis: contract and legal obligation.
• To communicate with you – send essential service messages (for example, password reset, billing notices, material changes to terms or policies). Lawful basis: contract and legitimate interest.
• To run analytics and measure usage – understand which features are used and how often so we can prioritize improvements. Lawful basis: consent where required by law and legitimate interest otherwise.

4. Cookies, analytics, and tracking

We may use cookies and similar technologies to keep you signed in, remember your preferences, secure your account, and understand how the service is used. This can include analytics, pixels, or event tracking.

Under some laws (like the CCPA/CPRA), certain analytics and advertising-related uses of personal information may be treated as "selling" or "sharing" personal information. We do not sell your personal information in the traditional sense (we do not exchange it for money). Where required, we obtain your consent and provide a way to opt out of certain analytics or "sale/share" uses.

5. How we share information

We do not sell your personal data to third parties. We may share information with:

• Service providers that help us run the platform (for example, hosting, storage, analytics, and support tools).
• Payment processors that handle your payments (for example, Stripe).
• Professional advisors (for example, legal or accounting) where needed.
• Authorities or other parties when required by law, to protect our rights, or to respond to legal process.

These recipients are only allowed to use your information to provide services to us and must protect it appropriately.

6. Where your data is stored and how long we keep it

Your data is stored in our databases and file storage in the US West region of our hosting and cloud providers. We keep your information only for as long as needed for the purposes described in this policy or as required by law.

• Account, projects, assets, and jobs – kept while you have an active account, and deleted or de-identified when you request account deletion, unless we must retain certain data for legal reasons.
• Billing and purchase records – kept for the periods required by tax, accounting, and financial regulations (often several years).
• Logs and analytics data – kept for a limited time needed to operate, secure, and improve the service.

7. Your rights

Depending on where you live, you may have rights over your personal data. These can include the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Export your data in a portable format.
• Delete your account and associated data, subject to legal retention requirements.
• Object to or restrict certain types of processing.
• Withdraw consent where we rely on consent (for example, some analytics or marketing).

You can exercise key rights directly in the app by using the data export and account deletion options on your profile page (where available). You can also contact us using the details below if you need help or want to exercise other rights.

8. California privacy rights (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA, including:

• The right to know what categories of personal information we collect, use, and disclose.
• The right to access and delete certain personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising.
• The right to not be discriminated against for exercising these rights.

Where required, we provide a "Do Not Sell or Share My Personal Information" option that lets you opt out of certain analytics or advertising-related uses of your data. You can also contact us to submit a request and we will verify and respond within the timeframes required by law.

9. Security

We use reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy here and update the "Last updated" date, and we may also notify you by email or in-app notice.

11. Contact us

If you have questions about this Privacy Policy, our data practices, or would like to exercise your privacy rights, you can contact us at hello@gamelabstudio.co.