Privacy Policy

1. Introduction

Teylo AI ("Teylo", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered game development platform at teylo.ai (the "Platform") and related services (the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Display name and email address
• Payment Information: Processed securely by Lemon Squeezy (our Merchant of Record). We do not store your payment card details.
• User Content: Game prompts (text descriptions of games you want to create)
• Communications: Emails you send to our support address

2.2 Information Collected Automatically

• Usage Data: Features accessed, games created, credits consumed
• Device Information: Browser type and version
• Connection Information: IP address
• Log Data: Error reports and debugging information
• Cookies: Authentication cookies to keep you logged in

2.3 Game Development Data

• Prompts: The text descriptions you provide for game generation
• Generated Content: GDScript code and scene files created by AI based on your prompts
• Chat History: Messages exchanged with the AI during game creation

3. How We Use Your Information

3.1 To Provide and Maintain Services

• Process game generation requests
• Store and manage your projects
• Handle authentication and account management
• Provide customer support

3.2 To Improve and Develop Services

• Analyze usage patterns and trends
• Improve AI model performance and accuracy
• Develop new features and capabilities
• Fix bugs and optimize performance
• Conduct research and development

3.3 To Communicate With You

• Send service-related notifications
• Respond to support inquiries
• Provide product updates and announcements
• Send marketing communications (with consent)
• Alert you to security issues

3.4 For Legal and Safety Purposes

• Comply with legal obligations
• Enforce our Terms of Service
• Protect rights, property, and safety
• Detect and prevent fraud or abuse
• Respond to legal requests

4. Information Sharing and Disclosure

4.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties.

4.2 Service Providers

We share information with third-party service providers who assist in operating our Services:

• Payment Processor: Lemon Squeezy (Merchant of Record) - handles payment processing, billing, sales tax/VAT, and related billing inquiries
• AI Services: Google (Gemini and Vertex AI) - processes your prompts to generate game code
• Database Hosting: Supabase - stores your account data, games, and chat history
• Hosting and Infrastructure: We use third-party hosting and storage providers to run the Services

4.3 Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

5. Data Retention

We retain your information for as long as your account is active:

• Account Data: Retained while your account is active
• Games and Chat History: Retained while your account is active
• Credit Transactions: Retained for billing records

When you delete your account, we delete your profile, games, prompts, and chat history from our systems promptly. We may retain limited records where required by law or for legitimate business purposes (such as tax/accounting, fraud prevention, and dispute resolution). Deleted data may persist in backups for a limited period. Our payment processor (Lemon Squeezy) retains its own billing records under its policies. This deletion cannot be undone.

6. Data Security

We implement appropriate technical measures to protect your information:

• Encryption: Data encrypted in transit using TLS
• Authentication: Secure login with email verification
• Database Security: Row-level security ensuring you can only access your own data
• Payment Security: Payment processing handled by Lemon Squeezy, a PCI-compliant payment processor

While we strive to protect your information, no method of transmission or storage is 100% secure.

7. Your Privacy Rights

7.1 Access Your Data

You can view your account information, games, and chat history through your dashboard at any time.

7.2 Update Your Information

You can update your display name through your account settings.

7.3 Export Your Games

You can export your games as Godot project files through the export feature in the game editor.

7.4 Delete Your Account

You can permanently delete your account and all associated data through your account settings. This action is immediate and cannot be undone.

7.5 Marketing Communications

You can unsubscribe from marketing emails using the link provided in each email.

8. AI and Your Data

8.1 How AI Generation Works

Teylo uses third-party AI services (Google Gemini and Vertex AI) to generate game code based on your prompts. Your prompts are sent to these services to generate responses.

8.2 Data Handling

We do not train our own AI models on your content. To provide the Services, we send your prompts and related context to third-party AI services to generate outputs. We may also use your content as needed to operate, secure, and support the Services (for example, troubleshooting, abuse prevention, and enforcing our Terms). Third-party AI providers have their own data handling policies.

8.3 Your Content Ownership

You retain ownership of the games you create using our platform. The generated code is yours to use, modify, and distribute.

9. Cookies

We use essential cookies required for the platform to function, including authentication cookies to keep you logged in.

You can control cookies through your browser settings. Disabling cookies may prevent you from logging in or using the platform.

10. Children's Privacy

Our Services are not intended for children under 13 years old, or 16 years old if located in the European Union. We do not knowingly collect information from children below these ages. If we discover such collection, we will promptly delete the information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

12. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

13. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

14. European Privacy Rights

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under GDPR including:

• Right to access, rectify, or erase personal data
• Right to data portability
• Right to restrict or object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authorities

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending email notification for significant changes

16. Contact Us

For privacy-related questions or to exercise your rights, please contact us:

We aim to respond to all privacy requests within 30 days.