Privacy Policy

Revix ("Revix", "we", "us", or "our") provides an AI assistant for building Roblox experiences, consisting of this website, dashboard, and a Roblox Studio plugin (together, the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have. It applies to everyone who uses the Service.

By using the Service you acknowledge the practices described here. If you do not agree, please do not use the Service.

Information you provide or that is created when you use Revix:

• Account & identity: you sign in through our authentication provider, Clerk, using Google, an email address, or another supported sign-in provider. From your sign-in we receive your name, email address, and profile picture (see Section 3 for Google specifics). Your email address and login credentials are stored by Clerk; our own database keeps only your Clerk account ID, a display username, and an avatar. (Accounts created before our move to Clerk sign-in may still have an email address on file with us.) When you connect your Roblox account we also collect your Roblox user ID, username, and avatar. At signup we also record your agreement to the Terms (see Section 11).
• Project & content data: the scripts and source code you sync from Studio, an index of your game's instances, the prompts and messages you send, chat history, AI-generated code and assets, and any images you upload to the AI. Full chat transcripts are stored until you delete the chat or your account.
• AI request records: for every AI request we keep a server-side record that includes your full message, the model's reasoning and response text, the inputs and outputs of the tools the AI ran against your project, and the model used together with token counts, cost, and latency. We use these records to provide your chat history and to monitor quality, cost, and abuse. In-progress generation jobs (which include the full prompt) are deleted within about 24 hours.
• Plugin telemetry: while the Studio plugin is connected we receive the plugin version, your Roblox place ID and place name, the game name, the capabilities the plugin supports, and a synced copy of your game's script file tree. The synced copy exists only for the active Studio session and expires within about an hour after it ends.
• AI personalization & feedback: optional memory and per-chat context the assistant keeps to tailor its responses to you (included in AI requests), and the ratings and comments you leave on AI responses.
• Payment & billing data: your subscription plan and status, credit balance and purchase history, and a reference to your Stripe customer and subscription records (we keep our own copy of these Stripe IDs, purchases, and plan details). Your card details and the billing address collected at checkout (used for tax calculation) are processed and stored by Stripe — we never receive or store full card numbers.
• Discord data (optional): if you link Discord (directly or through your sign-in), your Discord user ID, username, and avatar, and whether you are a member of our Discord server. Membership is checked to grant community rewards and certain daily credit refills, and paid subscribers with a linked Discord account may receive a supporter role in our server.
• Affiliate / referral data: if you apply to our affiliate program, the details in your application (such as your marketing platforms and social-media links), referral activity, and payout details handled through Stripe Connect. Purchases made with a referral code are linked to the referring affiliate.
• Onboarding answers: optional answers you give during signup, such as how you discovered Revix (traffic source).
• Support communications: messages you send us by email or Discord.

Information collected automatically for security & service delivery (does not require consent):

• Login & request context: your IP address (used for security, rate limiting, and abuse prevention), the country derived from it, your browser user agent, and when you were last active. We keep a capped login history — your last 20 logins, each with IP address, country, and user agent — so you and we can spot suspicious access.
• Cookies & similar technologies: see our Cookie Policy.

Analytics — collected only if you consent:

When you first visit, a consent banner asks whether we may use analytics. If you decline, we use only essential cookies and the Service remains fully usable. If you accept, we collect:

• PostHog: autocapture of clicks and interactions, page views, web-vitals performance metrics, error/exception reports, and session replay — a recording of how you interact with pages, with input fields masked before recording. PostHog also receives AI-generation analytics that include the content of your prompts and the AI's responses, used to monitor and improve AI quality.
• Google Analytics: configured with Consent Mode v2 and defaulted to "denied" — it activates only after you accept analytics.
• First-party analytics: page views, sessions, device, browser and operating system, screen size, locale, timezone, referrer and UTM campaign parameters, and a coarse location derived from your IP address (the raw IP is hashed, not stored, for this purpose).

Once you are signed in, analytics events and session replays are linked to your account identity. PostHog requests are routed through our own domain (a first-party proxy at /ingest) rather than directly to PostHog — we disclose this plainly because it means measurement can still work when browser ad blockers block third-party analytics domains. You can withdraw or change your analytics consent at any time via the "Cookie settings" link in the footer; your choice is stored in the revix_consent cookie for 12 months and mirrored to your account.

Roblox asset uploads:

Some optional features (such as VFX and icon uploads) upload assets to your Roblox account on your behalf. When you sign in with Roblox and approve the asset-upload permission, we store the resulting Roblox authorization tokens encrypted on our servers and use them only to upload assets you ask us to create. You can revoke this access at any time from your Roblox account settings.

You sign in to Revix through our authentication provider, Clerk, using Google, an email address, or another supported sign-in provider. When you choose "Sign in with Google", we receive basic profile information from your Google account: your name, your email address, and your profile picture. We use this information only to:

• Create your Revix account and sign you in securely.
• Show a default display name and avatar on your profile.
• Communicate with you about your account (for example, billing or support).

We do not sell Google user data, do not use it for advertising, do not use it to train AI models, and do not share it with anyone except the service providers needed to operate the Service (see Section 6). Your email address and sign-in credentials are stored by Clerk; our own database stores only your Clerk account ID, a display username, and an avatar. Human access to this data is limited to security, abuse, support, and legal purposes.

Revix's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Revix's access to your Google account at any time from your Google Account permissions page, and you can delete your sign-in account from your profile settings (see Section 8 for what we retain).

• Provide, operate, and maintain the Service, including syncing your project, running the AI assistant, and applying changes you approve.
• Process prompts and code through AI providers to generate responses (see Section 5).
• Process payments, manage subscriptions, and track credit usage through Stripe.
• Authenticate you, secure your account and sessions, and prevent fraud and abuse.
• Moderate content to keep the Service safe and compliant.
• Understand usage and improve features, performance, and reliability.
• Communicate with you about your account, transactions, support requests, and important updates.
• Comply with legal obligations and enforce our Terms of Service.

The core of Revix is an AI assistant. To generate responses, your prompts and the project content you sync (such as scripts and an index of your game) are transmitted to and processed by third-party AI model providers on our behalf. We work with a number of these providers and may change which ones we use at any time to keep the Service fast, reliable, and effective; we do not publicly disclose the specific models or providers behind the assistant.

Important: some of these AI model providers operate outside your country, including in China and other jurisdictions. Do not submit information you are not comfortable having processed by third-party providers in those locations.

We use these providers only to generate responses for you, and we do not use your private project code to train our own models. However, each provider's own terms and privacy practices apply to their handling of the data, and those practices — and the laws of the countries where the providers operate — may differ from those in your country.

We use an automated moderation service to screen prompts before generation. We also keep server-side records of AI requests and responses, together with token usage, cost, latency, and your account ID (see Section 2, "AI request records"), to provide your chat history and monitor quality, cost, and abuse. If you have consented to analytics, AI-generation events including prompt and response content are additionally sent to PostHog.

We do not sell your personal information. We share information only as described below.

Service providers / sub-processors:

• Clerk — authentication and account management. Clerk stores your email address, sign-in credentials, and connected sign-in identities (such as Google or Discord). If you connect Roblox, we sync your Roblox username and avatar into your Clerk profile.
• Third-party AI model providers — process your prompts and synced project content to generate responses and to moderate content. They are located in the United States and other countries, including China (see Section 5). We do not publicly disclose the specific providers.
• Stripe — payment and subscription processing, tax calculation, and affiliate payouts (Stripe Connect).
• Cloud hosting & database providers — storing your data and running the Service.
• Cloudflare — network security, bot protection, and content delivery in front of the Service.
• Google Analytics, Vercel Analytics & PostHog — usage analytics, session replay (input fields masked), error monitoring, and AI quality telemetry. Google Analytics and PostHog run only if you consent via the cookie banner (see Section 2); PostHog traffic is routed through our own domain (/ingest).
• Email delivery provider (Mailtrap) — sending account, team, and affiliate notifications.
• Discord — account linking, rewards, and community support (if you use it). Paid subscribers with a linked Discord account may receive a visible supporter role in our server.
• Roblox — identity verification and, where you direct it, asset uploads via Roblox OAuth.

Other disclosures:

• Legal & safety: to comply with the law, respond to lawful requests, or protect the rights, property, and safety of Revix, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your consent: for any other purpose disclosed to you at the time.

Internal access:

Authorized Revix staff (admins) can access account records and chat transcripts for support, quality review, safety and abuse investigations, and product improvement. Staff access is limited to what these purposes require.

Revix is operated from the United States, and we and our service providers process information in the United States and other countries, including China (see Section 5). These countries may have data-protection laws different from, and potentially less protective than, those of your home country, and may permit government or other access to data under their laws.

By using the Service — and in particular the AI features — you understand and agree that your information may be transferred to and processed in these locations. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers of personal data out of the EEA, UK, or other regulated regions.

We keep personal information for as long as your account is active or as needed to provide the Service, then for as long as necessary to meet legal, accounting, dispute-resolution, or security obligations. Chats and generated content are retained to provide history and continuity; you can delete chats in the dashboard. If you share a chat, the share link creates a separate copy that anyone with the link can view and that persists even if you delete the original chat — contact us to remove a shared link. The synced copy of your project is held only for your active plugin session and is cleared shortly after you disconnect; portions of your code included in AI requests are retained in your chat history and in the AI request logs described in Section 5. In-progress generation data and queued plugin commands are deleted within about 24 hours.

You can permanently delete your account yourself from Profile → Account. Deletion hard-erases your data across our systems — including chat transcripts, AI request records, memory, ratings, and billing records — cancels any Stripe subscription, and deletes your sign-in identity at Clerk. You can also email us to request deletion (see Section 10). Backups and logs are retained for a limited period and then deleted or anonymized.

We use administrative, technical, and organizational measures designed to protect your information, including encryption in transit, encryption at rest for sensitive tokens (such as Roblox authorization tokens), access controls, and use of reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your account credentials and any API keys confidential.

Depending on where you live, you may have some or all of the following rights:

• Access the personal information we hold about you and obtain a copy.
• Correct inaccurate or incomplete information.
• Delete your information and close your account.
• Port your information to another service where applicable.
• Object to or restrict certain processing, and withdraw consent where processing relies on consent.
• Opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are commonly defined.
• Not receive discriminatory treatment for exercising your rights.

Self-service — no email needed:

• Export your data: from Profile → Account you can download a full export of your account data as a JSON file.
• Delete your account: from Profile → Account you can permanently delete your account. This hard-erases your data across our systems (including chat transcripts and AI request records), cancels any Stripe subscription, and deletes your Clerk sign-in identity (see Section 8).
• Withdraw analytics consent: use the "Cookie settings" link in the footer to reopen the consent banner and change your choice at any time.

You can also exercise any of these rights by emailing us at team@revix.tech. We will verify your request and respond within the time required by applicable law. EEA/UK users may also lodge a complaint with their local data-protection authority; California and Colorado residents have specific rights under the CCPA/CPRA and the Colorado Privacy Act.

You must be 18 years of age or older to use the Service, as set out in our Terms of Service. When you create an account you agree to the Terms, and we store that agreement on your account.

We do not knowingly collect personal information from anyone under 18. If we discover that an account belongs to someone under 18, we will delete the account and its data. If you believe a person under 18 is using Revix, report it to us at team@revix.tech and we will investigate and delete any personal information collected from them.

The Service integrates with and links to third parties such as Google, Clerk, Roblox, Discord, and Stripe. Their handling of your information is governed by their own privacy policies, not this one. We are not affiliated with, endorsed by, or sponsored by Roblox Corporation, Google, or Discord.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective" date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.