Privacy Policy

This Privacy Policy describes how Nonplayer, a business entity to be formed d/b/a Nonplayer ("Nonplayer", "we", "us", "our") collects, uses and discloses information about you for the website nonplayer.bot and its subdomains (the "Website"), Nonplayer's AI Personas, Agents, Skills and Concepts, and any services, content, tools, features and functionality offered on or through the Website (collectively referred to as the "Services"). For the purposes of this Privacy Policy, "you" and "your" means you as the user of the Services. Capitalized terms not defined here have the meanings given in our Terms of Service.

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not understand or agree to this Privacy Policy, please do not use or access the Services.

Changes to this privacy policy

We may modify this Privacy Policy from time to time, in which case we will update the "Last revised" date at the top of this Privacy Policy. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

Collection and use of information

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

In addition to the specific uses described below, we use the information that we collect to provide, maintain and improve the Services, including to understand your requests, build and evolve your Personas, carry out research and other tasks on your behalf (including autonomously during Heartbeats), generate responses, and remember context from your prior interactions with the Services. We also use this information to communicate with you, measure and analyze performance, enhance the safety and security of our Services, comply with applicable legal obligations, and protect our rights and the rights of other individuals. We do not sell your information, share it for cross-context behavioral advertising, or disclose it to data brokers.

Information you directly provide us

Some features of the Services require you to provide certain information. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information you directly submit through our Services includes:

• Account information, such as your name, email address and profile photo, which we receive from Google when you sign in (see "Information collected from Google Sign-In" below). We use this information to create and maintain your Account, provide the Services, and communicate with you.
• Early-access requests, such as the email address and optional reason you provide if you join our waitlist. We use this information to manage access to the Services and to contact you about it.
• Payment information, if we introduce paid features, such as billing details collected through a third-party payment processor. We would use this information to process your payment and provide the Services.
• Any other information you choose to include in communications with us, for example, when you email us for support.

Information collected through your use of the Services

The Services include AI Personas that you create and work with in Agents. To do their work, Personas have access to the information you share with them and the information they gather on your behalf. This includes:

• Your content, such as the descriptions you use to create Personas, the Personas themselves (including their evolving traits, memories and goals), your chat messages, Concepts and documents, and any Skills you create or run.
• Research activity, such as the search queries Personas run, the web pages they visit, and the information they retrieve and record in Concepts, whether in response to your messages or autonomously during Heartbeats.
• Information about other people that you share with a Persona, or that a Persona gathers from publicly available sources while working for you (for example, a public professional profile of someone you plan to contact). You are responsible for having the right to share information about others with the Services.

Depending on how you use the Services, this content may include information that is considered sensitive, such as information about health, finances, or beliefs. Please only share sensitive information with a Persona if you are comfortable with it being processed as described in this Privacy Policy.

AI model training. We do not use your content to train or fine-tune AI models, and we do not permit the third-party AI model providers that power the Services to do so. We request zero-data-retention processing from those providers, meaning they are not permitted to retain your prompts or outputs after responding. We may use your content in de-identified or aggregated form, which no longer identifies you, to evaluate and improve the quality, prompts and features of the Services.

Access by our team. Authorized Nonplayer personnel may access your content only as needed to provide support you request, to investigate and fix technical problems, to review suspected abuse or safety issues, to enforce our Terms of Service, or to comply with law.

Please note that the Services and Personas are not a professional advisor, so you should not rely on them for actions requiring financial, legal, medical, or other advice or judgment.

Information collected from Google Sign-In

You sign in to the Services with your Google account. When you do, we receive your basic Google profile information: your name, email address, profile photo and a unique account identifier. We use this information to authenticate you, create and maintain your Account and communicate with you. We do not request access to your Gmail, Google Drive, Google Calendar, contacts or other Google Workspace data. You may revoke the Services' access to your Google account at any time from your Google account settings; doing so will prevent you from signing in, but does not by itself delete your Nonplayer data (see "Data retention and deletion" below).

If we later offer features that let you connect other accounts or services (Connected Services), we will describe the information we receive from them and how we use it before you connect them.

Information we collect automatically about your interaction with the Services

We also automatically collect certain information about your interaction with the Services ("Usage Data"). We use Usage Data to operate and secure the Services, tailor features to you, run analytics, and better understand how people use the Services.

• Usage information, such as the pages you view, sign-up and sign-in events, when your Agents run Heartbeats, and the amount of AI processing (for example, token counts) used by your messages.
• Log data, network and device information, including IP address, device type, operating system, browser type and version, time zone setting, and date and time stamps.

Information collected from other sources

Personas may retrieve publicly available information from the internet, including information about you or other people, when carrying out research on a user's behalf. We may also receive information from service providers that help us operate the Services, such as analytics providers. Any information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party's policies or practices. For more information, see the section below, Third-party websites and links.

Deidentified information

We may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you ("deidentified information") (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any lawful purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

Cookies and other tracking technologies

We and our service providers use cookies, browser storage and similar technologies ("Tracking Technologies") to operate the Services and understand how they are used. Specifically:

• Essential technologies keep you signed in and secure your session (for example, Firebase Authentication stores sign-in state in your browser). The Services do not work without these.
• Analytics technologies, provided by Google Analytics, tell us which pages are visited and how people sign up and use the Services. Google's use of this information is governed by the Google Privacy Policy. You can opt out using the Google Analytics Opt-out Browser Add-on.

We do not use advertising or marketing cookies, and we do not allow third parties to track you across other websites through the Services. Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete cookies and site data from your browser; however, doing so may sign you out or cause some of the Services to work incorrectly.

Your browser settings may allow you to transmit a "Do Not Track" or similar signal. Our Website is not currently designed to respond to such signals.

Disclosure of your information

We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties:

• Vendors and other service providers who help us provide the Services, including cloud hosting, database and authentication (Google Cloud and Firebase), transactional email delivery, security, and analytics.
• Third-party AI model providers and the routing service we use to reach them, which process your prompts and content to generate responses. We request zero-data-retention processing and do not permit these providers to use your content to train their models.
• Web search and web page retrieval services, and the websites that Personas visit, which receive the search queries and page requests needed to carry out research on your behalf.
• Third parties with whom the Services interact on your behalf (including autonomously), for example, if you use a future feature that lets a Persona send a message or publish content for you.
• Third parties to whom you request or direct us to disclose information, such as when you connect a third-party account or share your Output.
• Third parties in connection with or in anticipation of a business transaction such as a merger, acquisition, financing, or sale of assets.
• Professional advisors, such as auditors, law firms, or accounting firms.

We may also disclose your information for legal and security reasons and to protect our Services and business, including to cooperate with law enforcement and regulatory inquiries, to detect and prevent fraudulent or illegal activity, to exercise or defend legal claims, and to ensure the safety and security of our business and users.

Third-party websites and links

We may provide links to third-party websites or platforms, and Personas may show you content from them. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable privacy policy, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of those platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Data retention and deletion

We retain your information for as long as your Account is active or as needed to provide the Services, and as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

• You can delete an individual Agent at any time, which permanently deletes its messages, Concepts and documents and stops its Heartbeats. You can also delete individual Personas and Skills.
• You can delete your entire Account at any time using the "Delete account" option in your workspace. This permanently deletes your profile, Personas, Agents, messages, Concepts, documents, Skills and any waitlist entry for your email address, stops all scheduled Heartbeats, and removes your sign-in record.
• Deleted data may persist for a limited period in routine system logs and backups before it is overwritten, and we may retain information where required by law or to resolve disputes and prevent abuse.

If you cannot access your Account, you may also request deletion by emailing us at hello@nonplayer.bot.

Children's privacy

Our Services are intended only for people 18 years of age or older, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from someone under 18, we will delete it. If you are the parent or guardian of a child who has provided us with personal information, you may contact us at hello@nonplayer.bot to request that it be deleted.

Data security

We use reasonable administrative, technical and physical measures designed to protect your information, including encryption in transit and server-side access controls that limit your content to your own Account. Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee "perfect security." Autonomous AI features such as Personas and Heartbeats may present additional privacy and security considerations because they can perform tasks independently on your behalf.

As with any technology that acts on your behalf, there are inherent considerations to be aware of. These include the possibility of unintended actions, incorrect or incomplete outputs, and web pages or other third-party content that contain misleading instructions intended to influence AI agents. We encourage you to review what your Personas do, and to be mindful of these considerations when deciding what information to share with them.

Moreover, any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

Your privacy rights

Depending on where you live, including California, Colorado, Connecticut, Delaware, Oregon, Texas, Utah, Virginia and other U.S. states with comprehensive privacy laws, you may have some or all of the following rights with respect to your personal information:

• Access and portability: to confirm whether we process your personal information and to obtain a copy of it in a portable format.
• Correction: to correct inaccurate personal information.
• Deletion: to delete personal information we hold about you. You can do this yourself using "Delete account", or by contacting us.
• Opt-out: to opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in any of these activities.
• Limit use of sensitive personal information: we only use sensitive personal information to provide the Services you request and for other purposes permitted by law.
• Non-discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, email us at hello@nonplayer.bot from the email address associated with your Account. We may need to verify your identity before responding. You may use an authorized agent to submit a request on your behalf where permitted by law, in which case we may ask for proof of the agent's authority. If we decline your request, you may appeal by replying to our decision, and if your appeal is denied you may contact your state attorney general.

California "Shine the Light." California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

Nevada residents. Nevada residents have the right to opt out of the sale of certain personal information. We do not sell personal information as defined in Nevada Revised Statutes Chapter 603A.

International users

The Services are operated in the United States, and your information is processed and stored in the United States, where data protection laws may differ from those in your country. By using the Services, you understand that your information will be transferred to and processed in the United States.

How to contact us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at hello@nonplayer.bot.