Heroic AI RPG

1. Introduction

Pandastic FZC ("Pandastic," "we," "our," or "us") values the privacy of individuals who use our Heroic AI RPG website, application, and related services (collectively, our "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered role-playing game platform for Fantasy, Sci-Fi, and Modern settings.

Pandastic FZC is registered in the Sharjah Publishing City (SPC) Freezone, Sharjah, United Arab Emirates. By accessing or using our Services, you agree to the collection, use, disclosure, and procedures described in this Privacy Policy. If you do not agree, please do not use our Services.

2. Information We Collect

2.1 Information You Provide to Us

Account Information. When you create an account, we collect:

Email address
Username or display name (if you provide one through Clerk)
Profile avatar (optional, if you provide one through Clerk)

Authentication is provided by Clerk. You may sign in with Clerk, including Google OAuth. We do not store hashed site passwords on our servers. If you set a password, Clerk handles those credentials.

If you sign in with Google, we may receive your name, email address, and profile picture from that service.

Game Content and AI Interactions. We collect all content you create, input, or develop within the Services, including:

Character names, traits, and backstories
Story narratives, dialogue choices, and campaign data
All text inputs provided to our AI system
AI-generated responses and narrative output

Payment Information. When you make purchases, your payment-related information (credit card, billing address) is collected and processed by our third-party payment processor, Stripe. We do not store full credit card numbers on our servers.

Communications. If you contact us for support, feedback, or inquiries, we collect the contents of your messages and any attachments you provide.

2.2 Information Collected Automatically

Device and Usage Information. We automatically collect:

IP address (used to infer general location)
Web browser type and version
Operating system
Device type and identifiers
Pages and features you interact with
Dates and times of your visits
Game session duration and interaction patterns

Cookies and Similar Technologies. We use cookies, pixel tags, and similar tracking technologies as described in our Cookie Policy.

AI Interaction Data. All prompts, responses, and gameplay patterns are recorded to improve our AI systems.

3. How We Use Your Information

We use your information for the following purposes:

To Provide and Operate the Services: Creating and managing your account, processing transactions, generating game content, and delivering the AI-powered experience
To Improve Our AI Systems: Training, refining, and optimizing our AI models using aggregated and anonymized gameplay data and user interactions
To Develop New Features: Analyzing usage patterns to create new content, mechanics, and improvements
To Communicate With You: Sending service and transactional emails about billing, your account, security, and product notices
To Ensure Safety and Security: Detecting and preventing fraud, abuse, policy violations, and unauthorized access
To Comply With Legal Obligations: Responding to lawful requests, enforcing our Terms of Service, and protecting our rights

4. AI-Specific Disclosures

4.1 AI-Generated Content

Heroic AI RPG uses artificial intelligence, including third-party AI services (DeepSeek API, Google AI), to generate narrative content, character responses, and game mechanics in real-time. The AI technology is experimental and rapidly evolving. AI-generated content may contain errors, omissions, or unexpected material. You rely on AI-generated content at your own risk.

4.2 Use of Content for AI Training

We may use your inputs, game content, and AI interactions to train, improve, and refine our AI systems. This includes:

Analyzing patterns in gameplay and narrative generation
Improving the quality and relevance of AI responses
Developing new features and capabilities
Creating aggregated, anonymized datasets for research

Your personal identifying information is not used for AI training purposes. Content used for training is de-identified and aggregated.

4.3 Third-Party AI Services

We use third-party AI providers (DeepSeek API, Google AI) to power certain features. Your interactions with these AI systems are subject to their respective privacy policies and terms. We encourage you to review their policies:

DeepSeek: https://cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html
Google AI: https://transparency.google/intl/en_be/our-policies/privacy-policy-terms-of-service/

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers. We share information with third-party vendors who assist in operating our Services, including:

Clerk: User authentication and account management
Supabase: Database hosting and file storage
Stripe: Payment processing
Google Analytics: Usage analytics and performance monitoring (see Cookie Policy)
DeepSeek API: AI-powered content generation
Google AI: AI-powered content generation

These providers are contractually bound to use your information only as necessary to provide services to us and in compliance with this Privacy Policy.

Legal Requirements. We may disclose information if required by law, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.

Aggregated Data. We may share aggregated, de-identified data that cannot reasonably identify you for analytics, research, and reporting purposes.

With Your Consent. We may share your information for any other purpose with your explicit consent.

6. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Services. Specifically:

Account Information: Retained until account deletion or termination
Game Content and AI Interactions: Retained indefinitely for AI training, service improvement, and legal compliance. Upon account deletion, personal identifying information is removed, but anonymized gameplay data may be retained
Payment Information: Retained only as long as necessary to complete transactions and comply with tax and legal obligations

Account Deletion. You may request account deletion at any time by contacting us at info@heroicairpg.com. We will delete or anonymize your personal information within 30 days of your verified request, subject to legal retention requirements.

7. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

Users under 13: Not permitted to use the Services
Users 13–17: May use the Services with parental or guardian consent where required by applicable law
Users 18 and over: May use the Services without parental consent

If you believe a child under 13 has provided us with personal information, please contact us immediately at info@heroicairpg.com so we can delete the information and terminate the account.

8. International Data Transfers

Pandastic FZC is based in the United Arab Emirates. Your information may be transferred to and processed in countries other than your own, including the UAE, the United States (for Supabase, Stripe, Google services), and other jurisdictions where our service providers operate.

For users in the European Economic Area (EEA), UK, or Switzerland: When we transfer your personal data internationally, we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements with our service providers
Compliance with applicable data protection laws

For users in the UAE: Your data is processed in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations.

9. Your Rights

Your privacy rights depend on the country or region where you live. Depending on applicable law, you may be able to request access to, correction of, or deletion of your personal information, or ask other questions about how we use it.

To exercise a request, email us at info@heroicairpg.com. We will respond within the timeframe required by applicable law.

If you are in the EEA or UK, you may also lodge a complaint with your local data protection authority.

We do not sell personal information.

10. Security Measures

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication measures
Regular security assessments and monitoring
Secure development practices
Minimal data collection principle

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting the updated policy on our website
Sending an email notification (if we have your email address)
Displaying a notice within the Services

The "Last Updated" date at the top will reflect the most recent revision. Your continued use of the Services after changes take effect constitutes your acceptance of the updated policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Pandastic FZC Sharjah Publishing City Freezone Sharjah, United Arab Emirates Email: info@heroicairpg.com