Privacy Policy

Introduction

Roleplay Studio ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered training platform.

Please read this privacy policy carefully. By using Roleplay Studio, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

When you register for an account, we may collect:

• Name and email address
• Company name and job title
• Billing information (processed securely by our payment provider)
• Profile information you choose to provide

Usage Information

We automatically collect certain information when you use our platform:

• Training session data (scenarios practiced, scores, duration)
• Device and browser information
• IP address and general location
• Pages visited and features used

Training Session Data

When you use our AI roleplay features, we process conversation transcripts and voice data to provide the service. This data is used to generate feedback and track your progress. Voice recordings are processed in real-time and are not permanently stored unless you explicitly choose to save a session for review.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Personalize and improve your experience
• Develop new products, services, and features

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, analytics, payment processing)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you have given us permission to share your information

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.3) and at rest (AES-256)
• Regular security assessments and monitoring
• Access controls and authentication requirements
• Employee training on data protection

Your Rights and Choices

For All Users

• Access and update your account information at any time
• Delete your account and associated data
• Opt out of marketing communications
• Request a copy of your data

For California Residents (CCPA)

You have the right to:

• Know what personal information is being collected
• Know whether your personal information is sold or disclosed and to whom
• Say no to the sale of personal information (we do not sell your data)
• Access your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

For EU/EEA Residents (GDPR)

You have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing of your personal data
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information for legitimate business purposes or as required by law. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Third-Party Services

Our platform uses the following third-party services:

• Clerk: Authentication and user management
• Vercel: Hosting and infrastructure
• OpenAI: AI conversation processing
• ElevenLabs: Voice synthesis and processing
• Stripe: Payment processing (when applicable)

Each of these services has their own privacy policies governing their use of your data.

Children's Privacy

Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. You are advised to review this privacy policy periodically for any changes.