Heroic AI RPG

1. Introduction

Pandastic FZC ("Pandastic," "we," "our," or "us") values the privacy of individuals who use our Heroic AI RPG website, application, and related services (collectively, our "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered fantasy role-playing game platform.

Pandastic FZC is registered in the Sharjah Publishing City (SPC) Freezone, Sharjah, United Arab Emirates. By accessing or using our Services, you agree to the collection, use, disclosure, and procedures described in this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide to Us

Account Information. When you create an account, we collect:

Username or display name
Email address
Password (stored securely using hashing)
Profile avatar (optional)

If you sign up using a third-party account (e.g., Google, Apple), we may receive your name, email address, and profile picture from that service.

Game Content and AI Interactions. We collect all content you create, input, or develop within the Services, including:

Character names, traits, and backstories
Story narratives, dialogue choices, and campaign data
All text inputs provided to our AI system
AI-generated responses and narrative output

Payment Information. When you make purchases, your payment-related information (credit card, billing address) is collected and processed by our third-party payment processor, Stripe. We do not store full credit card numbers on our servers.

Communications. If you contact us for support, feedback, or inquiries, we collect the contents of your messages and any attachments you provide.

Age Verification. We may collect your date of birth for age verification purposes to determine appropriate content access levels.

2.2 Information Collected Automatically

Device and Usage Information. We automatically collect:

IP address (used to infer general location)
Web browser type and version
Operating system
Device type and identifiers
Pages and features you interact with
Dates and times of your visits
Game session duration and interaction patterns

Cookies and Similar Technologies. We use cookies, pixel tags, and similar tracking technologies as described in our Cookie Policy (Part VI).

AI Interaction Data. All prompts, responses, and gameplay patterns are recorded to improve our AI systems.

3. How We Use Your Information

We use your information for the following purposes:

To Provide and Operate the Services: Creating and managing your account, processing transactions, generating game content, and delivering the AI-powered experience
To Improve Our AI Systems: Training, refining, and optimizing our AI models using aggregated and anonymized gameplay data and user interactions
To Develop New Features: Analyzing usage patterns to create new content, mechanics, and improvements
To Communicate With You: Sending service updates, support responses, and (with your consent) promotional materials
To Ensure Safety and Security: Detecting and preventing fraud, abuse, policy violations, and unauthorized access
To Comply With Legal Obligations: Responding to lawful requests, enforcing our Terms of Service, and protecting our rights

4. AI-Specific Disclosures

4.1 AI-Generated Content

Heroic AI RPG uses artificial intelligence, including third-party AI services (DeepSeek API, Google AI), to generate narrative content, character responses, and game mechanics in real-time. The AI technology is experimental and rapidly evolving. AI-generated content may contain errors, omissions, or unexpected material. You rely on AI-generated content at your own risk.

4.2 Use of Content for AI Training

We may use your inputs, game content, and AI interactions to train, improve, and refine our AI systems. This includes:

Analyzing patterns in gameplay and narrative generation
Improving the quality and relevance of AI responses
Developing new features and capabilities
Creating aggregated, anonymized datasets for research

Your personal identifying information is not used for AI training purposes. Content used for training is de-identified and aggregated.

4.3 Third-Party AI Services

We use third-party AI providers (DeepSeek API, Google AI) to power certain features. Your interactions with these AI systems are subject to their respective privacy policies and terms. We encourage you to review their policies:

DeepSeek: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Google AI: https://transparency.google/intl/en_be/our-policies/privacy-policy-terms-of-service/

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We share information with third-party vendors who assist in operating our Services, including:

Supabase: Database hosting and authentication
Stripe: Payment processing
Clerk: User authentication and account management
Google Analytics: Usage analytics and performance monitoring (see Cookie Policy)
DeepSeek API: AI-powered content generation
Google AI: AI-powered content generation

These providers are contractually bound to use your information only as necessary to provide services to us and in compliance with this Privacy Policy.

Legal Requirements. We may disclose information if required by law, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

Aggregated Data. We may share aggregated, de-identified data that cannot reasonably identify you for analytics, research, and reporting purposes.

With Your Consent. We may share your information for any other purpose with your explicit consent.

6. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Services. Specifically:

Account Information: Retained until account deletion or termination
Game Content and AI Interactions: Retained indefinitely for AI training, service improvement, and legal compliance. Upon account deletion, personal identifying information is removed, but anonymized gameplay data may be retained
Payment Information: Retained only as long as necessary to complete transactions and comply with tax and legal obligations
Age Verification Data: Retained for the lifetime of your account; removed upon account deletion

Account Deletion. You may request account deletion at any time by contacting us at info@heroicairpg.com. We will delete or anonymize your personal information within 30 days of your verified request, subject to legal retention requirements.

7. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

Users under 13: Not permitted to use the Services
Users 13–18: May use the Services with parental or guardian consent where required by applicable law. Such users will have restricted access to age-appropriate content only
Users 18 and over: Full access to all features

If you believe a child under 13 has provided us with personal information, please contact us immediately at info@heroicairpg.com so we can delete the information and terminate the account.

8. International Data Transfers

Pandastic FZC is based in the United Arab Emirates. Your information may be transferred to and processed in countries other than your own, including the UAE, the United States (for Supabase, Stripe, Google services), and other jurisdictions where our service providers operate.

For users in the European Economic Area (EEA), UK, or Switzerland: When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with our service providers
Compliance with applicable data protection laws

For users in the UAE: Your data is processed in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information, subject to legal retention requirements
Portability: Request a copy of your data in a structured, commonly used format
Restriction: Request restriction of processing in certain circumstances
Objection: Object to the processing of your personal information for certain purposes (including direct marketing)
Withdraw Consent: Where processing is based on consent, withdraw that consent at any time

EEA/UK Users: You have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

UAE Users: You have rights under the UAE PDPL, including the right to know how your data is processed and the right to request correction or deletion.

California Residents: You have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, contact us at info@heroicairpg.com. We will respond within the timeframe required by applicable law.

10. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication measures
Regular security assessments and monitoring
Secure development practices
Minimal data collection principle

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our website
Sending an email notification (if we have your email address)
Displaying a notice within the Services

The "Last Updated" date at the top will reflect the most recent revision. Your continued use of the Services after changes take effect constitutes your acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Pandastic FZC Sharjah Publishing City Freezone Sharjah, United Arab Emirates Email: info@heroicairpg.com