About this Policy
This Privacy Policy explains how Ambitionz Software Pte Ltd ("Ambitionz", "we", "our", or "us") collects, uses, shares, and protects your information when you use Cipher, our conversational AI platform for generating game development assets.
By default, conversation data contributes to AI training to improve Cipher's gaming-focused capabilities. You can opt out of training data usage at any time in your account settings while keeping full service functionality.
Introduction
Ambitionz Software Pte Ltd ("Ambitionz", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use Cipher, our conversational AI platform for generating game development assets.
Information we collect
2.1Account information
- Username and email address.
- Password (encrypted).
- Subscription tier and billing information.
- Profile preferences and settings.
2.2Conversational data
- Chat messages and prompts you send to our AI.
- Generated content requests and specifications.
- Conversation history and interaction patterns.
- Feedback on generated assets.
2.3Generated content
- 3D models, textures, and audio files created through Cipher.
- Associated metadata and generation parameters.
- Version history and iterations.
- Usage and download patterns.
2.4Technical data
- IP address and device information.
- Browser type and operating system.
- Usage analytics and performance metrics.
- Error logs and debugging information.
2.5AI training and improvement
- Conversation patterns and user interaction data (anonymized).
- Successful prompt structures and gaming terminology usage.
- Asset generation preferences and creative workflows.
- User feedback patterns and iteration behaviors.
- Platform usage optimization metrics.
By default, conversation data contributes to AI training to improve gaming-focused capabilities. You can opt out of training data usage in your account settings while maintaining full service functionality.
How we use your information
3.1Service provision
- Generate AI-powered content based on your requests.
- Maintain your account and subscription.
- Process payments and billing.
- Provide customer support.
3.2AI improvement
- Train and improve our gaming-focused AI models using anonymized conversation data.
- Optimize content generation algorithms for game development use cases.
- Enhance user experience based on successful interaction patterns.
- Develop new features and capabilities for gaming workflows.
You can opt out of AI training data usage at any time through your account settings.
3.3Analytics and optimization
- Analyze usage patterns and trends.
- Monitor system performance.
- Improve platform stability and speed.
- Conduct A/B testing for features.
3.4Communication
- Send service updates and notifications.
- Provide technical support.
- Share product announcements.
- Deliver marketing communications (with consent).
Data sharing and disclosure
4.1Third-party service providers
We share limited data with trusted providers who help us operate the Platform. Each handles only the data needed for its purpose:
| Service | Provider examples | Data shared | Purpose |
|---|---|---|---|
| Payment processing | Stripe, PayPal | Billing info, transaction data | Subscription management |
| Cloud hosting | AWS, Google Cloud Platform | All platform data (encrypted) | Service delivery and storage |
| Analytics | Google Analytics, Mixpanel | Usage patterns, demographics | Platform optimization |
| AI services | OpenAI, Anthropic, Stability AI | Prompts, generated content | Content generation |
| Email services | SendGrid, Mailchimp | Email addresses, preferences | Communications |
| Customer support | Intercom, Zendesk | Support conversations, user data | Customer assistance |
| Security services | Cloudflare, Auth0 | Access logs, security events | Platform protection |
| Monitoring | DataDog, Sentry | Performance data, error logs | System reliability |
Data processing agreements. We maintain formal data processing agreements with all third-party providers to ensure they handle your data according to applicable privacy laws.
4.2Legal requirements
We may disclose information when required by law or to:
- Comply with legal processes.
- Protect our rights and property.
- Ensure user safety and security.
- Investigate potential violations.
4.3Business transfers
In the event of a merger, acquisition, or sale, user information may be transferred as part of the business assets.
Data security
5.1Security measures
- Encryption of data in transit and at rest.
- Regular security audits and assessments.
- Access controls and authentication.
- Secure cloud infrastructure.
5.2AI model security
- Isolated training environments.
- Anonymization of training data.
- Secure model storage and deployment.
- Regular model security reviews.
Data retention
6.1Account data
We retain account information for as long as your account is active or as needed to provide services.
6.2Generated content
- Free tier: 30 days after generation.
- Paid tiers: until account deletion or upon request.
- You can download and delete your content at any time.
6.3Enhanced data retention schedule
| Data type | Retention period | Rationale |
|---|---|---|
| Account information | Active account + 7 years after closure | Legal and tax obligations |
| Generated content (free tier) | 30 days after generation | Storage cost optimization |
| Generated content (paid tiers) | Until account deletion or user request | User convenience and access |
| Conversation history | 3 years or until user deletion | AI improvement and support |
| Payment records | 7 years after transaction | Tax and financial regulations |
| Analytics data | 26 months maximum | GDPR compliance requirements |
| Security logs | 1 year | Security monitoring and compliance |
| Marketing data | Until consent withdrawal + 30 days | Marketing effectiveness and compliance |
| AI training data (anonymized) | Indefinitely | Continuous AI improvement |
| Support tickets | 3 years after resolution | Quality assurance and compliance |
Automated deletion. We implement automated systems to ensure data is deleted according to these schedules unless legal requirements mandate longer retention.
Your rights and choices
7.1Access and control
- View and download your generated content.
- Access your conversation history.
- Update account information and preferences.
- Delete specific conversations or content.
7.2Data portability
- Export your generated content in standard formats.
- Download conversation history.
- Transfer content to other platforms.
7.3AI training opt-out
- Opt out of AI training data usage through account settings.
- Request exclusion of past conversation data from future training.
- Maintain full service functionality regardless of opt-out status.
- All training data usage is anonymized.
Singapore PDPA compliance
8.1Personal Data Protection Act requirements
As a Singapore-based company, we comply with the Personal Data Protection Act (PDPA):
- Consent: we obtain clear consent for data collection and use.
- Purpose limitation: data is used only for stated purposes.
- Notification: we inform you about data collection practices.
- Access and correction: you can access and correct your personal data.
- Data breach: we notify authorities and affected individuals of breaches.
- Do Not Call Registry: we respect marketing preferences.
8.2Your PDPA rights
Under Singapore's PDPA, you have the right to:
- Withdraw consent for data processing.
- Access your personal data.
- Request correction of inaccurate data.
- Limit processing of your data.
- Object to direct marketing.
Cookie consent and management
9.1Cookie consent banner
When you first visit Cipher, we display a cookie consent banner that allows you to:
- Accept all cookies.
- Reject non-essential cookies.
- Customize your cookie preferences.
- Access our full Cookie Policy.
9.2Ongoing cookie management
You can change your cookie preferences at any time through:
- Browser settings.
- Our cookie preference center (accessible from any page).
- Account settings within Cipher.
- Email preferences for marketing cookies.
9.3Essential vs. optional cookies
- Essential cookies are required for basic functionality and cannot be disabled.
- Optional cookies (analytics, marketing, personalization) require your consent.
- You can withdraw consent for optional cookies at any time.
International data transfers
Your data may be processed and stored in Singapore, the United States, and other countries. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses.
- Adequacy decisions.
- Certification programs.
- Binding corporate rules.
Children's privacy
Cipher is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.
Changes to this policy
We may update this Privacy Policy periodically. We will notify you of material changes through:
- Email notifications.
- In-app notifications.
- Website announcements.
- Updated policy posting.
Contact information
For privacy-related questions or requests, reach out to us:
Questions about your privacy?
If anything here is unclear, or you'd like to access, correct, export, or delete your data, our team is happy to help.