Privacy Notice

1. Who We Are

Apex Funnel Studio, LLC (“we”, “us”) operates Tabletop Companion (the “Service”). For the personal data we collect about you in connection with the Service, we act as the data controller.

2. Personal Data We Collect

• Account data: email address, hashed password (or OAuth identifier), display name.
• Content you create: campaigns, parties, NPCs, journal entries, encounters, and similar game content you save.
• Support communications: messages you send us and our replies.
• Usage & device data: log data, IP address, browser/device identifiers, pages viewed, feature interactions, and similar telemetry.
• Cookies & local storage: session tokens and preferences (see Section 9).

Payment card details are collected and processed by Paddle, not by us. We receive only limited order metadata (e.g. plan, country, last 4 digits, transaction ID).

3. Why We Use Your Data (Purposes & Legal Bases)

• Provide the Service (account creation, saving your content, syncing across devices) — performance of a contract.
• Security, fraud prevention, abuse detection — legitimate interests and legal obligation.
• Customer support — performance of a contract / legitimate interests.
• Product improvement & analytics — legitimate interests.
• Marketing communications (if you opt in) — consent, which you can withdraw at any time.
• Legal compliance, tax, accounting — legal obligation.

4. Who We Share Data With

• Service providers / subprocessors: cloud hosting, database, authentication, email delivery, and analytics vendors that process data on our behalf.
• Paddle, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where reasonably necessary.
• Authorities where required by law, court order, or to protect rights, safety, or property.

We do not sell your personal data.

5. International Transfers

Our service providers may be located outside your country, including in the United States. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where available.

6. Retention

We keep your personal data for as long as your account is active and for a reasonable period afterward to comply with legal, accounting, and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it.

7. Your Rights

Subject to applicable law (including the GDPR for UK/EEA users), you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion (“right to be forgotten”);
• request restriction of, or object to, processing;
• request a portable copy of your data;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with your local data protection supervisory authority.

We aim to respond to verifiable requests within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and audit logging. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

9. Cookies & Local Storage

We use strictly necessary cookies and local storage to keep you signed in and to remember your preferences. We may use limited first-party analytics to understand aggregate usage and improve the product. We do not use third-party advertising cookies. You can manage cookies through your browser settings.

10. Children

The Service is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

11. Changes & Contact

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

To exercise your rights or ask a privacy question, contact Apex Funnel Studio, LLC through the support channels available within the Service.