Privacy Policy

1. Who We Are

Arkham Catacombs is operated by Evoke Interactive Inc., a Delaware corporation. In this policy, “we”, “us”, and “our” refer to Evoke Interactive Inc.

2. What We Collect

We collect the following personal information when you use Arkham Catacombs:

• Account information: email address, display name, and password (hashed).
• Game data: characters you create, game session transcripts, world state, and gameplay choices.
• Payment information: processed securely by Stripe. We do not store credit card numbers.
• Usage data: pages visited, actions taken, session duration, and error logs for improving the service.

3. How We Use Your Information

• To provide and operate the Arkham Catacombs game service.
• To process payments and manage subscriptions via Stripe.
• To generate AI-powered game content, using one or more third-party AI providers we select for the task — we may change providers from time to time. Your gameplay inputs are sent to these providers’ APIs for processing. Our AI providers do not use this data to train their models.
• To generate AI-powered embeddings for enhanced game context, using one or more third-party AI providers.
• To improve the service, fix bugs, and monitor performance.

4. AI Processing Disclosure

Arkham Catacombs uses artificial intelligence — one or more third-party large language models, which we select and may change from time to time — to generate game narratives, evaluate player actions, and create character content. Your gameplay inputs (actions, character details, dialogue) are processed by AI systems to generate responses. AI-generated content is clearly identified as part of the game experience.

5. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted in the AWS Asia-Pacific region. All data is encrypted in transit (TLS) and at rest. Row-level security policies ensure you can only access your own game data.

6. Third-Party Service Providers

Your personal information is processed by the following third-party service providers, some located outside your country of residence:

• One or more third-party AI providers (United States): AI narrative generation — we select and may change providers from time to time
• Stripe (United States): payment processing
• Vercel (United States): application hosting
• Supabase (AWS Asia-Pacific): database hosting
• Upstash (various regions): caching and rate limiting
• One or more third-party AI providers (United States): AI embeddings — we select and may change providers from time to time

7. Your Rights

Depending on your location, you may have rights under applicable data protection law (such as the GDPR) to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of your account and all associated data.

To exercise these rights, contact us at [contact email pending].

8. Account Deletion

You may request full deletion of your account and all associated data (characters, sessions, transcripts, world state, NPC memories, and payment records). Deletion is permanent and cannot be undone. We will process deletion requests within 30 days.

You can export or delete your account directly from your Account page. Self-service deletion takes effect immediately, and the email request above remains available as a fallback. Payment transaction records are retained by our payment processor (Stripe) as required for accounting purposes even after account deletion.

9. Cookies

We use essential cookies for authentication (session management via Supabase Auth). We do not use advertising or tracking cookies.

10. Contact

Evoke Interactive Inc.
Email: [contact email pending]