Privacy Policy

← Back to Gaming AI

The short version

We do not store your NPC conversations. A request comes in, a reply goes back, and we keep no copy of either. We can't read them, search them, or hand them to anyone, because they aren't there. We hold the minimum needed to run an account and take a payment, and nothing else.

There's one thing that honesty requires us to add, and it's in section 4: the text of a conversation has to be sent to whichever model generates the reply. We don't keep it — but it does travel.

1. Who we are

Gaming AI is operated by Sentinel Software LLC (“we”, “us”), and covers the website at gamingai.software, the Gaming AI desktop app, and the service the app connects to. For data protection purposes, Sentinel Software LLC is the controller of the personal data described here. You can reach us at gamingai.support@gmail.com or in our Discord. If you have a question about your data, that's the address to use.

2. What we collect

• Account: your username, your email address, and a hashed version of your password. We can't read your password.
• Purchases: which Vigor packs you bought and when, and the subscription status of your supporter tier. Card details go to Stripe and never reach us.
• Service use: counts and timestamps of requests, how much Vigor was spent, which game or model was used, and your IP address. This is what lets us bill accurately, apply rate limits, and spot abuse. It is metadata about requests, not their contents.
• App: when the app checks for an update it tells us its version and platform, so we can serve the right build and know when to drop support for an old one.
• Support: anything you choose to send us by email or in Discord, including the messages themselves.

3. What we don't collect

• The content of your conversations with NPCs. We don't log it, store it, review it, screen it, or train anything on it. It passes through our systems in memory and is gone.
• Your saved History tab conversations and your Codex. The app keeps those on your own computer, not on our servers. Each reply still means sending that conversation to the model, as described in section 4, but we don't keep a copy. Deleting them in the app, or uninstalling it, removes them.
• Your save files, your game files, your mod list, or anything else on your computer.
• Your card number.
• Anything for advertising, profiling or analytics. There are no ad trackers and no analytics scripts on this site. Section 10 covers the two third-party resources our pages do load.

Because we hold no conversation content, we cannot produce it — not for you, not for a provider, and not in response to a subpoena. That's a deliberate design choice, and section 11 says what happens if it ever changes.

4. Where a conversation actually goes

This is the part most privacy policies leave vague, so: when your mod asks for a reply, the text of that request is transmitted, through a routing service we use, to the provider that hosts the model, which generates the reply and sends it back. We do not retain it at any point. The provider handles it under their own terms, applies their own content filtering, and may retain it for their own abuse-prevention purposes under those terms.

We only route to models whose terms do not permit training on data sent through their API, and we check that again whenever we add a model. We can't audit anyone's internal systems, so that assurance rests on the providers' contractual commitments rather than on something we can verify ourselves.

Requests are processed on servers in the United States, and may be processed by providers elsewhere. If a conversation is something you'd rather never left your machine, a locally-run model is the honest answer, and we say so on the home page.

5. Why we hold what we hold

To give you an account you can log into, to charge you correctly, to keep the service working and stop people abusing it, and to comply with tax and accounting law.

6. Who we share it with

• Stripe — payments, refunds and chargeback handling. They receive what they need to take the money and to investigate a disputed payment.
• Our model providers — the request text, sent through a routing service we use to whichever provider hosts the model, as described in section 4.
• Our hosting provider — which stores the account database on our behalf.
• Discord — if you talk to us there, that conversation lives on Discord's servers under Discord's own privacy policy, not ours.
• A model provider or infrastructure partner, where they raise a credible abuse report about an account or require information to confirm our compliance with their rules. We can only share account details and usage records — we have no conversation content to give them.
• Anyone we're legally required to give it to.
• A buyer or successor, if the business is ever sold or merged. We'd tell you first.

We do not sell your data, we do not share it for cross-context behavioural advertising, and we don't share it with advertisers. There aren't any.

7. How long we keep it

• Conversation content: not kept at all.
• Account details: until you delete your account, then removed within 30 days except where we're required to keep something.
• Payment records: kept by Stripe, under Stripe's own privacy policy and retention rules.
• Usage and purchase records: retained while your account is open, and afterwards for as long as tax and accounting rules require.
• Support emails and Discord messages: kept while they're useful, and cleared out periodically.
• Records relating to a banned account, including the reason: kept for as long as needed to enforce the ban and defend against a challenge to it.

8. Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and everything attached to it. Email us and we'll do it — we're aiming to answer within 30 days, and usually much faster because there are two of us and it's a small database. We won't treat you differently for asking.

If you're in California, you have the right to know what we collect and why, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising any of them; we don't sell or share personal information, so there's nothing to opt out of. The categories we collect are identifiers (username, email, IP address), commercial information (purchases), and internet activity (request counts and timestamps) — all as set out in section 2.

9. Automated decisions

We use automated rate limiting, and automated checks on account activity to catch abuse. These can slow down or suspend an account without a human looking first. They work on metadata only — volume, timing, payment patterns — never on what you wrote. If an automated decision affects you, email us and a person will review it.

10. Cookies and the website

We don't use advertising or analytics cookies. When you log in, your browser stores your username and a session token locally so the site can tell you're signed in; clearing your browser data or logging out removes it.

Two things on our pages are loaded from other companies, and they will see your IP address as a result: fonts from Google Fonts, and the demo video from YouTube (embedded in privacy-enhanced mode, which means it doesn't set cookies unless you press play).

11. Security, and what happens if this changes

Passwords are hashed, traffic is encrypted in transit, and access to the account database is limited to the two of us. No system is perfectly secure and we can't promise otherwise, but the honest advantage here is that the most sensitive thing you could lose — what you actually said — isn't stored anywhere to lose. If a breach affects your data we'll tell you and the relevant authority as quickly as the law requires.

If we change this policy, we'll update the date at the top and say so in the Discord. If we ever start keeping, screening or reviewing conversation content — we have no plans to — we'd tell you before it happened, not after, and you'd have the chance to stop using the service and ask for a refund of unspent Vigor first.

12. Children

You must be 18 or over to hold a Gaming AI account. Players aged 13 to 17 may use the service only through an account held by a parent or legal guardian, who is responsible for it. Children under 13 may not use Gaming AI at all, and we don't knowingly collect anything from them. If you believe a child under 13 has an account, email us and we'll delete it and its data. This matches section 3 of our Terms.

13. Contact

gamingai.support@gmail.com, or the Discord.