Privacy Policy

This Privacy Policy explains how Masque ("we", "us") collects, uses, and shares information when you use Masque Club (the "Service").

1. Information We Collect

• Account data: username, email (optional), display name, and a hashed password, or your identifier from Google/Discord if you sign in via OAuth.
• Usage & content data: chats, messages, personas you create, and your settings — used to provide the roleplay experience and persistent memory.
• Payment data: processed by Stripe. We store purchase records (pack, amount, status, Stripe identifiers) but do not store your full card details.
• Technical data: IP address and request metadata, used for security, rate-limiting, and debugging.

2. How We Use Information

• To provide, maintain, and improve the Service;
• To process payments and manage your credit balance;
• To maintain conversational memory and personalization;
• To protect the Service against abuse, fraud, and security threats;
• To comply with legal obligations.

3. Third-Party Processors

We share data with service providers strictly to operate the Service, including:

• Stripe — payment processing;
• Google (Gemini) / xAI / OpenRouter — AI model inference for generating responses;
• Mem0 — conversational memory persistence;
• Neon — database hosting;
• Google Cloud — application hosting.

Content you submit may be transmitted to AI providers to generate responses. Do not submit information you consider sensitive or wish to keep private.

4. Data Retention

We retain account and content data while your account is active. You may request deletion of your account and associated data by contacting us. Some records (e.g., transaction logs) may be retained as required for legal, accounting, or fraud-prevention purposes.

5. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at the address below.

6. Security

We use industry-standard measures including encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Service is for adults (18+) only and is not directed at children. We do not knowingly collect data from anyone under 18.

8. Changes

We may update this Policy. Material changes will be notified through the Service.

9. Contact

Privacy questions or requests: privacy@masque.club.