Legal
Privacy Policy
Effective July 5, 2026. How Heimech Studios collects, uses, and protects your information.
This Privacy Policy explains what Heimech Studios collects when you use our Services, why, and the choices you have. We aim to collect only what we need to run Heimech well.
1.What we collect
- Account data — your email, display name, and authentication identifiers (e.g. from Google sign-in).
- Content data — the projects, game content, and assets you create or upload to Atreus.
- Billing data — subscription status and payment metadata. Card details are handled by Stripe; we never see or store your full card number.
- Usage & technical data — logs, IP address, device/browser info, and basic analytics needed to operate and secure the Services.
- Messages you send us — e.g. via the contact form or email.
2.How we use it
- Provide, maintain, and improve the Services and your projects.
- Authenticate you and keep your account and data secure.
- Process payments and manage subscriptions.
- Send service and transactional emails (activation, password reset, receipts, and replies).
- Comply with legal obligations and enforce our terms.
We do not sell your personal information.
3.Sharing
We share information only with service providers who process it on our behalf under contract — including Stripe (payments), Google (sign-in), our email delivery provider, art-generation and AI/model providers you connect, and cloud hosting. We may also disclose information if required by law or to protect the Services and our users.
4.Cookies
We use a small number of essential cookies — primarily a signed session cookie to keep you logged in. We don't use third-party advertising cookies.
5.Data retention
We keep your data while your account is active and as needed to provide the Services. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain it for legal, security, or accounting reasons.
6.Security
We protect your data with encryption in transit, hashed credentials and tokens, access controls, and tenant isolation so you only ever access your own projects. No system is perfectly secure, but we work hard to keep yours safe.
7.Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise them, contact us — we'll respond within a reasonable time.
8.Children
The Services aren't directed to children under 13 (or the minimum age in your jurisdiction), and we don't knowingly collect their data. If you believe a child has given us personal data, contact us and we'll remove it.
9.Changes
We may update this Policy from time to time. We'll post the new effective date here and, for material changes, take reasonable steps to notify you.
10.Contact
Questions about your privacy? Contact us or email hello@heimech.com.