Privacy Policy

1. Introduction

2. Information We Collect

3. How We Use Your Information

4. How We Share Your Information

5. Data Security

6. Cookies & Local Storage

7. Children's Privacy

8. Your Privacy Rights

9. Data Retention

10. Changes to This Policy

11. Contact Us

Characters as a Service

Your privacy matters to us. This policy explains how we collect, use, and protect your information when you use the CaaS platform and its services.

Characters as a Service / Immersive Operating Layers ("CaaS," "we," "us," or "our") is committed to protecting your privacy and the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you access or use our platform, AI characters, immersive operating layers, digital art systems, and associated services (collectively, the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not access or use the Service.

Account Information: When you create an account, we collect your full name, email address, company name, and optionally your phone number. If you sign in via Google or Apple, we receive your name, email, and profile photo from those providers.

Subscription & Payment Data: When you subscribe to a paid plan, payment processing is handled securely by Stripe. We store your Stripe customer ID and subscription status but do not store credit card numbers, CVVs, or full payment card details on our servers.

Usage Data: We collect information about how you interact with the Service, including pages visited, features used, character interactions, chat message counts (aggregated monthly), and session metadata.

Character Interaction Data: Conversations with AI characters may be processed to generate responses. We do not sell individual conversation content to third parties.

Analytics Events: We collect anonymized analytics events (page views, feature usage, session IDs) to improve the Service. These events may be collected from both authenticated and unauthenticated users.

Lead & Registration Data: When you submit inquiry forms, register for launches, join waitlists, or download toolkits, we collect the information you provide (name, email, company, and any additional details).

Embed & Domain Data: If you deploy CaaS characters on external websites, we collect and validate the domain information you authorize through our embed whitelist system.

We use the information we collect for the following purposes:

Service Providers: We share information with trusted third-party service providers who assist in operating the Service, including: - Stripe — for payment processing and subscription management - Cloud infrastructure providers — for hosting and data storage - Email delivery services — for transactional and marketing communications - AI model providers — for processing character interactions (no personally identifiable information is shared with model providers beyond conversation context)

Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

No Sale of Personal Data: We do not sell your personal information to third parties for advertising or marketing purposes.

We implement industry-standard security measures to protect your information, including:

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining robust protections.

The Service uses cookies and browser local storage for the following purposes:

We do not use cookies for third-party advertising or cross-site tracking. You may disable cookies in your browser settings, but doing so may impact the functionality of the Service.