Privacy Policy · Teron Engine

Who is responsible

QuantumLoop Labs LLC, a Florida limited liability company, is the controller of your personal data.

Privacy questions and requests: studio@quantumlooplabs.com. We are reached by email only.

What we collect and why

We collect only what we need to run Teron Engine. The table lists each kind of data, where it comes from, why we use it, our lawful basis under the GDPR and how long we keep it.

What we collect, why, and for how long
Category	Examples	Source	Purpose	Lawful basis (GDPR)	Retention
Account	Email address, display name, sign-in provider.	You, or the sign-in provider you choose (for example Google).	Create and secure your account, sign you in, send service emails.	Contract (Art. 6(1)(b)).	While your account is open; deleted within 30 days of closure.
Age confirmation	That you confirmed you are 18 or older (age band "adult") and when. We do not ask for or store your date of birth.	You, when you tick "I confirm I’m 18 or older".	Keep the service 18+ only.	Legal obligation and legitimate interests (Art. 6(1)(c) and (f)).	Kept with your account or waitlist entry and deleted with it.
Legal acceptances	Which versions of the Terms, Acceptable Use Policy and Privacy Policy you accepted, and when.	You, when you create your account.	Show what you agreed to and when.	Contract and legitimate interests (Art. 6(1)(b) and (f)).	While your account is open, then deleted within 30 days of closure.
Projects and content	Briefs, project settings, plans, work orders, verdicts, images and 3D assets.	You, the AI tool you connect, and Teron Engine while it plans and checks your work.	Plan your games, check the work, and make, store and show your assets.	Contract (Art. 6(1)(b)).	Until you delete them or close your account; deleted within 30 days of closure.
Activity and credit ledger	Project activity, plan and verdict usage, credit charges, reservations and grants.	Created by Teron Engine while it works for you.	Show the progress of your projects, bill credits accurately, fix problems.	Contract and legal obligation (Art. 6(1)(b) and (c)).	Activity: while your account is open. Ledger entries linked to payments: as long as tax and accounting law requires.
Payments	Purchase history, subscription status, Stripe customer id. We never receive card numbers.	You, through Stripe.	Take payments, manage subscriptions, handle refunds and disputes.	Contract and legal obligation (Art. 6(1)(b) and (c)).	As long as tax and accounting law requires (often 5 to 7 years).
Roblox connection	Roblox user id, the permissions you granted, uploaded asset ids and the place id you set.	You and Roblox, when you link your Roblox account.	Upload assets to your own Roblox account and run read-only checks on the place you saved. Teron Engine never publishes your games.	Contract (Art. 6(1)(b)).	Until you disconnect your Roblox account or close your account. Asset ids stay with the project until you delete it.
Waitlist	See the waitlist section: email, join date, preferences, position and share code.	You, when you join the waitlist.	Keep your place and tell you when Teron Engine opens. Product news only if you opt in.	Steps before a contract or legitimate interests (Art. 6(1)(b) or (f)); product news on consent (Art. 6(1)(a)).	Until 12 months after launch, or until you remove yourself.
Support email	Your messages to us and our replies.	You.	Answer questions and handle requests.	Legitimate interests and contract (Art. 6(1)(f) and (b)).	Up to 2 years after the conversation ends.
Abuse-prevention hashes	Short-lived keyed hashes of IP addresses and email addresses. We never store the IP address itself.	Your requests to our servers.	Rate limits and protection against spam and abuse.	Legitimate interests (Art. 6(1)(f)).	48 hours.
Server logs	Request time, path, status code, error details. No analytics or advertising identifiers.	Our hosting providers, automatically.	Keep the service secure and working.	Legitimate interests (Art. 6(1)(f)).	Up to 30 days, unless needed to investigate a security incident.

We do not collect sensitive data on purpose. Please do not put it in your briefs.

Evidence from Roblox Studio and your AI tool

When your AI tool asks Teron Engine for a verdict, it sends evidence from Roblox Studio: scene snapshots, scripts, logs and screenshots, and play-test reports. We use it only to check the work and show you the result.

Evidence and verdict renders are kept for 30 days, then deleted.
Plans, work orders, verdict records and assets are kept while your account exists.
Tool-call logs (which tool your AI called, when, and the outcome, with secrets removed) are kept for 90 days.
All of it is deleted within 30 days of closing your account.
We never ask for, store or use the login or subscription of the AI tool you connect.

AI providers

To plan your game, check the work of your AI tool and make assets, we send your briefs, plans, the Studio evidence for a verdict and asset prompts to the AI providers listed on Subprocessors. We send only what a task needs.
We use these providers through their business APIs. Their API terms say they do not train their models on data sent through the API.
Teron Engine does not train AI models on your data.

These companies process personal data for us under contracts that limit what they can do with it. Details are on Subprocessors.

Supabase: Sign-in and the main database.
Render: Hosts our API, gateway and the service your AI tool connects to, including asset generation jobs.
Vercel: Hosts the website.
Stripe: Payments, subscriptions, refunds and fraud checks.
Brevo: Sends waitlist and service emails.
Anthropic: Claude models that plan your game and review the work your AI tool does in Roblox Studio.
OpenAI: GPT Image models that make concept images for assets, called through fal.ai.
fal.ai: Runs image and 3D generation models for us.
Black Forest Labs (via fal.ai): FLUX image models, called through fal.ai.
Tripo / VAST (via fal.ai): Turns concept images into 3D models, called through fal.ai.

We do not sell personal data, and we do not "share" it for cross-context behavioural advertising.
We have no advertising or analytics pixels, and no third-party scripts on our website.
Roblox is not a subprocessor. When you link your Roblox account, Teron Engine uploads the assets you ask for to it and can run read-only checks on the place you saved, under Roblox's own terms. Teron Engine does not publish your games; you publish them from Roblox Studio.
We may disclose data if the law requires it, to protect people from harm, or as part of a sale or merger of our business (we will tell you first).

Where data is processed

Teron Engine is run from the United States, and most providers process data there. Where data moves between countries, we rely on the safeguards listed for each provider, such as Standard Contractual Clauses.

How long we keep data

Each kind of data has its own retention period in the table above.

When you close your account, we delete your personal data within 30 days. We keep billing records only as long as tax and accounting law requires. Backups roll over within 30 days.

Your rights

Under the GDPR and UK GDPR

Access your data and get a copy.
Correct data that is wrong (rectification).
Delete your data (erasure).
Restrict how we use it.
Get your data in a portable format (portability).
Object to processing based on legitimate interests.
Withdraw consent at any time, for example to product news.
Complain to a data protection supervisory authority.

Under California law (CCPA/CPRA)

Know what personal information we collect, use and disclose.
Delete it.
Correct it.
Opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of.
Limit the use of sensitive personal information. We do not use it.
Not be treated differently for using these rights.
Use an authorised agent to make a request for you.

How to use your rights

Email studio@quantumlooplabs.com from the address on your account. We may ask you to confirm your identity first. We reply within 30 days (GDPR) or 45 days (CCPA), and tell you if we need more time.

Age: adults only

Teron Engine is for adults 18+ only. We do not offer it to anyone under 18.
We do not knowingly collect personal data from anyone under 18. If we find that we have, we delete it.
When you join the waitlist or create an account, you confirm that you are 18 or older. We record the time you confirmed. We do not ask for or store your date of birth.
If you are a parent and think your child has signed up or joined the waitlist, email studio@quantumlooplabs.com. We will delete the account or entry.

Security

We protect data with encryption in transit, access controls, separate credentials for each service and hashed or keyed values where we can. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

Pre-launch waitlist

Before Teron Engine launches you can join a waitlist if you are 18 or older. This section explains what the waitlist stores, why, for how long, and how to remove yourself.

What we store

Your email address.
When you joined.
Your answer to "I am a..." if you chose one, and which form you used.
That you confirmed you are 18 or older, and when. We do not ask for or store your date of birth.
Your email preference (product news on or off) and the version of this wording you agreed to.
Your waitlist position, your personal share code and which code (if any) you joined with.
Short-lived, one-way keyed hashes of IP addresses and email addresses, used only to stop abuse (rate limits). We never store an IP address itself.

Why we use it

To keep your place on the waitlist and show it to you when you join.
To send you your status link, and to tell you when Teron Engine opens.
To send product news only if you ticked the optional box.
To protect the waitlist from spam and abuse.

How long we keep it

Waitlist entries are kept until 12 months after launch, or until you remove yourself, whichever is first.
Abuse-prevention hashes are deleted after 48 hours.

Your choices

Every waitlist email has a link to see your status, turn product news on or off, stop all waitlist emails, or remove yourself.
Joining shows your place on the list and your share link straight away. If someone enters an email address that is already on the list, the form only says so; the place, share link and settings are sent to that address by email.
Removing yourself deletes your email address and waitlist details straight away.
You can also contact us and ask for a copy of your waitlist data or for it to be deleted.

Remove me from the waitlist: Use the "Remove me from the waitlist" link in any waitlist email.

Under 18?

You can't join; if you are a parent and think your child joined, email studio@quantumlooplabs.com.

Cookies

We use only strictly necessary cookies: to keep you signed in and a small hint that you are signed in. There are no analytics, advertising or third-party cookies, so there is no cookie banner. The full list is in the Cookie Policy.

Changes to this policy

We will post any update here with a new version number and date. For a material change we will also tell you by email or in the app before it applies.

Contact

Privacy questions and requests: studio@quantumlooplabs.com. All contact details are on Legal & Contact.