IndieBuff

Privacy Policy

Introduction

This Privacy Policy (“Policy”) explains how IndieBuff Inc. (“IndieBuff,” “we,” “us,” or “our”), a company based in Canada, collects, uses, and processes personal information when you interact with our websites, game engine plugins, and web applications (collectively, the “Services”). It also tells you how you can access and update your personal information and describes the data protection rights that may be available under your country's or state's laws. Please read this Privacy Policy carefully. By accessing or using any part of the Services, you acknowledge you have been informed of and consent to our practices with regard to your personal information and data.

Applicability of this Privacy Policy

If you are a customer of IndieBuff, this Privacy Policy does not apply to personal information or other data and information that we process on your behalf (if any) as your service provider (collectively, “Customer Data”). We will only use Customer Data (including any personal information contained therein) to provide you with the Services, and our use of your Customer Data shall instead be governed by the terms and conditions of the separate customer agreement or terms of service that you have agreed to with us.

If you are using the Services as an employee, contractor or other representative of one of our customers and you have any questions about our privacy practices or would like to exercise any rights with respect to your personal information that we process on behalf of our customers, please contact the corresponding customer as we only process your personal information in our capacity as a service provider to our customer.

Personal information we collect

You may choose to interact with IndieBuff's Services in ways that provide us with limited personal information. IndieBuff collects minimal personal data and only as necessary for the functioning and improvement of our Services. These may include:

  1. Email Address: We collect your email address to facilitate account creation, authentication, and communication (e.g., account notifications). We do not collect or store usernames or passwords, as we use passwordless authentication via one-time passwords.
  2. Prompt and Response Data: When using our plugins or web applications, we temporarily store User Prompts (e.g., commands or questions) and AI-Generated Responses (AI model output). We do this to ensure our Services are performing well and use this data to improve your experience. These data are retained to deliver the requested functionality and resolve any technical issues. You are easily able to delete conversations including all history if you so choose.
    NOTE: We do not store any user code, project files, documents, or sensitive data from your game engine projects, including data you pass in as context to our models.
  3. Cookies and Authentication: We use cookies strictly for authentication purposes to maintain secure sessions for logged-in users. In the future, we may use cookies to support analytics tools like Google Analytics and Mixpanel, which could include tracking technologies for analyzing website and web app usage.
Automatically Collected Data

Like many online service providers, IndieBuff automatically collects limited technical information about your interaction with our Services. This may include:

  1. Device Information:
    • Internet Protocol (IP) address.
    • Device type (e.g., phone, tablet, desktop).
    • General location information (e.g., city, region, or geographic area).
  2. Activity and Interaction Data:
    • Pages viewed, time spent on pages, and interactions with specific features of the Services.

This information helps us to:

  • Better understand how visitors interact with our Services.
  • Improve the functionality and experience of our applications.
  • Monitor and enhance the security of our Services.

Aggregated and Anonymized Data

We may aggregate all information collected (including non-personal and personal information) to generate statistical and analytical reports. For example, we may publish usage trends of our Services to better understand user engagement or product performance. Aggregated information does not identify any individual.

Information IndieBuff does not collect

IndieBuff does not intentionally collect sensitive or special category personal information, such as genetic data, biometric data for the purposes of uniquely identifying a natural person, health information, or religious information.

IndieBuff does not knowingly collect information from or direct any of our Services or content specifically to children under the age of 18. If we learn or have reason to suspect that a user is under the age of 18, we will close that account.

Lawful basis and purposes for processing your personal information

If you are an individual in the United Kingdom or European Economic Area (EEA), we collect and process information about you only where we have legal bases for doing so under applicable United Kingdom and/or EU laws. The legal bases depend on the Services you use and how you use them. This means we collect and use your information only where:

To fulfil a contract or take steps linked to a contract with you

We use your personal information to:

  • administer access to your accounts;
  • manage our customer relationships;
  • process orders, provide our products and services and send you service related communications;
  • provide you with customer support.

Legitimate Interests

We use your personal information:

  • to improve and personalize your experience with us and our Services and to tailor communications to you;
  • to understand how you use our Services and to develop new products, features, and functionality;
  • to monitor and improve the performance of our products and services for administrative, security, and fraud prevention purposes;
  • for our own internal functions, management, and corporate reporting, and internal research and analytics;
  • to enforce compliance with our terms of use and other policies or otherwise in connection with legal claims, compliance, regulatory, and investigatory purposes as necessary (including disclosure of such information in connection with legal process or litigation);
  • to fulfill payments and transactions; to provide information about our Services;
  • to respond to your requests, questions, and feedback;
  • for marketing and advertising purposes as we may from time-to-time send you direct marketing emails as permitted by law, including, but not limited to, notifying you of special promotions, offers, and events;
  • to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

Consent

We may rely on your consent:

  • where you have expressly indicated to us your consent to the processing of your personal information (e.g. where you consent to receive marketing communications from us);
  • where we have obtained your consent to place cookies or similar technologies; and
  • on other occasions where we ask for your consent, for the purpose we explain at the time.

You may withdraw your consent at any time through the unsubscribe feature provided with the relevant marketing email or by contacting us using the details in the 'Contacting IndieBuff About Your Privacy' section of this Privacy Policy.

How IndieBuff uses and protects your personal information

Sharing your information

IndieBuff may share your personal information with the third-parties listed below for the purposes that are described in this Privacy Policy or otherwise with your consent

IndieBuff only shares your personal information with those of its employees, contractors, and affiliated organizations that (i) need to know that personal information in order to process it on IndieBuff's behalf or to provide services available in the Services, and (ii) that have agreed not to disclose it to others.

IndieBuff may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

IndieBuff may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy.

Service Providers and partners

IndieBuff engages a number of service providers or partners to manage or support certain aspects of our business operations on our behalf. For instance, we currently use the following service providers who will handle your personal information:

  • Runpod - cloud GPU hosting
  • Vercel - website and web app hosting
  • Render - backend server hosting
  • MongoDB - cloud data hosting
  • Mailgun - email service
  • GitHub - open source repositories and internal project management tool
  • Discord - internal communications tool
  • Mix Panel - analytics
  • Google Analytics - analytics
  • Google Workspace - internal collaboration tools
  • Stripe - payment processing

Our service providers and partners are required by contract to safeguard any personal information they receive from us and are prohibited from using the personal information for any purpose other than to perform the services as instructed by IndieBuff.

Legal Requirements

We may disclose personal information to government authorities or other third-parties if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a subpoena, court order or similar legal obligation, (b) protect and defend our rights or property, (c) act in urgent circumstances to protect the personal safety of users of any Service or the public, (d) protect against legal liability, (e) to investigate fraud or other unlawful activity, or (f) or as otherwise required or permitted by law.

IndieBuff takes measures reasonably necessary to protect your personal information against any unauthorized access, use, alteration, or destruction.

Cross-border transfer of personal information

The Services are hosted in the United States and the personal information we collect will be stored and processed on our servers in the United States. Our employees, contractors and affiliated organizations that process information for us as described above may be located primarily in the United States, Canada, or in other countries outside of your home country which may have different data protection standards to those which apply in your home country.

Where your personal information is transferred outside of the EEA, Switzerland and UK and where this is to a country which is not subject to an adequacy decision by the EU Commission or considered adequate as determined by applicable data protection laws, we will take steps to ensure your personal information is adequately protected by safeguards such as Standard Contractual Clauses (“SCCs”) approved by the EU Commission or by the UK Government. A copy of the relevant mechanism can be obtained for your review on request by using the contact details in the 'Contacting IndieBuff About Your Privacy' section of this Privacy Policy.

IndieBuff communications with you

If you are a registered user of the Services and have supplied your email address, IndieBuff may occasionally send you an email to tell you about security, system information, new features, solicit your feedback, or just keep you up to date with what's going on with IndieBuff and our products. We primarily use our Discord or Blog to communicate this type of information, so we expect to keep this type of email to a minimum. There's an unsubscribe link located at the bottom of each of the marketing emails we send you so you can stop receiving such emails at any time.

If you send us a request (for example via a support email or via one of our feedback mechanisms), we reserve the right to publish your request in order to help us clarify or respond to your request or to help us support other users. We will not publish your personal information in connection with your request.

Your choices

In this section, we describe the rights and choices available to all users.

Opt out of marketing communications

You may opt out of marketing-related communications by following the opt-out or unsubscribe instructions within the marketing communication we send you.

Cookies

Most browser settings let you delete and reject cookies placed by websites. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, you may not be able to use all functionality of the website and it may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.

Online Tracking

We do not use online tracking technologies, such as interest-based advertising or third-party trackers, on our website. However, you can manage your browser’s privacy settings or use tools like privacy-focused browsers and plug-ins (e.g., Brave, Privacy Badger, or Ghostery) to further enhance your privacy

Google Analytics

We use Google Analytics to help us better understand how people engage with our Services by collecting information and creating reports about how users use our Services. For more information on Google Analytics, click here. For more information about Google's privacy practices, click here. You can opt out of Google Analytics by downloading and installing the browser plug-in available at:https://tools.google.com/dlpage/gaoptout

Do Not Track

Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Global privacy practices and your rights

Information we collect may be stored and processed in the United States in accordance with this Privacy Policy but we understand that users from other countries may have different expectations and rights with regard to their privacy. For all App visitors and users, no matter their country of location, we will:

  • provide clear methods of unambiguous, informed consent when we do collect your personal information and where required by applicable law;
  • only collect the minimum amount of personal information necessary for the purpose it is collected for, unless you choose to provide us more;
  • offer you simple methods of accessing, correcting, or deleting your information that we have collected, with the exception of information you voluntarily provide that is necessary to retain as is for the integrity of our project code as described further below; and
  • provide App users notice, choice, accountability, security, and access, and we limit the purpose for processing. We also provide our users a method of recourse and enforcement.

Additional rights that may apply to you in certain instances:

  • Right of data portability (if our processing is based on consent or a contract and the processing carried out by automated means);
  • Right to withdraw consent at any time (if processing is based on consent). If you ask to withdraw your consent, this will not affect any processing which has already taken place at that time.
  • Right to object to processing (if processing is based on legitimate interests)
  • Right to object to processing of personal data for direct marketing purposes
  • Right of erasure of your personal data from our system (“right to be forgotten”) if certain grounds are met

These rights may be limited, for example if fulfilling your request would reveal personal information about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.

Where we collect personal information to administer your accounts or your contract with us or to comply with our legal obligations, this is mandatory and we will not be able to manage our relationship with you without this. In all other cases, the provision of requested personal information is optional, but this may affect your ability to participate in certain App-related activities or being able to access and use certain features and services, where the information is needed for those purposes.

To exercise your privacy rights, you can email us at the address given below in the 'Contacting IndieBuff About Your Privacy' section of this Privacy Policy.

Data retention and deletion

If you already have an account with our Services, you may access, update, alter, or delete your basic user profile information by logging into your account and updating profile settings.

IndieBuff will retain your information for as long as your account is active or as needed to perform our contractual obligations, provide you services through the App, to comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable opportunity. For instance, in respect of data held for the management of customers and potential customers, we consider the lead time necessary to develop and maintain our commercial relationships and how recent our interactions are with you. We may rectify, update or remove incomplete or inaccurate information, at any time and at our own discretion. For more information on our retention periods you can contact us using the details in the 'Contacting IndieBuff About Your Privacy' section of this Privacy Policy.

Contacting IndieBuff About Your Privacy

The relevant data controller for any personal information processed in connection with our Services is IndieBuff Inc.

If you have any questions about this Privacy Policy or our privacy and security practices or you wish to make a complaint about our compliance with applicable privacy laws, please feel free to contact us at contact@indiebuff.ai.

If you have questions or concerns about the way we are handling your personal information, or would like to exercise your privacy rights, please email us with the subject line "Privacy Concern" at contact@indiebuff.ai.

In most cases, we will respond within 30 days of receiving your message but please note for the fastest response, we recommend emailing us.

Privacy policy changes

IndieBuff may change its privacy policy from time to time, and at IndieBuff's sole discretion.

If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.