Thanks to visit codestin.com
Credit goes to coplay.dev

Privacy Policy

Effective date: February 23, 2026

1. Introduction

This Privacy Policy explains how Coplay ("we," "our," or "us") collects, uses, and protects personal and technical data when you access or use our AI‑powered tools and services for Unity developers. Coplay helps users build immersive game worlds quickly by providing AI assistance and tooling. By using our services, you agree to the practices described in this policy.

2. Data We Collect

We collect the following types of information:

  • Account Information: When you create an account or subscribe to a plan, we collect your name, email address, payment details, and other registration data.
  • User Content: We process the code, assets, prompts, instructions, and other content you submit through the Service to generate responses and assist you. We treat enterprise customer data as confidential and never use it to train or fine‑tune our models. For non‑enterprise users, we reserve the right to use your content to train and improve our models as described below.
  • Usage Data: We collect information about your interactions with the Service, such as log files, device and browser characteristics, IP address, error reports, and feature usage. This helps us monitor performance, fix bugs, and improve user experience.
  • Cookies and Similar Technologies: We use cookies and local storage to remember preferences, maintain sessions, and gather analytics about how the Service is used. You can control cookie settings through your browser, but disabling cookies may affect functionality.

3. How We Use Data

We use your data for the following purposes:

  • Service Delivery: To provide, maintain, and improve the Service, including responding to prompts, generating code or assets, and integrating with third‑party tools.
  • Service Improvement and Model Training (Non‑Enterprise Users): For non‑enterprise users (including Free and Professional plan users), Coplay reserves the right to use your prompts, code, content, and usage data to train, fine‑tune, and improve our AI models and services. By using the Service as a non‑enterprise user, you consent to this use. If you do not want your data used for training, you must upgrade to an Enterprise plan.
  • Enterprise Data Restrictions (No Training Guarantee): For enterprise customers, we process data only to deliver Coplay’s services and ensure system reliability. Enterprise data is never used to train, fine‑tune, or adapt our models, and information from one enterprise customer is never visible to another. Enterprise is the only tier that guarantees your data will not be used for training.
  • Security and Fraud Prevention: To protect against unauthorized access, detect abuse, and enforce our Terms. Data may be analyzed to identify suspicious behavior.
  • Communications: To send service‑related messages, updates, and notifications. You may not opt out of essential communications. Marketing emails will provide an opt‑out option.
  • Legal Compliance: To comply with legal obligations, enforce agreements, and respond to lawful requests from authorities.

4. Data Retention

  • Enterprise Customers: We retain enterprise customer data for 30 days to allow for debugging, troubleshooting, and reliability monitoring, after which it is permanently deleted unless a longer retention period is required by law.
  • Non‑Enterprise Users: We retain non‑enterprise data for as long as necessary to provide and improve the Service. If you request deletion of your data, we will remove it unless retention is required for legal or operational reasons.

5. Data Security

We implement industry‑standard security measures to protect your data:

  • Encryption: All data is encrypted in transit (TLS 1.2+) and at rest using AES‑256 or equivalent standards.
  • Access Controls: Internal access to operational data is role‑based, logged, and restricted to personnel who need it to perform their duties.
  • Provider Compliance: We rely on vendors who maintain compliance with SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, and other relevant standards. See our Security Overview for more details.
  • Geographic Restrictions: Coplay-controlled customer data is not stored or processed in China, and is not accessible from China by Coplay personnel or our subprocessors. All Coplay infrastructure and subprocessors are located in the United States or European Union. If you choose to use China‑based models via OpenRouter, your data may be processed in China as described below.

Despite these measures, no system is completely secure; you use the Service at your own risk.

6. Sharing and Disclosure

We do not sell your personal data. We share information only as necessary to provide and improve the Service, comply with law, or protect rights. We may share data with:

  • Service Providers: Third‑party vendors (e.g., hosting providers, payment processors, AI model providers) that process data on our behalf under strict confidentiality and security obligations. For a complete list of our subprocessors and their locations, see our Subprocessor List.
  • Affiliates and Partners: Within our corporate group to support the Service.
  • Legal Requirements: Authorities if required by law or to protect users, the public, or our rights.
  • Business Transfers: In connection with a merger, acquisition, reorganization, asset sale, or similar transaction, your personal data, account information, User Content, and subscription details may be transferred to the acquiring entity. If such a transfer occurs, we will notify you via email or through the Service. The acquiring entity will be bound by this Privacy Policy with respect to your data until such time as they provide notice of any changes in accordance with applicable law. Your continued use of the Service following such transfer constitutes acceptance of the transfer.

Data Portability in Business Transfers

In the event of a business transfer, the following information may be shared with and transferred to the acquiring entity: account credentials and profile information, active subscription status and billing history, User Content, usage data and preferences, and any associated rights and licenses granted under these Terms of Service.

7. Third‑Party AI Provider Data Handling

Coplay uses third‑party AI providers (such as OpenAI, Anthropic, Google, and others listed on our Subprocessor List) to power our AI features. We want to be transparent about how these providers handle your data:

  • No Training on Your Data by Providers: Our primary AI provider partners (OpenAI, Anthropic, Google) operate under API terms of service that prohibit them from using API customer data to train, fine‑tune, or improve their models.
  • Data Retention by Providers: AI providers may temporarily retain data for abuse monitoring and safety purposes, typically for 30 days or less, after which it is deleted. This retention is solely for safety and compliance purposes and does not include model training.
  • BYOK (Bring Your Own Key): If you use your own API keys (e.g., Anthropic or OpenRouter keys), your requests are still processed through Coplay's infrastructure when using the Unity plugin, allowing us to provide features like cost tracking and failed-call filtering. For our upcoming Electron application, BYOK requests are sent directly to the provider without passing through Coplay servers.
  • Enterprise Guarantees: For enterprise customers, we can provide additional contractual guarantees regarding AI provider data handling upon request.

Important Notice: OpenRouter and China‑Based Models

When using OpenRouter (either through Coplay's API or your own API key), you have access to a wide variety of AI models, including some from China‑based providers such as DeepSeek and Qwen (Alibaba). If you select these models:

  • Data may be processed in China: DeepSeek and Qwen models may route your prompts and data to servers located in the People's Republic of China.
  • Different privacy policies apply: These providers operate under their own privacy policies and data handling practices, which may differ significantly from U.S./EU providers.
  • Not covered by our "No China" commitment: Our commitment that Coplay-controlled customer data is not stored or processed in China, and is not accessible from China by Coplay personnel or subprocessors, applies only to Coplay's own infrastructure and our primary AI providers (OpenAI, Anthropic, Google, etc.). If you choose to use China‑based models via OpenRouter, your data will be sent to those providers' infrastructure.

Recommendation: If your organization has policies restricting data transfer to China, avoid selecting DeepSeek, Qwen, or other China‑based models when using OpenRouter. Enterprise customers requiring strict geographic data controls should contact us about custom configurations.

8. Your Choices and Rights

  • Enterprise Upgrade for No‑Training Guarantee: If you do not want your data used to train or improve Coplay's models, you must upgrade to an Enterprise plan. Enterprise is the only tier that guarantees your data will not be used for training purposes. Contact [email protected] for Enterprise pricing and agreements.
  • Access and Update: You may access and correct personal information through your account settings.
  • Deletion: You may request deletion of your data by contacting [email protected]. We will comply unless retention is required for legal or operational reasons. Note that deletion does not retroactively remove your data from models that may have already been trained.
  • Cookie Preferences: Adjust cookie settings in your browser. Some cookies are essential for proper functioning.

9. International Transfers and Data Residency

Coplay operates globally. By using our Service, you acknowledge that your data may be transferred to and processed in countries outside your residence. We rely on appropriate legal mechanisms for cross‑border data transfers, such as standard contractual clauses or adequacy decisions.

Data Residency

  • Primary Processing: All customer data is processed in the United States, specifically in US Central (us-central-1) and US West (us-west-1) regions.
  • Database and Storage: Customer data is stored in Supabase infrastructure located in the US West region.
  • Backups: Database backups are maintained in the same region as the primary data (US West).
  • AI Processing: When using Coplay's AI features, prompts and responses are processed by our AI provider partners, all of which maintain infrastructure in the United States or European Union.
  • No China Processing: Coplay-controlled customer data is not stored or processed in China, and is not accessible from China by Coplay personnel or subprocessors. If you choose to use China‑based models via OpenRouter, your data may be processed in China as described above.

For enterprise customers requiring specific data residency configurations, including custom VPC installations or air-gapped deployments, please contact us at [email protected].

10. Children’s Privacy

The Service is not directed to children under 13. If we learn that we have collected personal data from a child under 13 without parental consent, we will delete it. If you believe we have mistakenly collected such data, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we do, we will revise the “Effective date” above and provide notice as appropriate. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at [email protected] or at the mailing address listed on our website.