Privacy Policy

1.Who we are and what this policy covers

embodsi is operated by Animet, Inc. (“Animet,” “we,” “us” or “our”), a Delaware corporation based in the United States. Animet is the controller of the personal information described in this Privacy Policy.

This policy applies to embodsi.com and our apps, the avatar studio, the shared worlds and spaces, messaging and social features, AI features, and all of our related services and communications (the “Service”). It applies whether you use the Service as a guest or with an account. It also covers how we use information to advertise, including when we advertise the Service on other websites, apps and platforms. It does not apply to services operated by others, which have their own policies.

If you have a question or request about your information, email hey@animet.world.

2.Information we collect

What we collect depends on how you use the Service. We collect information that you give us, information that is created as you use the Service, and information we receive from others.

Information you provide

• Account and profile information. Your display name, date or year of birth, email address, sign-in method, avatar, settings and preferences. You can use much of the Service as a guest, and you don’t have to use your real name. We recognize a guest by identifiers stored in their browser.
• Content you create. Avatars, worlds, spaces, agents and other things you make, build, generate, upload or publish, and the prompts and instructions you give to AI features.
• Communications. What you send and share through the Service, including messages in rooms, direct messages, invites, the links, videos and screens you share, and your voice and camera video when you turn them on. We also collect information about your communications, such as who took part and when.
• Connections. The people you are connected to and how you interact with them, including your friends, friend requests, invites, and the people you mute, block or report.
• Purchases. When you buy something, our payment processor collects your payment details. We receive information about the transaction, such as your name, email address, billing country and postal code, the type and last four digits of your card, and what you bought. We do not receive your full card number or security code.
• What you send us. The content of your emails, support requests, reports, feedback and survey answers, and your contact details.

Information collected as you use the Service

• Usage and activity. How you use the Service: the features you use, the rooms, worlds and spaces you visit, how your avatar moves and what it does, the people and AI agents you interact with, the pages you open, how you arrived, and the time, frequency and duration of your activity.
• Device and connection information. Your IP address, browser and device type, operating system, language, screen and other settings, device, browser and advertising identifiers, network and performance information, crash and error data, and the network details your browser exchanges to set up real-time voice, video and movement.
• Location. Your approximate location, such as country, region and city, inferred from your IP address. We do not collect precise location.
• Cookies and similar technologies. Information collected through cookies, local storage and similar technologies, as described in Cookies and similar technologies.

Information from others

• Other people. Other people give us information about you when they use the Service, for example when they message, add or invite you, share content that involves you, or report you.
• Sign-in providers. If you sign in with a provider such as Google or Apple, it gives us an account identifier and may give us your email address and name. We do not receive your password for that provider.
• Service providers and partners. We receive information from companies that work with us, such as payment, fraud-prevention, security, analytics, advertising and AI providers.
• Advertising partners. When we show ads on the Service or advertise the Service elsewhere, our advertising partners tell us about the ads people saw and how they responded, such as which ad or campaign brought you to the Service and whether you then signed up or bought something. They may also tell us about interests or audiences associated with your browser or device.
• Other sources. We may receive information from publicly available sources and from others where the law allows, such as authorities and people who contact us.

We receive payment confirmations and limited transaction and fraud-screening information from Stripe. We may also receive information from people who report content or behavior to us.

We do not use your camera video to recognize your face, and we do not collect biometric identifiers.

3.Live rooms: what others can see

embodsi is built for communicating with other people, so some information is shared with them by design. When you are in a room, its other members can see your display name, avatar, movement, emotes, messages and shared screens. While your microphone or camera is on, they can also hear your voice and see your video, live. Anyone with a room link can join that room, so share links only with people you want to meet.

We do not record voice or video. Human room messages are relayed to the people in the room at the time they are sent, and recent messages are kept with the room for a time, for example to deliver them reliably and so that someone a message mentions can see the conversation around it. SI agents may recall compact details as described below, and someone who reports a person sends us the recent messages they received. However, other participants could capture what you share with a screenshot, screen recording or another device, so don’t share anything you wouldn’t want others to keep.

SI agents and Atom. An embedded agent marked SI can receive recent text chat, display names, room-scoped browser identifiers, avatar positions and its compact room memory, through OpenRouter and its selected model provider, to generate replies and actions. Agents do not receive your microphone or camera. We store the creator’s agent configuration and its latest state and reply until it is replaced or the agent is removed. A bounded activity history, including provider output drafts and any returned reasoning text, is visible only to the embedding account and expires after 30 minutes. Atom editor conversations and generated world content are saved with your account and processed by OpenAI or, with Atom’s SI model, through OpenRouter and its selected model provider. Provider processing is also subject to the applicable provider’s policies.

SI room memory. Each agent can maintain a compact, structured memory of conversations in its room channel, including embodsi display names and identifiers, interests, shared topics and details useful for conversation and social introductions. This memory belongs to the agent in that room, rather than to a conversation with one person: it may inform replies to other participants and returning visitors. Memories are isolated between room channels, including the commons and private rooms. They persist until compacted away, forgotten or deleted with the agent. The embedding account can inspect the agent’s saved memory in a private panel, subject to current room block settings. The latest request keeps only note identifiers and fingerprints for comparison with still-available memory, rather than a second copy of the notes. Agents are instructed and filtered to avoid retaining sensitive identifying information such as contact details, birth dates, passwords, government identifiers, financial details and external account names. Automated filtering is imperfect; do not share secrets or sensitive information in room chat.

In small rooms, your browser may connect directly to other participants’ browsers (peer-to-peer) for voice, video and movement. When it does, those participants’ devices can learn your IP address, which can reveal your approximate location and internet provider. In larger rooms, media is relayed through our provider’s servers instead.

4.How we use information

We use the information we have, alone and in combination, to:

• Provide the Service. Create and maintain accounts and guest identities, show you and what you share to other people in real time, deliver and store your messages and other communications, keep your friends, conversations, creations and settings, and process purchases.
• Personalize your experience. Remember your preferences and show you people, places and content that are relevant to you.
• Run AI features. Operate AI agents and generative tools. These process the content and context they are given, including your prompts, the conversations and activity in the rooms where they are present, and the names and identifiers of the people there, in order to respond, act and keep context over time.
• Keep people and the Service safe. Verify accounts and activity, and detect, prevent, investigate and respond to spam, fraud, abuse, harassment, security incidents, illegal or harmful conduct and violations of our Terms of Service. This includes reviewing content and communications, by automated means and by people, for example when something is reported, and recognizing the networks, browsers and devices that someone we have banned used, from their IP addresses, cookies and characteristics of the browser and device, so that they cannot come back under another account or as a guest.
• Understand and improve the Service. Measure and analyze how the Service is used, fix problems, carry out research, and develop, test and improve the Service and the technology behind it, including its AI and machine-learning features.
• Advertise and market. Show ads, sponsored content and promotions on the Service, including ads chosen for you based on your activity, interests and other information described in this policy. Advertise the Service on other websites, apps and platforms, including to people who have visited or used it and to people like them, and measure how well ads work.
• Communicate with you. Send you service, security and billing messages, respond to you, and, where the law allows, tell you about features, news and offers. You can opt out of marketing messages at any time.
• Run our business. Handle billing, accounting, audits and other internal operations.
• Meet legal obligations and protect rights. Comply with the law and lawful requests, enforce our agreements, and establish, exercise or defend legal claims.
• Do what you ask. Use information for any other purpose we describe when we collect it, or with your consent.

We may aggregate or de-identify information so that it no longer identifies you, and use and share it in that form for any lawful purpose. We use automated systems for many of the purposes above. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing, except where the law allows and with the safeguards it requires.

5.What other people can see

embodsi is a place to be with other people, so a great deal of what you do there is shared by design. Who can see something depends on where and how you share it:

• People in the same room or world can see your display name and avatar, where you are and what you do, and what you say, send and share there. While your microphone or camera is on, they can hear and see you live. Anyone with a room link can join that room, so share links only with people you want to meet.
• Friends and people you communicate with can see your display name, whether you are online, and what you send them.
• AI agents that are present receive what happens around them, such as conversation, names and positions, and may retain it and draw on it later, including in conversations with other people in the same room.
• The people who run a world, space or agent may see information about activity in it, including interactions with their agents.
• Anyone can see content that you publish or make public, including people who have not signed in.

What you share with other people is theirs to keep. They can save, copy, screenshot, record and reshare it, on or off the Service, and it can remain available to them after you delete it, remove or block them, or close your account. Don’t share anything you wouldn’t want others to keep.

Depending on how a room is connected, your browser may connect directly to other participants’ devices to carry voice, video and movement. When it does, those participants’ devices can learn your IP address, which can reveal your approximate location and internet provider.

6.How we share information

We do not sell your personal information for money. Some of the ways we work with advertising partners may count as “selling” or “sharing” personal information, or as “targeted advertising,” under some laws, and you can opt out of them as described in Advertising. We share information in these ways:

• With other people on the Service, as described in What other people can see.
• With service providers. Companies that work on our behalf receive the information they need to do so, under terms that limit how they may use it. They provide hosting, storage, networking, security, real-time media, email delivery, payments, analytics, customer support, and AI and model inference. Examples include Cloudflare, Stripe, Google, OpenAI, and OpenRouter and the model providers it routes to. The providers we use may change over time.
• With advertising partners. Advertising networks, exchanges, platforms and measurement companies help us show ads on the Service, advertise the Service elsewhere and measure the results. They receive or collect information such as cookie, device and advertising identifiers, IP address, the pages and features you use, the ads you see and interact with, and what you do afterwards, such as signing up or making a purchase. So that they can match it to people who use their services, for example to show our ads to people like our users or to stop showing them to people who already use embodsi, we may give them an email address or other identifier in hashed (scrambled) form. They may combine this with information they have from elsewhere and use it under their own policies, including to personalize ads on their own services. Partners we may work with include Google (including Google Ads, AdSense and AdMob), Meta (including Facebook and Instagram), TikTok, Snap, Reddit, X and Microsoft, and other advertising networks and platforms. The partners we use may change over time.
• With third-party services you use or view. If you sign in with a provider such as Google or Apple, that provider processes your sign-in. When content from another platform, such as YouTube, TikTok or Twitch, is shown on the Service, your browser loads it directly from that platform, which can receive your IP address and device information and may set its own cookies. These companies handle information under their own policies.
• For legal reasons and to prevent harm. We may access, preserve and disclose information to law enforcement, regulators, courts and others when we believe in good faith that it is required by law or legal process. We may also do so to detect, prevent or address fraud, abuse, security problems and violations of our terms, and to protect the rights, property or safety of our users, Animet or the public. This includes reporting apparent child sexual exploitation to the National Center for Missing & Exploited Children.
• With affiliates and in business transfers. We may share information with companies under common ownership with Animet. If Animet is involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction.
• With your consent or at your direction.

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

7.Advertising

We may show ads, sponsored content and promotions on the Service, and we may advertise the Service on other websites, apps and platforms, such as search engines, social networks and ad networks. We do this ourselves and with the advertising partners described in How we share information.

• Ads on the Service may be chosen by us or by advertising networks based on what you are viewing, your approximate location and, where the law allows, your activity on the Service and on other services and the interests inferred from it. Ads chosen in this last way are called personalized or targeted ads. An advertising network may set and read its own cookies and identifiers in your browser or device to choose, limit and measure the ads it shows.
• When we advertise the Service elsewhere, we may ask partners to show our ads to people who have visited or used the Service and to people like them, and to measure whether an ad led someone to visit, sign up or buy something. Code from those partners, such as pixels, tags and software development kits, may run on the Service for this purpose.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to embodsi and to other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to embodsi and other sites on the internet.

Your advertising choices

• In the European Economic Area, the United Kingdom and Switzerland, we and our partners use advertising cookies and personalize ads only if you consent, and you can withdraw your consent at any time.
• Elsewhere, you can opt out of targeted advertising, and of any sale or sharing of your personal information, with the advertising and privacy choices we offer in the Service, by sending a Global Privacy Control signal from your browser, or by emailing hey@animet.world.
• You can opt out of personalized ads from Google in Google’s Ads Settings, and from many other companies at aboutads.info, the Network Advertising Initiative and, in Europe, Your Online Choices.
• On a phone or tablet, you can limit ad tracking and reset your advertising identifier in the device’s settings.

Opting out of personalized ads does not stop ads: you may still see them, but they will be less relevant to you. An opt-out that relies on cookies applies only to the browser or device you set it on, and is lost if you clear your cookies.

We limit advertising to users under 18 as the law requires. Where we know that a user is under 18, we do not target ads to them based on their activity on other services, or sell or share their personal information, unless the law where they live allows it and any consent it requires has been given.

8.Legal bases for processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information on the following legal bases:

• Contract. To provide the Service you ask for under our Terms of Service, including its communication, social, AI and paid features.
• Legitimate interests. To keep the Service and the people who use it safe and secure, prevent fraud and abuse, enforce our terms, understand, improve and develop the Service, market and advertise the Service and measure our advertising, communicate with you and run our business, where those interests are not overridden by your rights.
• Consent. Where we ask for it, such as for analytics and advertising cookies and personalized ads, or when you turn on your microphone or camera. You can withdraw consent at any time.
• Legal obligation. To comply with tax, accounting and other legal requirements and to respond to lawful requests.
• Vital interests. To protect someone’s life or physical safety.

9.Payments and Stripe

We use Stripe for payments, analytics, and other business services. Stripe may collect personal data including via cookies and similar technologies. The personal data Stripe collects may include transactional data and identifying information about devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection, loss prevention, authentication, and analytics related to the performance of its services. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.

Your full card number goes directly to Stripe and never passes through or is stored on Animet’s servers.

10.Cookies and similar technologies

We and our providers and partners use cookies, browser storage and similar technologies, such as pixels, tags, software development kits and device advertising identifiers. They fall into these groups:

Account sessions have no automatic time limit. The sign-in cookie lasts up to 400 days and renews when you return or save your profile, subject to browser policies. Signing out revokes the current session; clearing cookies also signs you out in that browser. Email codes and magic links expire after 30 minutes; provider sign-in handshakes expire after 10 minutes.

You can change your answer about analytics cookies at any time with the Cookies link at the bottom of this page, and you can opt out of Google Analytics on every site with Google’s opt-out browser add-on. If your browser sends a Global Privacy Control signal, we treat it as declining analytics cookies and as a request to opt out of targeted advertising and of any sale or sharing of personal information. You can also block or delete cookies and browser storage in your browser settings, though parts of the Service may then stop working, and a guest may lose what was tied to that browser. Browsers’ Do Not Track setting has no agreed meaning, so we do not respond to it; we honor Global Privacy Control instead.

11.How long we keep information

We keep information for as long as we need it to provide the Service and for the other purposes described in this policy. How long that is depends on what the information is, why we have it, and what the law requires. In general:

• Your account, profile, connections, creations and conversations are kept for as long as your account or guest identity exists, or until you delete them where the Service lets you or ask us to delete them.
• Messages and other things you send to other people are part of their records as well as yours. Removing a friend, blocking someone or leaving a room does not delete what you have already sent, and it can remain with the other person and on our systems after you close your account.
• Live voice, video and screen sharing are transmitted in real time. We do not keep recordings of them unless a feature you choose to use requires it.
• Information held by AI features, such as what an agent remembers of the conversations in its room, is kept until it is updated, replaced or deleted.
• Purchase, billing and tax records are kept for as long as tax, accounting and other laws require.
• Logs, analytics, advertising and security information are kept for limited periods, and longer in aggregated or de-identified form.

We may keep information for longer where we need it to comply with the law or a lawful request, to investigate, prevent or respond to harm, abuse, fraud or violations of our terms, to resolve disputes, to enforce our agreements, or to keep the Service secure. For example, we may keep content that has been reported, and information about accounts we have restricted. Information about guests who have not used the Service for some time may be deleted. When we no longer need information we delete or de-identify it, which can take time to complete, including in backups.

12.Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and the authorities as the law requires.

13.Your choices and rights

Choices in the Service

• You choose your display name and avatar, and whether to sign in or use the Service as a guest.
• Your microphone and camera are off until you turn them on, and you can turn them off at any time.
• You can mute or block people, remove friends, delete friend requests and leave a room. These controls limit what you see and who can reach you. They do not delete messages or content that have already been exchanged.
• You can change your choice about analytics cookies, as described in Cookies and similar technologies.
• You can opt out of personalized ads, as described in Advertising.
• You can opt out of marketing messages.
• You can delete your account from the account menu, on the web and in the app. Some information is kept afterwards, as described in How long we keep information.

Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it, including in a portable format;
• correct it if it is inaccurate;
• delete it;
• restrict our use of it, or object to it;
• opt out of targeted advertising and of the sale or sharing of your personal information;
• withdraw consent where we rely on consent; and
• appeal a decision we make about your request.

To make a request, email hey@animet.world from the email address associated with your account or purchase, if you have one. We will verify your request before acting on it, and respond within the time the law requires. You can use an authorized agent to make a request for you, but we may ask for proof of their authority and confirm your identity directly. We will not discriminate against you for exercising your rights.

These rights have limits. We may keep or decline to provide information where the law allows or requires it: for example, where it is needed for safety, security or legal reasons, or where it is also another person’s information, such as a conversation you had with them.

14.Additional information for U.S. residents

California and other U.S. state privacy laws require us to describe our practices using specific categories. In the past 12 months, we have collected the following categories of personal information, from the sources and for the purposes described above:

• identifiers, such as your display name, email address, account, device and browser identifiers and IP address;
• customer records and commercial information, such as purchase records;
• internet or other electronic network activity, such as device information and your activity on the Service;
• approximate geolocation derived from your IP address;
• audio, electronic and visual information, such as your avatar, and your voice and video when you turn on your microphone or camera;
• content you create and the contents of your communications on the Service; and
• inferences drawn from the above, such as your preferences and interests.

We disclose these categories for business purposes to the recipients described in How we share information, and keep them as described in How long we keep information. We do not sell personal information for money. Our use of advertising cookies and similar technologies, and the information we make available to advertising partners, may however count as “selling” or “sharing” personal information, or as “targeted advertising,” under some of these laws. For those purposes, in the past 12 months we may have made identifiers, commercial information, internet or other electronic network activity, approximate geolocation and inferences available to advertising networks, platforms and measurement companies. You can opt out at any time as described in Advertising, including with a Global Privacy Control signal. We do not knowingly sell or share the personal information of consumers under 16. Some of this information, such as account credentials and the contents of communications, is considered sensitive under some laws. We use sensitive information only for purposes those laws permit without a right to limit, such as providing the Service and keeping it safe and secure, and not to infer characteristics about you. You can exercise your rights as described in Your choices and rights. California residents may also ask us for information about any disclosures of personal information to third parties for their own direct marketing purposes.

15.International data transfers

Animet is based in the United States, and our service providers operate globally. Your information may therefore be transferred to, processed in and stored in the United States and other countries whose data-protection laws may differ from those where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents.

16.Children

embodsi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it. Users aged 13 to 17 may use the Service only with a parent or guardian’s permission, as described in our Terms of Service. If you believe a child under 13 has given us personal information, contact us at hey@animet.world.

17.Changes to this policy

We may update this Privacy Policy from time to time, for example as the Service, our practices or the law change. When we do, we will change the date at the top of this page. If a change is material, we will give notice as the law requires, for example on the Service or by email if we have your address. Where the law requires your consent to a change, we will ask for it.

18.Contact us and complaints

For privacy questions or requests, email hey@animet.world, or write to us at the address below. If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data-protection authority. We would appreciate the chance to address your concerns first.