# Privacy Policy

Effective date: September 10, 2025

## 1. Introduction

This Privacy Policy explains how Coplay ("we," "our," or "us") collects, uses, and protects personal and technical data when you access or use our AI‑powered tools and services for Unity developers. Coplay helps users build immersive game worlds quickly by providing AI assistance and tooling. By using our services, you agree to the practices described in this policy.

## 2. Data We Collect

We collect the following types of information:

- **Account Information:** When you create an account or subscribe to a plan, we collect your name, email address, payment details, and other registration data.

- **User Content:** We process the code, assets, prompts, instructions, and other content you submit through the Service to generate responses and assist you. We treat enterprise customer data as confidential and never use it to train or fine‑tune our models. For non‑enterprise users, we may use prompts and data to improve our services as described below.

- **Usage Data:** We collect information about your interactions with the Service, such as log files, device and browser characteristics, IP address, error reports, and feature usage. This helps us monitor performance, fix bugs, and improve user experience.

- **Cookies and Similar Technologies:** We use cookies and local storage to remember preferences, maintain sessions, and gather analytics about how the Service is used. You can control cookie settings through your browser, but disabling cookies may affect functionality.

## 3. How We Use Data

We use your data for the following purposes:

- **Service Delivery:** To provide, maintain, and improve the Service, including responding to prompts, generating code or assets, and integrating with third‑party tools.

- **Service Improvement:** For non‑enterprise users, we may analyze prompts and usage data to improve features, enhance performance, and develop new tools. We do not train or fine‑tune AI models with non‑enterprise data, but we reserve the right to use such data for future model improvements unless you opt out by emailing support@coplay.dev.

- **Enterprise Data Restrictions:** For enterprise customers, we process data only to deliver Coplay’s services and ensure system reliability. Enterprise data is never used to train, fine‑tune, or adapt our models, and information from one customer is never visible to another.

- **Security and Fraud Prevention:** To protect against unauthorized access, detect abuse, and enforce our Terms. Data may be analyzed to identify suspicious behavior.

- **Communications:** To send service‑related messages, updates, and notifications. You may not opt out of essential communications. Marketing emails will provide an opt‑out option.

- **Legal Compliance:** To comply with legal obligations, enforce agreements, and respond to lawful requests from authorities.

## 4. Data Retention

- **Enterprise Customers:** We retain enterprise customer data for 30 days to allow for debugging, troubleshooting, and reliability monitoring, after which it is permanently deleted unless a longer retention period is required by law.

- **Non‑Enterprise Users:** We retain non‑enterprise data for as long as necessary to provide and improve the Service. If you request deletion of your data, we will remove it unless retention is required for legal or operational reasons.

## 5. Data Security

We implement industry‑standard security measures to protect your data:

- **Encryption:** All data is encrypted in transit (TLS 1.2+) and at rest using AES‑256 or equivalent standards.

- **Access Controls:** Internal access to operational data is role‑based, logged, and restricted to personnel who need it to perform their duties.

- **Provider Compliance:** We rely on vendors who maintain compliance with SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and other relevant standards. See our Security Overview for more details.

Despite these measures, no system is completely secure; you use the Service at your own risk.

## 6. Sharing and Disclosure

We do not sell your personal data. We share information only as necessary to provide and improve the Service, comply with law, or protect rights. We may share data with:

- **Service Providers:** Third‑party vendors (e.g., hosting providers, payment processors) that process data on our behalf under strict confidentiality and security obligations.

- **Affiliates and Partners:** Within our corporate group to support the Service.

- **Legal Requirements:** Authorities if required by law or to protect users, the public, or our rights.

- **Business Transfers:** In connection with a merger, sale, or acquisition of all or part of our business; we will notify you before your data is transferred and subject to a different privacy policy.

## 7. Your Choices and Rights

- **Opt Out of Model Improvement:** Non‑enterprise users may opt out of their data being used for future model improvements by emailing support@coplay.dev. This will not affect data needed to deliver the Service.

- **Access and Update:** You may access and correct personal information through your account settings.

- **Deletion:** You may request deletion of your data by contacting support@coplay.dev. We will comply unless retention is required by law or necessary to operate the Service.

- **Cookie Preferences:**