Privacy Policy

This Privacy Policy explains how Valfar and Sons, Inc. ("Valfar and Sons," "we," "us," or "our") collects, uses, discloses, and retains information when you use the Loremaster platform and related applications, websites, and services (collectively, the "Service").

By using Loremaster, you agree to the collection and use of information as described in this Privacy Policy.

1) What Information We Collect

We collect information in the following categories:

A) Account Information

When you create an account, we may collect:

• Name and/or username (if provided)
• Email address
• Authentication details (such as password hash for email/password logins)
• Login method (email/password or OAuth provider)
• Basic account metadata (account creation date, plan level)

B) Information from Third-Party Login Providers (OAuth)

If you choose to sign in using a third-party login method (such as Google or Discord), we may receive information from that provider, depending on what you authorize and what the provider makes available, such as:

• Name and/or username
• Email address
• Profile image (if available)
• A unique identifier associated with your third-party account

We use this information to create and authenticate your account and to help prevent fraud and abuse.

C) Campaign Data You Provide

Loremaster is designed to help you manage your campaigns. Depending on how you use the Service, we may collect and store:

• Campaign names and descriptions
• Campaign notes and session notes
• Character names and related campaign information
• User-entered text, references, and materials you upload that relate to your campaign

D) Uploaded Audio Recordings

If you choose to upload audio, we may collect and store:

• Audio recordings (including associated file metadata such as duration, time uploaded, and file size)

E) Transcripts

If you use transcription features, we may collect and store:

• Transcripts generated from uploaded audio
• Transcripts you upload directly

F) AI Outputs

We may generate and store content created by our Service using AI processing, including:

• Summaries
• Extracted entities (e.g., names, locations, items)
• Q&A responses
• Campaign insights or suggested content ("AI Outputs")

Important: AI Outputs may contain errors, omissions, or inaccuracies. You are responsible for reviewing AI Outputs before relying on them.

G) Usage and Technical Information

We may automatically collect:

• Device and browser information
• IP address (and approximate location derived from IP)
• Log data (timestamps, pages visited, feature usage, errors/crash reports)
• Performance metrics (latency, feature reliability)
• Cookies or similar technologies (as needed for login sessions and basic functionality)

2) How We Use Your Information

We use the information we collect for the following purposes:

A) Provide and Operate Loremaster

Including to:

• Create and manage your account
• Authenticate logins
• Store and organize campaign content
• Store and process uploaded audio
• Generate transcripts and AI Outputs

B) Improve Loremaster Functionality

Including to:

• Improve feature quality, accuracy, and reliability
• Diagnose bugs and service issues
• Develop new features
• Prevent abuse and enforce usage limits

C) Communications and Support

Including to:

• Respond to support requests
• Contact you about account and billing issues
• Send important service notices (e.g., changes, outages)

We do not sell your personal information. We use your data only as needed to provide and improve the Service.

3) AI Processing and Accuracy Disclaimer

Loremaster uses AI processing to help generate campaign-related functionality such as:

• Summaries
• Entity extraction
• Question answering
• Transcript-based campaign insights

AI systems may produce outputs that are incorrect, incomplete, or misleading. We do not guarantee that AI Outputs are accurate or suitable for any specific purpose.

4) How Long We Retain Information

We retain information for as long as needed to provide the Service and operate our business, unless a longer retention period is required or permitted by law.

Audio Storage and Deletion

Audio recordings you upload are stored until you delete them.

If you delete an audio recording from the Service, we will delete or de-identify it within a reasonable period of time, except where retention is required for legal, security, dispute resolution, or backup integrity purposes.

Other Stored Content

Campaign data, transcripts, and AI Outputs associated with your account are generally stored until you delete them or your account is closed.

Note: Deletion may not be immediate and may take time to fully propagate through our systems, including backups.

5) How We Share Information (Third Parties / Subprocessors)

We may share information with third parties only as needed to operate and improve Loremaster. For a list of third-party providers we use to operate Loremaster, see our Subprocessors page.

Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale of some or all of our assets, information we collect may be transferred as part of that transaction.

Legal, Safety, and Compliance Disclosures (Including DMCA)

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, court order, subpoena, or other lawful request
• Respond to valid intellectual property complaints (including DMCA notices)
• Protect the security or integrity of the Service
• Enforce our Terms of Service
• Protect the rights, property, or safety of Valfar and Sons, our users, or others

6) Cookies and Analytics

We may use cookies and similar technologies to operate the Service, maintain login sessions, and improve performance.

We may also use analytics tools (such as Google Analytics) to understand how users interact with the Service, such as which features are used most frequently and how the Service performs.

7) Delete Your Data and Your Rights

Depending on where you live, you may have certain rights regarding your personal information.

At a minimum, Loremaster supports the following requests:

A) Access and Update

You may access and update certain information through your account settings (where available).

B) Delete Your Account and Personal Data

You may request deletion of your account and associated personal data.

You can also delete campaign content or uploaded audio through the Service where the feature is available.

Important: We may retain certain information for a limited period where necessary to:

• Comply with legal obligations
• Enforce agreements
• Prevent fraud or abuse
• Resolve disputes
• Maintain backups and security logs

C) How to Request Support

To request help with deleting your account or data, contact: support@valfarandsons.com

We may need to verify your identity before completing certain requests.

8) Security

We take reasonable administrative, technical, and organizational measures designed to protect your information. However, no system can be guaranteed 100% secure, and we cannot guarantee absolute security.

9) Children's Privacy

Loremaster is not intended for individuals under 18. We do not knowingly collect personal information from children under 18.

If you believe a minor has provided personal information to us, please contact support@valfarandsons.com.

10) International Users

If you access the Service from outside the United States, you understand that your information may be processed and stored in the United States or other locations where our service providers operate.

11) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the Service or by other reasonable means.

Your continued use of the Service after the updated policy becomes effective means you accept the updated Privacy Policy.

12) Contact Us

If you have questions about this Privacy Policy or how we handle data, contact:

Valfar and Sons, Inc.
Email: support@valfarandsons.com

Appendix A — Additional Rights for EEA/UK (GDPR Notice)

If you are located in the European Economic Area (EEA) or United Kingdom, you may have rights under applicable data protection law, including:

• The right to access, correct, or delete your personal data
• The right to object to or restrict certain processing
• The right to data portability
• The right to withdraw consent (where processing is based on consent)

Where GDPR applies, we generally process personal data to:

• Provide the Service (performance of a contract)
• Operate, secure, and improve the Service (legitimate interests)
• Comply with legal obligations

To exercise GDPR rights, contact support@valfarandsons.com.

Appendix B — California Privacy Notice (CPRA)

If you are a California resident, you may have the right to:

• Know what personal information we collect and how we use it
• Request deletion of personal information (subject to exceptions)
• Request correction of inaccurate information
• Not be discriminated against for exercising privacy rights

We do not sell personal information as defined by California law.

To submit a request, email support@valfarandsons.com.