Privacy Policy

Scope

This policy explains how SXY Game Studio processes information when you create an account, generate or edit a game, upload assets, purchase credits, or contact support.

Information we process

• Account data: name, email address, authentication provider, locale, session identifiers, and security logs.
• Project data: prompts, GameSpec documents, source files, versions, uploaded assets, validation reports, and generation job records.
• Usage and device data: IP address, browser metadata, feature events, error logs, and referral parameters used for security and product analytics.
• Billing data: order, subscription, payment status, and credit ledger records. Payment processors handle full card or wallet credentials; we do not store full card numbers.
• Support data: messages and files you submit through support channels.

AI processing

When you choose an external AI provider, the relevant prompt and project context are sent from our server to that provider to generate a result. Provider API keys are kept server-side. You should not include secrets, personal data, or material you are not authorized to process in prompts or uploaded assets.

How we use information

We use information to provide and secure the service, persist and export projects, run AI generation, process payments and credits, prevent abuse, respond to support requests, measure product performance, and meet legal obligations. We do not sell personal information.

Service providers and international transfers

We may use hosting, database, object storage, authentication, analytics, email, AI, and payment providers. Data may be processed in regions where those providers operate, subject to their contractual and security safeguards.

Retention and deletion

Account, project, and billing records are retained while needed to provide the service and satisfy fraud, accounting, and legal requirements. You may request account or project deletion through the support center. Backups and legally required billing records may remain for a limited period.

Security

We use encrypted transport, access controls, server-side secrets, authenticated project ownership checks, scoped storage paths, and audit-oriented job and credit records. No online system can guarantee absolute security.

Your choices and rights

Depending on your location, you may request access, correction, export, restriction, objection, or deletion of personal data. You may also manage cookies and optional analytics through your browser. Submit requests through the in-product support center.

Changes

Material changes will be reflected by an updated date and, when appropriate, an in-product notice.