Privacy Policy

1. What this covers

This Privacy Policy explains what information Optovo, LLC ("Optovo", "we") collects when you use Spawnly (the website at spawnly.gg, the Spawnly plugin for Roblox Studio, and your account), how we use it, who we share it with, and the choices you have. It is part of the Terms of Service. We keep it plain on purpose; if anything is unclear, ask at help@spawnly.gg.

2. What we collect

Account. When you sign in with Discord we receive your Discord user id, username, display name and avatar. We do not receive your email address, your Discord messages, or your password.

Your Studio and place. When you connect a Studio, the plugin sends the Roblox user id and username signed in to Studio (so the connect page can name it), the place's name and Roblox id, a random id we assign to the Studio, and the plugin version. When you make a request, the plugin sends the parts of your place the service needs: the tree of objects and their properties, the source of scripts, your current selection, the game's output while it runs, and anything you attach (screenshots, images, files).

Requests and results. The messages you type, the model and settings you chose, the steps the service took, its replies, the changes it made, and the credits each request used. Your standing instructions from the Customize page.

Purchases. When you buy credits, Stripe handles the payment and gives us a record with the pack, the amount, the date, and Stripe's ids for the session and payment. We never see or store your card number.

Technical. Your IP address (used to match a Studio to the browser on the same network when you connect, to limit abuse, and in server logs), browser and request details such as pages visited and timestamps, and errors. Cookies are described in section 12.

Support. What you send us by email or through Discord when you ask for help or give feedback.

3. Why we use it

• To provide the service: to read and change your place as you ask, to run models, to keep your chats so you can come back to them, to show your usage and credits, and to keep Studios connected to your account.
• To take payment and keep accounts: to sell credits, record purchases and refunds, and prevent fraud and chargeback abuse.
• To keep Spawnly safe and working: to prevent abuse, enforce our terms and rate limits, debug problems, and understand which features and models are used. Where we look at usage for this, we prefer aggregated or de-identified data.
• To talk to you: to answer support requests, and to tell you about changes to the service or these terms.
• To comply with the law and to protect our rights, our users and the public.

We do not sell your personal information, we do not show ads, and we do not use your content to train AI models.

4. AI providers and your place

Spawnly does its work with large language models from third-party providers. When you send a request, the parts of your place described above and your message go to the provider of the model you picked: Anthropic for Claude models, and, through OpenRouter, providers such as OpenAI, Google and DeepSeek for theirs. The panel shows which provider makes each model.

These providers process the data to answer the request, under their API terms and our agreements with them, which do not allow them to use your data to train their models. Some providers may keep API data for a short period for abuse monitoring, as their policies describe. If you would rather certain content never leave your Studio, do not attach it and keep it out of the place you connect.

5. Who we share it with

• AI providers (section 4), to carry out your requests.
• Stripe, to process payments. Stripe's privacy policy applies to the details you enter on its checkout page.
• Discord, for sign-in. Discord only tells us who you are; we do not post to Discord on your behalf.
• Roblox, when the service searches the Creator Store or reads public asset information on your behalf; those requests carry the search terms, not your account.
• Hosting and infrastructure providers in the United States that run our servers and database under contracts that limit them to providing the service to us.
• Authorities and others when the law requires, or to protect the rights, safety and property of Optovo, our users or the public, or in connection with a merger, sale or reorganisation of our business, with notice to you where the law requires it.

We do not share your content or personal information with anyone else.

6. How long we keep it

• Chats, requests and changes: while your account exists, so your history works. You can delete individual chats in the panel at any time; deleted chats are removed from our database within 30 days.
• Place content sent for a request: the snapshot used for a request is kept with that request's record; it is not kept separately.
• Account and credit records: while your account exists, then removed within 30 days of closure, except purchase and refund records, which we keep for 7 years for tax and accounting.
• Studio connection records (the codes and tokens that link a Studio to your account): codes live 15 minutes; tokens until you sign the Studio out or close your account.
• Server logs including IP addresses: up to 30 days.
• Support emails and tickets: up to 2 years, so we can follow up.

7. How we protect it

Traffic between the plugin, the website and our servers is encrypted (HTTPS). Studio tokens are random, can be revoked from your account page, and are refused after you sign a Studio out. Payment details are handled by Stripe, a PCI-certified processor, and never reach our servers. Access to our systems is limited to the people who need it. No system is perfectly secure; if we learn of a breach affecting your information we will tell you and the authorities as the law requires.

8. Your choices and rights

• See and export what we hold about you: write to help@spawnly.gg and we will send it within 30 days.
• Correct your name or avatar by changing them on Discord and signing in again.
• Delete chats yourself in the panel, sign Studios out on your account page, or ask us to close your account and delete your data at help@spawnly.gg. We keep only what section 6 says we must.
• Limit what is sent: the plugin only reads the place you have open and only while a request runs; do not connect places or attach files you do not want processed.
• Object or complain: you can object to any use described here, and you can complain to a data protection authority where you live.

We will never treat you differently for exercising these rights.

9. California residents

If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what personal information we collect, use and share and why (this policy); to access it and receive a copy; to correct it; to delete it; to opt out of the sale or sharing of personal information; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; we also do not collect sensitive personal information as the law defines it. To exercise any right, email help@spawnly.gg from the address you want us to reply to and tell us your Discord username; we may ask you to confirm the request from your account. An authorised agent may act for you with your written permission. California users under 18 may ask us to remove content they posted by writing to the same address.

The categories of personal information we have collected in the past 12 months are those in section 2: identifiers (Discord and Roblox ids and names, IP address), commercial information (purchases), internet activity (requests and usage), and the content you provide. We disclose them for business purposes to the recipients in section 5.

10. Users outside the United States

Spawnly is run from the United States and your information is stored and processed there, and by AI providers that may be elsewhere. Data protection laws in the United States may differ from those where you live. Where the law where you live requires a legal basis for processing, ours are: performing our contract with you (providing the service you asked for), our legitimate interests in running, securing and improving the service, your consent where we ask for it, and legal obligations. You may withdraw consent at any time. Users in the United Kingdom and the European Economic Area may contact us at help@spawnly.gg to exercise their rights and may complain to their local supervisory authority.

11. Children

Spawnly is not for children under 13 and we do not knowingly collect personal information from them. Users between 13 and 17 may use Spawnly only with a parent or guardian's agreement. If you believe a child under 13 has an account, tell us at help@spawnly.gg and we will delete it.

12. Cookies

The website uses a small number of cookies that are needed for it to work: a session cookie that keeps you signed in (up to 30 days), and short-lived cookies used during Discord sign-in. We do not use advertising or tracking cookies, and we do not load third-party analytics. Blocking cookies will stop sign-in from working.

13. Changes to this policy

We will update this policy when the service or the law changes. For changes that matter, we will ask you to accept the updated terms when you next sign in, or tell you in the panel or by email, before they take effect. The date at the top shows the current version.

14. Contact

Optovo, LLC, California, United States. help@spawnly.gg.