This Privacy Policy explains what information MistScale Inc. ("MistScale," "we," "us") collects through mistscale.com, the dashboard, and the API/SDKs (together, the "Service"), and how we use, share, and protect it.

1. Information We Collect

Account information: name, email address, and a hashed password (or OAuth identity if you sign in with Google).

Payment information: subscription payments are processed entirely by Paddle.com, our payment provider and Merchant of Record. MistScale does not receive or store your full card number; Paddle handles that under its own privacy policy.

Platform content: NPC configuration, world knowledge/lore documents you upload, and the conversation data generated by your players when they talk to your NPCs, which we process in order to generate responses and maintain per-player memory and relationships.

Usage & technical data: API request activity, error logs, and IP address. IP address is used to enforce rate limits on signup/login and similar endpoints and to protect the Service from abuse.

Marketing site analytics & cookies: the marketing site uses analytics cookies (shown via our cookie banner, which lets you decline non-essential cookies) to understand traffic. The dashboard itself stores your session token in your browser's local storage rather than third-party cookies.

2. How We Use Information

To operate, maintain, and improve the Service;
To process payments and manage subscriptions, via Paddle;
To generate NPC responses and maintain persistent per-player memory, mood, and relationships;
To detect and prevent abuse, fraud, and rate-limit violations;
To respond to support requests sent to team@mistscale.com;
To comply with legal obligations.

We do not use your game content or player conversation data to train AI models, ours or any third party's.

3. AI Processing

When your NPC generates a response, the relevant conversation text, memory, and lore context is sent to our AI infrastructure provider (Microsoft Azure OpenAI Service) strictly to produce that response. This processing is necessary for the Service to function and is not used to train underlying models beyond what is required to serve your request.

4. Sharing of Information

We share information only with the providers that help us run the Service:

Paddle.com: payment processing and billing, as Merchant of Record;
Microsoft Azure: application hosting, database storage, and AI model inference;
Service providers bound by confidentiality obligations who help us operate the platform.

We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes.

5. Data Retention

We retain account and platform data for as long as your account is active. When you delete an NPC or a project, its associated conversation history, memory records, and uploaded documents are deleted from our systems as part of that action. You can request full account deletion at any time.

6. Data Security

Data is encrypted in transit (TLS) between your game, the dashboard, and our servers. We restrict access to production systems to what is needed to operate the Service. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Your Rights

You can access, correct, export, or delete your account data, or ask us what personal information we hold about you, by emailing team@mistscale.com. We will respond within a reasonable time.

8. Children's Privacy

The Service is intended for game studios and developers, not children. We do not knowingly collect personal information directly from children, and accounts require an email address to register.

9. International Data

Our infrastructure runs on cloud providers that may process and store data outside your own country, including in the United States. By using the Service, you consent to this transfer as necessary to provide it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the date at the top of this page when we do.

11. Contact

Questions about this policy or your data can be sent to team@mistscale.com.