Privacy Policy

1. Information we collect

• Roblox account information.When you “Sign in with Roblox” we receive your Roblox user ID, username, display name, and avatar image via Roblox’s OAuth 2.0 service. We never see or store your Roblox password.
• Content you provide. The prompts, instructions, and reference images you submit, and the code and assets the Service generates for you.
• Studio project context. When you connect the Heaty Studio plugin, we receive a lightweight map of your project (instance paths and class names) and, for scripts relevant to your request, their source — used only to generate accurate changes.
• Usage data. Records of builds you run, which engine was used, and credits consumed, to operate plan limits and show your usage.
• Payment information. Subscriptions are processed by Stripe. We store a Stripe customer ID, subscription ID, and status — we do not store your card number.
• Technical data. A signed session cookie to keep you logged in, and basic server logs (such as timestamps and error information).

2. How we use your information

• To provide the Service — generating code and assets from your prompts and applying them to your Studio session.
• To authenticate you and keep your account and projects separate and secure.
• To operate billing, subscriptions, plan limits, and usage tracking.
• To maintain, debug, secure, and improve the Service.
• To communicate with you about your account or important changes.

3. Service providers we share data with

We use trusted third parties (“subprocessors”) to run the Service. We share only what is needed for each to perform its function:

• Roblox — authentication (Sign in with Roblox).
• Anthropic and Z.ai (Zhipu AI) — AI model providers that process your prompts and project context to generate results.
• Stripe — payment processing.
• Supabase — database and hosting for your account and project data.

We do not sell your personal information. We may disclose information if required by law or to protect the rights, safety, and security of Heaty and its users.

4. Data retention & deletion

We keep your account and project data while your account is active. You can request deletion of your account and associated data at any time by contacting us at support@heaty.ai. We will delete it within a reasonable period, except where we must retain certain records (for example, for legal or accounting obligations).

5. Security

Data is transmitted over encrypted connections (HTTPS) and stored with access controls, including database row-level security so that your data is only accessible to the Service. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

6. Children’s privacy

The Service is intended for developers building on Roblox. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under the age of majority in your region, you may use the Service only with the involvement and consent of a parent or legal guardian. If you believe a child has provided us personal information, contact us and we will delete it.

7. Your rights

Depending on where you live (for example, under GDPR or CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at support@heaty.ai.

8. Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

10. Contact

Questions about this policy? Email us at support@heaty.ai.