Flockbay Privacy Policy

1. Who we are

This Privacy Policy explains how 9560-9970 Québec inc., a company based in Montréal, Québec, Canada and doing business as Flockbay ("Flockbay", "we", "us"), collects, uses, shares, and protects personal information when you use Flockbay (the "Service").

Flockbay is the company brand and product platform behind Director 1 and Stage Engine.

2. Who can use Flockbay

Flockbay is not directed to children. You must be at least 18 years old to create an account or use the Service.

We do not knowingly collect personal information from anyone under 18. If we learn or reasonably believe that a person under 18 is using the Service, we may restrict or delete the account and associated information.

3. Information we collect

We collect information you provide, information created by your use of the Service, and information from service providers that help us operate Flockbay.

3.1 Account and organization information

When you create an account, sign in, join an organization, or use a workspace, we may collect:

• name, email address, authentication identifiers, and account status;
• organization, workspace, role, invitation, and membership information;
• account preferences, settings, and accepted legal-policy versions; and
• support, billing, and administrative contact details.

Authentication providers, such as Clerk or similar services, may process sign-in information on our behalf.

3.2 Project, chat, and game-building information

When you use Director 1, Stage Engine features, previews, exports, or related tools, we may process:

• prompts, messages, game ideas, instructions, and feedback;
• project names, project metadata, files, source code, configuration files, scripts, and build settings;
• uploaded or referenced assets, images, audio, models, textures, fonts, plugins, add-ons, tools, libraries, and related license or provenance metadata;
• screenshots, preview captures, logs, diagnostics, errors, tool results, and build or export outputs; and
• session history, project history, saved snapshots, and workspace activity needed to provide the features you request.

If you provide personal information about someone else, including a name, likeness, voice, image, or other identifying information, you are responsible for having the rights, notices, and consents required for that use.

3.3 Usage, device, and technical information

We may collect technical information such as:

• IP address, approximate location derived from IP address, browser, device type, operating system, referrer, and page or route information;
• session identifiers, timestamps, feature usage, clicks, navigation, performance, and reliability events;
• security, abuse-prevention, rate-limit, crash, and diagnostic logs; and
• cookie, local storage, and similar browser-storage identifiers used for authentication, preferences, analytics, attribution, and security.

3.4 Billing information

If you subscribe, start a trial, buy credits, or pay fees, payment providers such as Stripe, RevenueCat, or similar services may process payment information. We may store billing-related records such as plan status, invoices, transaction identifiers, tax information, subscription status, and billing history. We do not store full payment-card numbers when a payment provider processes them for us.

3.5 Support and communications

If you contact us, answer a survey, use a support widget, or interact with emails or messages from us, we may collect your contact details, message content, attachments, and related metadata.

4. How we use information

We use information to:

• provide, operate, secure, maintain, debug, and improve the Service;
• create accounts, authenticate users, manage organizations and workspaces, and enforce usage limits;
• provide Director 1, Stage Engine, project history, previews, build/export features, support, and related game-building tools;
• process payments, subscriptions, trials, invoices, taxes, credits, refunds, and account status;
• respond to support requests, legal requests, safety issues, copyright or IP complaints, and user inquiries;
• detect, prevent, investigate, and respond to fraud, abuse, security incidents, illegal content, rights violations, and violations of our Terms;
• measure performance, reliability, activation, product usage, and marketing attribution; and
• comply with law and protect Flockbay, users, and third parties.

5. AI and project processing

When you use AI-powered features, we may send prompts, messages, project context, files, screenshots, logs, tool results, and related content to AI providers or model infrastructure providers as needed to provide the requested feature.

AI providers may process that information under their own terms, privacy policies, data-processing terms, and retention rules. We choose provider settings and vendor paths intended to limit training on private project content where those controls are available.

We do not sell your personal information. We do not use private project content to train public models unless you opt in, make the content public, direct us to use it that way, or otherwise agree.

We may review project content, logs, and outputs when needed for support, debugging, security, abuse prevention, legal compliance, rights complaints, quality review, or operation of features you request.

6. How we share information

We share information only as needed for the purposes described in this Policy. Recipients may include:

• authentication providers;
• hosting, storage, database, infrastructure, and security providers;
• AI providers and model infrastructure providers;
• payment, billing, tax, subscription, and fraud-prevention providers;
• analytics, attribution, advertising-measurement, and product-improvement providers;
• support, email, messaging, and customer-communication providers;
• professional advisers, insurers, auditors, or legal representatives;
• law enforcement, regulators, courts, or other parties when we believe disclosure is required by law or needed to protect rights, safety, security, or the Service;
• another company in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction; and
• third parties you direct us to connect with or send information to.

We do not sell your personal information.

7. Cookies, analytics, and advertising measurement

We may use cookies, pixels, local storage, and similar technologies for authentication, security, preferences, analytics, support widgets, product measurement, and paid-ad attribution.

These technologies may be provided by Flockbay or by service providers such as authentication, analytics, advertising-measurement, support, or infrastructure providers. You can control some browser cookies through your browser settings. Blocking cookies may prevent parts of the Service from working.

Where the product offers analytics or communication preferences, you can use those controls. We may still process information needed for security, billing, legal compliance, service operation, and account administration.

8. International processing

Flockbay is based in Québec, Canada, but we may use service providers and infrastructure in other provinces, the United States, and other countries. Your information may be processed or stored outside Québec or outside Canada.

When personal information is processed outside Québec or Canada, it may be subject to the laws of those places. We use contractual, technical, and organizational safeguards intended to protect personal information in line with applicable law.

9. Retention

We keep personal information for as long as needed for the purposes described in this Policy, including to provide the Service, maintain account and project history, resolve disputes, enforce agreements, comply with law, prevent abuse, and keep business records.

Retention periods vary by information type. For example, billing and legal records may be kept longer than short-lived diagnostic logs. Backups and security logs may persist for a limited period after deletion from active systems.

Where available, you can delete certain projects, sessions, artifacts, or account information in-product. Some information may remain if retention is required for legal, security, fraud-prevention, billing, dispute-resolution, or backup purposes.

10. Security

We use reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, and loss. No system is perfectly secure, and we cannot guarantee absolute security.

If we believe a confidentiality or security incident creates a legally reportable risk, we will notify affected people and authorities where required by law.

11. Your choices and rights

Depending on where you live and how you use the Service, you may have rights to:

• access personal information we hold about you;
• correct inaccurate personal information;
• request deletion of personal information;
• request export or portability of certain information;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing where applicable; and
• make a privacy complaint.

To exercise privacy rights or make a privacy complaint, contact us at [email protected]. We may need to verify your identity before responding.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date when the Policy changes. If changes are material, we may provide additional notice in-product or by other reasonable means.

13. Contact

Legal entity: 9560-9970 Québec inc., doing business as Flockbay.

Location: Montréal, Québec, Canada.

Privacy and support contact: [email protected]