Privacy Policy
LightningRPG.com
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use LightningRPG (the “Service”), and describes your rights in relation to that information.
In this Policy, “we”, “us”, and “our” refer to Realmtech Pty Ltd (ACN 693 004 554), the operator of LightningRPG. We are the entity responsible for your personal information and act as the data controller under applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU and UK General Data Protection Regulation (GDPR) where applicable, and applicable United States state privacy laws.
By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.
1. Who We Are
Realmtech Pty Ltd (ACN 693 004 554)
526/368 Sussex St, Sydney NSW 2000, Australia
Contact: contact@lightningrpg.com
2. Information We Collect
Information you provide
- Account information: your name and email address, collected through our authentication provider when you create an account. We do not store your password.
- Session content: the tabletop role-playing game transcripts, recordings, notes, campaign settings, character details, and other material you upload or supply to the Service for processing.
- Payment information: when you purchase credits, our payment processor collects your billing and card details directly. We do not receive or store your card details; we retain only a transaction reference and your credit balance.
- Communications: any information you provide when you contact us for support.
Information collected automatically
- Usage and technical data: such as IP address, browser and device information, and server logs generated when you use the Service.
- Session cookies: we use a session cookie to keep you signed in and to operate the Service.
Information about other people
Session transcripts and recordings may contain the personal information of other players at your table. Before you submit such material, you are responsible for ensuring you have the necessary consent from the other people involved for their information to be processed as described in this Policy.
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service, including processing your session content to generate the artefacts you request (such as narrative documents, campaign journals, illustrations, and audio episodes);
- Manage your account, credits, and payments;
- Respond to your support requests and communicate with you about the Service;
- Protect against fraud and misuse, enforce our terms, and comply with our legal obligations.
We do not use your session content to train our own artificial-intelligence models, and we do not sell your personal information.
4. Processing by Third-Party AI Providers
To generate the artefacts you request, we send your session content to third-party artificial-intelligence service providers. These providers fall into the following categories:
- Text-generation providers (for narrative, journal, and metadata generation);
- Image-generation providers (for illustrations and cover art);
- Audio-generation providers (for podcast-style episodes, or transcription services);
- Animation providers (for animated scene illustrations).
We may change the specific providers we use from time to time as our technology evolves. We maintain a current list of these sub-processors, set out below in the appendix, which we update as our providers change. The most up-to-date list and links are also available on request by emailing contact@lightningrpg.com.
Where a provider offers the option for submitted content not to be used to train its models, we take that option. However, once your content is transmitted to a provider, its handling and retention are governed by that provider’s own privacy policy and terms. We encourage you to review those providers’ policies, which are linked in the appendix below.
5. Disclosure of Your Information
In addition to the AI providers described above, we may share your information with:
- Service providers who support the operation of the Service, including hosting, authentication, payment processing, and email delivery providers, who process information on our behalf;
- Other campaign members, where you choose to collaborate on a campaign — generated artefacts and related content may be visible to other members of that campaign;
- Legal and safety recipients, where we are required to disclose information by law, or where disclosure is reasonably necessary to enforce our terms, prevent fraud, or protect the rights and safety of our users or the public;
- A successor entity, in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honour this Policy.
6. International Transfers
The Service is operated from Australia, and the third-party AI providers and certain other service providers we use are located overseas, including in the United States and the European Union. This means your information — including session content — will be transferred to, stored, and processed in countries whose privacy laws may differ from those in your own country.
Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or transfer to recipients in countries recognised as providing an adequate level of protection. Where we disclose personal information from Australia to overseas recipients, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles. Details of the relevant safeguards are available on request.
7. How Long We Keep Your Information
Session transcripts, notes, and recordings. We retain these so that you can regenerate artefacts from them at a later time if you wish. You may request deletion of your data at any time.
Other information you supply. Other campaign content and supplied information is retained until you delete the associated campaign within the Service.
Account information. We retain your account information for as long as your account is active or as needed to provide the Service and comply with our legal obligations.
AI provider retention. We have no control over how long the third-party AI providers retain content sent to them. Their retention is governed by their own policies.
8. Your Rights
You may request that we correct or delete the personal information we hold about you. To make a request, email privacy@lightningrpg.com or support@lightningrpg.com.
Depending on your location, you may also have rights to access the information we hold, object to or restrict certain processing, and request a copy of your information in a portable format. We will respond to requests in accordance with applicable law. We may need to verify your identity before acting on a request, and we may retain certain information where we have a legal obligation or lawful basis to do so.
If you are not satisfied with how we have handled your information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au/contact-us.
9. Additional Rights for Users in the EU and UK (GDPR)
If you are located in the European Economic Area or the United Kingdom, the GDPR provides you with additional rights, and we process your personal information on the following legal bases:
- Performance of a contract: to provide the Service you have requested, including processing your session content into the artefacts you ask us to generate;
- Consent: where you have given consent for a specific purpose, which you may withdraw at any time;
- Legitimate interests: to operate, secure, and improve the Service, to prevent fraud and misuse, and to communicate with you, where these interests are not overridden by your rights;
- Legal obligation: where processing is necessary to comply with a legal obligation to which we are subject.
In addition to the rights described above, you have the right to:
- Access the personal information we hold about you;
- Have inaccurate or incomplete information corrected;
- Request erasure of your personal information;
- Restrict or object to certain processing, including processing based on legitimate interests and any processing for direct marketing;
- Receive your personal information in a structured, commonly used, machine-readable format, and have it transferred to another controller (data portability);
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
- Lodge a complaint with your local data protection supervisory authority.
To exercise any of these rights, contact us at privacy@lightningrpg.com.
10. Additional Rights for United States Residents
Depending on your state of residence (for example, California, Virginia, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws), you may have the following rights in relation to your personal information:
- The right to know and access the categories and specific pieces of personal information we have collected about you;
- The right to request deletion of your personal information;
- The right to correct inaccurate personal information;
- The right to opt out of the sale or sharing of personal information, and of certain targeted advertising.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising any of your privacy rights.
To exercise any of these rights, contact us at privacy@lightningrpg.com. We will verify your request before acting on it, and you may use an authorised agent to make a request on your behalf where the law permits.
11. Children
The Service is not directed at children. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it. We will comply with the applicable laws on children’s privacy in the jurisdictions in which we operate.
12. Security
We take reasonable physical, administrative, and technical measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Any transmission of information is at your own risk.
13. Changes to This Policy
We may update this Policy from time to time. When we do, we will post the updated Policy on this page and revise the “Last updated” date above. We encourage you to review this Policy periodically.
14. Contact Us
If you have any questions or concerns about this Policy or our handling of your information, please contact us at contact@lightningrpg.com.
Appendix: Sub-Processors
The following third-party providers may process your information to deliver the Service. This list reflects our current providers and is updated when they change. The most current version is available on request by emailing contact@lightningrpg.com.
| Provider | Privacy policy |
|---|---|
| Anthropic (Claude) | anthropic.com/legal/privacy |
| Google (Gemini) | policies.google.com/privacy |
| ElevenLabs | elevenlabs.io/privacy-policy |
| Wondercraft | wondercraft.ai/privacy |
| fal.ai (Kling) | fal.ai/privacy |
| Function | Provider | Privacy policy |
|---|---|---|
| Hosting | DigitalOcean | digitalocean.com/legal/privacy-policy |
| Authentication | WorkOS | workos.com/privacy |
| Payment processing | Stripe | stripe.com/privacy |
| Email delivery | Resend | resend.com/legal/privacy-policy |