Privacy Policy

How we collect, use, and protect your data

Last Updated: February 4, 2026

Summary: We keep conversations generated by LLMs in our database to build NPCs memory. We minimize data collection, encrypt sensitive information, and never sell your data. You control your information and can request deletion at any time at: [email protected]

1. Data Controller

Hycompanion is developed by Noldo and is licensed under the MIT License. For privacy-related inquiries, please contact us through our Discord community.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Authentication provider (Google, Discord, or email)
  • Account creation date

2.2 Server Information

For plugin functionality, we store:

  • Server identifiers
  • NPC configurations and roles
  • Player UUIDs (for memory association)

2.3 Conversation Data

Regarding AI conversations:

  • Full conversations: Sent directly to OpenRouter for processing; we do not store the complete conversation content
  • Conversation summaries: We store AI-generated summaries of conversations to enable NPC memory functionality
  • Memory context: Condensed information about player interactions used to personalize future NPC responses

2.4 Token Usage Data

For statistics and billing purposes, we store:

  • Token usage counts following each conversation generation
  • Associated costs per conversation
  • AI model used for each interaction

This data helps us provide usage insights and optimize service performance.

2.5 Technical Data

We automatically collect:

  • IP addresses (for rate limiting and security)
  • Browser type and version
  • Usage statistics and error logs

3. How We Use Your Data

We use your information to:

  • Provide and maintain the Service
  • Enable NPC memory and personalized interactions
  • Process payments and manage subscriptions
  • Send service-related notifications
  • Improve and optimize the Service
  • Detect and prevent fraud or abuse

4. Data Storage and Security

4.1 Security Measures

We implement appropriate technical measures:

  • Encryption in transit (TLS/SSL)
  • Encryption at rest for sensitive data
  • Secure API key handling (hashed, never stored in plain text)
  • Regular security audits

4.2 Data Retention

We retain data as follows:

  • Account data: Until account deletion
  • Conversation summaries: Based on your plan (7-90 days)
  • Server logs: 30 days
  • Payment records: As required by law (typically 7 years)

5. Third-Party Services

We use the following third-party services:

  • OpenRouter: For AI model access. Conversations are processed through their infrastructure. See OpenRouter's Privacy Policy.
  • Supabase: For database and authentication services
  • Stripe: For payment processing (if applicable)

6. Your Rights

Depending on your location, you have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Request deletion of your account and data
  • Portability: Export your data in a standard format
  • Objection: Opt out of certain data processing

To exercise these rights, contact us through Discord or email.

7. Cookies and Tracking

We use:

  • Essential cookies: For authentication and security
  • Analytics cookies: We use Google Analytics to understand usage patterns, page views, and user interactions

Google Analytics collects:

  • Pages visited and time spent on each page
  • Referral sources and navigation paths
  • Device and browser information
  • Approximate geographic location (based on IP)

You can control cookies through your browser settings or opt-out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

9. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. The "Last Updated" date at the top indicates when changes were made.

11. Contact Us

For privacy-related questions or to exercise your rights: