Privacy Policy

Introduction

Soofte, Inc. (“Humalike”) is dedicated to safeguarding personal information. This policy details how we collect, use, disclose, and protect data submitted through our websites and services. It describes the roles and choices relevant to our websites, business services and AI NPC service. Applicable rights depend on the processing and your jurisdiction.

Key Definitions

• “Humalike” refers to Soofte, Inc. and its affiliates
• “Controller” means the party deciding why and how personal information is processed. Humalike is the controller for its own account, billing and security purposes; the server owner is the controller for Player data processed on their instructions
• “Personal Information” encompasses any data identifying an individual, including names, identification numbers, location data, IP addresses, and factors relating to physical, physiological, genetic, mental, economic, cultural, or social identity

1. Limited Data Sharing

Humalike shares personal information only for:

• User requests
• Processing transactions authorised by the user
• Legal disclosure requirements
• Assistance from service providers necessary to operate our platform
• Professional advisory services

2. Processing Purpose and Legal Basis

3. Security Safeguards

We use access controls, authenticated service connections and encryption to protect information. Access is restricted according to service and support responsibilities. No system can guarantee absolute security.

4. Data Retention

Retention periods depend on:

• Query-related data: reasonable period after relationship concludes
• Contract/service data: duration of service delivery plus reasonable query period
• Claims-related data: applicable legal claim period
• Regulatory requirements: as mandated by law

You may request deletion using the contact details below. We verify the request and its scope, including the relevant server and game-character identifier for Player requests. Deletion is subject to applicable legal requirements and permitted exceptions; we explain any remaining data and the reason for retaining it.

5. International Data Transfers

Personal information may be processed outside your country, including in the United States and the European Union. Regional hosting of one component does not mean that all AI processing, support, logs or backups remain in that region. Our provider list identifies recipients and location qualifications. Transfers outside the EEA rely on an adequacy decision or the EU Standard Contractual Clauses. You may contact us for a copy.

6. Business Use and the AI NPC Service

Our services target B2B commercial use, with one exception: individuals may use the Humalike AI NPC service for game servers under the AI NPC Terms of Service, and this policy applies to the personal information we process for that service. For all other services, consumers or those seeking non-commercial use should not register or submit personal information. Requests concerning personal information are handled under the rights and retention provisions of this policy.

7. AI NPC Service: Server Owners and Players

The AI NPC service adds AI characters (“NPCs”) to game servers. It involves two groups of people: the server owners who use the service, and the players who talk to NPCs on those servers.

Where AI NPC plans are sold through Tebex, payments are processed by Tebex Limited, the reseller and merchant of record, as an independent controller under its own privacy policy.

Where Humalike acts as a processor, it processes player data only on the server owner's instructions under the processing terms in section 14 of the AI NPC Terms of Service, using the providers listed on our Sub-Processors page. Players should direct requests about their data to the server owner, who is responsible for telling them about this processing; Humalike helps server owners answer those requests. Players may also contact us at mtk@soofte.com and we will pass the request on or answer it where we are the controller.

8. NPC processing, retention and provider controls

Deepgram receives Player voice audio for transcription. Google Gemini receives text prompts, conversation context, NPC memory and textual game context. ElevenLabs receives NPC response text and voice settings for speech synthesis; that text may repeat information a Player supplied. AWS hosts application data and voice transport. Operational logs and product analytics can contain identifiers and usage metadata. A game pseudonym or identifier does not make this information anonymous.

We do not archive player recordings. Audio is processed for live transport and transcription. Conversation transcripts and raw memory messages are eligible for deletion after 90 days; full model-call prompts, responses and error content are eligible for redaction after 30 days. Daily retention jobs process eligible records in batches, so removal occurs during a successful cleanup cycle rather than at the exact anniversary of a record. Processing or accounting dependencies can delay individual records; these are checked before deletion.

Derived NPC profiles expire according to the age of their source material, using a 90-day window; stored gameplay events and event-derived beliefs follow their event age. These limits do not apply to all server-authored lore or generated character configuration. We retain account, billing, security and minimal deletion-prevention records for the purposes described in this policy, applicable legal requirements and the establishment, exercise or defence of legal claims. Production database recovery copies normally expire after 14 days; restoring a copy requires reapplying deletion instructions before normal processing resumes.

A verified Player-erasure request covers relevant transcripts, derived memory, stored responses and associated copies. Where shared NPC memory cannot be reliably separated by Player, fulfilling that request may also reset other shared NPC memory on the server and require a temporary service suspension. Provider-held copies and recovery copies are handled separately under the applicable processing arrangement and retention requirements. We may retain the minimum records needed to prevent restoration, document completion or meet legal obligations, and explain any applicable restriction to the requester.

We do not use Player conversations to train our own general-purpose AI models. Provider security monitoring and retention are separate from model improvement. We send Deepgram transcription requests to its EU endpoint with model-improvement opt-out. Google’s Gemini abuse-monitoring policy provides for 55 days of relevant content retention and limited review, including use for policy-enforcement models. Its Paid Services terms exclude product-improvement use of prompts and responses. ElevenLabs receives NPC response text for speech synthesis; training data use is disabled on our account. Provider-specific retention, processing locations and applicable terms are described in our provider list.

Provider details and current published terms are linked from the provider list. These controls do not replace the server owner’s obligation to inform Players and establish a lawful basis before processing their data. The AI NPC service is intended for adults. Server owners must restrict access to eligible adult Players and comply with applicable provider eligibility requirements.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correction of inaccurate data
• Restriction or objection to processing
• Erasure when retention is no longer necessary
• Data portability in machine-readable formats
• Objection to automated decision-making
• Withdrawal of consent at any time
• Lodging a complaint with your country's Data Protection Authority

NPCs generate responses and in-game actions automatically and may build memories and inferred relationships from interactions. These in-game profiles can be inaccurate. The service is not intended for decisions producing legal or similarly significant effects about a person, such as employment, credit or access to essential services. Contact us or the server owner to question or request correction or deletion of information about you.

Cookies and Analytics

Humalike uses cookies and analytics tools to improve the website experience. You will be asked to provide consent before any non-essential cookies are set. Third-party websites linked from Humalike platforms are not covered by this policy — please review their privacy policies independently.

Policy Updates

Changes to this policy will be posted on this page. Users are encouraged to review updates periodically. Material changes will be communicated via email where applicable.

Contact

For privacy-related questions or to exercise your rights, contact us at mtk@soofte.com.