Skip to content
LevelGrid

Legal

Privacy Policy

Effective date:

LevelGrid is a product development tool for game studios. This Privacy Policy explains what personal data we collect, what we do with it, who we share it with and the rights you have. It applies when you visit levelgrid.app, when you create an account and use LevelGrid, and when you are a player whose message, answer or application reaches a studio through the LevelGrid bot in its Discord server.

LevelGrid is operated by 49.336.992 LEO NASCIMENTO MULLER DOS ANJOS, CNPJ 49.336.992/0001-11, based in São Vicente – SP, Brazil ("LevelGrid", "we", "us"). Questions about this policy go to privacy@levelgrid.app.

1. What this policy covers

This policy covers three groups of people:

  • Visitors to levelgrid.app, including anyone who writes to us through the contact form.
  • Members — people with a LevelGrid account who belong to a studio's workspace.
  • Players — people in a studio's Discord server who use something the LevelGrid bot runs there: a form's button, a forum or channel the studio connected, a message a moderator sends to LevelGrid, or a playtest application.

Who decides what happens to the data. For your account and for our website, we are the controller of your personal data. For everything a studio keeps in its workspace — its issues, documents and files, and what its players send through the Discord bot — the studio is the controller, and we process that data on its behalf under our Terms of Service. If you are a player, the studio that runs the server is the first place to ask about your data, and we will help it answer you.

2. Personal data we collect

Account data

Your name, email address and password (stored only as a salted hash), the studio you belong to and your role in it, the games and teams you can see, and invitations, including the email address of the person invited.

If you sign in with Google, Google sends us your name, email address and profile picture, and we keep them as your account data. We never receive your Google password.

Workspace content

What you and your team create and upload: games, teams, issues, projects, objectives, documents, whiteboards, comments and files — and the history of who changed what, and when.

Data from Discord

When a studio connects its Discord server, we receive the server's name and the ids of the channels and roles the studio sets up. When a player interacts with the bot, we receive:

  • their Discord user id, username and display name, and when their Discord account was created, which Discord encodes in the id;
  • what they wrote or answered — a form's answers, a forum post, a message — and the files attached to it, which we copy into our storage;
  • for a playtest application, whether they agreed to receive direct messages, and the studio's decision.

The bot reads message content only in the forums and channels a studio chose, and only to bring those messages into the studio's workspace. A message that does not meet the studio's rules for that channel is not stored.

AI connections

When you connect an AI app to LevelGrid through our MCP server, we keep the app's name and the address it returns you to, your consent and its scope, and the tokens the connection uses. Changes made through a connection are marked as made through it.

Contact form

Your name, email address, studio (if you give it) and your message.

Device and usage data

Your IP address, your browser and device type, the pages you visit, and how you use the site and the product — for example, that an issue was created, never what it says. Part of it is collected with cookies, described in section 5.

Payment data

None today: billing is not switched on, and every studio is on the Free plan. Before we charge anyone, a payment processor will hold card details — never us — and we will update this policy.

3. How we use personal data

We use personal data to:

  • Provide LevelGrid — sign you in, run your workspace and its real-time collaboration, and send the emails and notifications the product needs, such as an invitation or a password reset.
  • Run the Discord integration for a studio — turn its players' messages, answers and applications into items in its workspace, send a player a direct message only when they agreed to it, and give the roles the studio set up.
  • Keep LevelGrid safe — detect abuse, protect accounts and investigate incidents.
  • Improve LevelGrid — understand, in aggregate, which features are used and how.
  • Talk to you — answer what you sent us, and tell you about changes to the service or to these policies.
  • Meet legal obligations, and enforce our Terms.

We do not sell personal data, we do not use it for advertising, and we do not use workspace content or Discord message content to train AI models.

Legal bases. Under the Brazilian General Data Protection Law (LGPD) and, where they apply, the EU and UK GDPR, we rely on performing our contract with you or your studio; on our legitimate interests in keeping the service secure and improving it, weighed against your rights; on your consent where we ask for it, such as a player agreeing to direct messages; and on complying with legal obligations.

4. How we share personal data

Service providers

A small number of providers run LevelGrid with us. They process personal data only on our instructions:

Provider What for Where
OVHcloud Hosting: servers, database and file storage United States (Virginia)
Resend Sending the product's emails United States
PostHog Product analytics United States

Google

When you sign in with Google, Google learns that you signed in to LevelGrid. Google's own privacy policy governs what Google does with data.

Discord

When a studio connects its server, we post messages, send direct messages and give roles through Discord's API, on the studio's behalf. Discord's own privacy policy governs what Discord does with data.

AI apps you connect

An AI app you connect reads and changes your workspace as you, and what it reads goes to that app's provider under its own terms. Whether members can connect AI apps at all, and whether those apps may only read or also write, is your studio's decision.

Your studio

The members of a studio see its workspace according to the permissions the studio sets.

We disclose personal data when the law requires it, or to protect the rights, property or safety of our users, the public or LevelGrid. If LevelGrid takes part in a merger, an acquisition or a sale of assets, personal data may be transferred with it, and this policy keeps applying to it.

5. Cookies and similar technologies

  • Essential. Cookies keep you signed in, and protect the moment a studio connects its Discord server. Your browser's local storage keeps your preferences — the theme, the sections you folded, the drafts you have not finished.
  • Analytics. PostHog sets a first-party cookie with a random identifier, so we can count visits and see how features are used. You can block it in your browser; LevelGrid works without it.

We do not use advertising cookies, and we do not let third parties follow you across sites through LevelGrid.

6. Data security and retention

We protect personal data with encryption in transit, hashed passwords, access controls in the product and on our servers, and signed requests between our own services. No system is perfectly secure: if a breach puts your personal data at risk, we will tell you and the authorities as the law requires.

We keep personal data only as long as we need it:

  • Account data — while your account exists. Ask us and we delete it, unless the law requires us to keep part of it.
  • Workspace content — until the studio deletes it, or closes its workspace.
  • Players' data — until the studio deletes it, or the player asks us to. Studios have a tool that finds and deletes everything that came from one player.
  • Contact messages — while we need them to answer you and follow up.
  • Usage data — in aggregate, or for as long as our analytics provider keeps it.

7. International data transfers

Our servers are in the United States, so personal data from Brazil, the European Economic Area and elsewhere is transferred there. We transfer it with the safeguards the LGPD and the GDPR require, such as standard contractual clauses with our providers.

8. Your rights

Depending on where you live, you have the right to:

  • confirm whether we process your personal data, and access it;
  • correct data that is incomplete, inaccurate or out of date;
  • have data anonymized, blocked or deleted when it is unnecessary, excessive or processed unlawfully;
  • receive your data in a portable format;
  • know who we share it with;
  • withdraw your consent, and know what follows from not giving it;
  • object to processing based on our legitimate interests;
  • complain to a data protection authority — in Brazil, the National Data Protection Authority (ANPD); in Europe, your local supervisory authority.

To use any of these rights, write to privacy@levelgrid.app. We may ask you to confirm who you are, and we answer within the time the law sets — 15 days under the LGPD. If you are a player, include your Discord user id and the game or server: we will work with the studio to answer you, or act directly when the request is ours to fulfil.

9. Children

LevelGrid is not meant for anyone under 13, and we do not knowingly collect personal data from them. Where the law of your country sets a higher age to consent on your own, you need a parent's or guardian's consent to use LevelGrid. If you believe a child has given us personal data, write to us and we will delete it.

10. Changes to this policy

We may update this policy. When we do, we change the effective date at the top; when a change is significant, we tell you beforehand, by email or in the product.

11. Contact

49.336.992 LEO NASCIMENTO MULLER DOS ANJOS
CNPJ 49.336.992/0001-11
São Vicente – SP, Brazil

For privacy questions and data protection requests, write to privacy@levelgrid.app.