Privacy Policy

This Privacy Policy explains what personal information CALDRIVO GLOBAL INC collects when you use blockforgeo.net, why we use it, who helps us process it, how long we keep it and the choices you have. In short: we collect only what we need to run the service and bill you, we never use your prompts, uploads or generated assets to train AI models, we do not sell or share your personal information, and we use no advertising or analytics cookies.

Who we are and what this policy covers

blockforgeo.net (blockforgeo.net) is operated by CALDRIVO GLOBAL INC, located at 14001 East Iliff Avenue, Aurora, CO 80014, United States. CALDRIVO GLOBAL INC is the controller of your personal information for the purposes of the EU and UK General Data Protection Regulation (GDPR), the "business" or "controller" under US state privacy laws, and the business operator handling personal information under Japan's Act on the Protection of Personal Information (APPI).

blockforgeo.net is an online creative tool for game creators. In a web workspace, subscribers describe what they want and blockforgeo.net generates game assets with AI: thumbnails, icons, textures, clothing images, character renders (GFX), UI layouts and short sound effects. Everything is delivered digitally.

This policy covers the blockforgeo.net marketing website, the free preview mode, the signed-in workspace, checkout and billing, our emails and customer support. It does not cover third-party websites we link to, or the hosted payment page run by our payment processor, which has its own privacy notice.

Information we collect

We collect the categories of personal information below. We do not ask for government identification numbers, precise location, health information or similar sensitive data, and we never receive your full card number.

Preview mode on the marketing website draws rough previews locally in your browser. It needs no account, uses no credits and does not send what you type to us or to any AI provider. The website also keeps two small functional settings in your browser (language and theme); see our Cookie Policy.

You must give us an email address, and enter a payment card on our payment processor's checkout page, to start the trial and subscribe. We need them to provide and bill the service, so without them we cannot open a paid account. A display name, reference images and marketing consent are optional.

Please do not put sensitive personal information, or anyone else's personal information, into prompts or reference images unless you have the right to share it.

How we use information and our legal bases

We use personal information only for the purposes below. If you are in the European Economic Area (EEA) or the United Kingdom, the GDPR requires us to state a legal basis for each purpose; it is shown in the right-hand column.

Where we rely on legitimate interests, we have weighed them against your rights, and you may object (see "Your privacy rights"). We do not use personal information for purposes incompatible with those listed here. We do not make decisions based solely on automated processing that produce legal or similarly significant effects about you.

AI processing and no training

When you generate an asset, your prompt and any reference image are sent to an AI model inference provider solely to create that output. The result is returned to your workspace and stored there until you delete it, or until 30 days after your account is closed.

• No training. blockforgeo.net does not use your prompts, uploads or generated assets to train AI models. Our AI inference providers process prompts only to generate the output, under contracts that forbid them from training on your content.
• Limited access. Our staff look at prompts, uploads or outputs only when needed to provide the service, answer a support request you send, investigate a suspected breach of our Terms of Service, or comply with the law.
• Your content stays yours. You keep ownership of your prompts and reference images and, to the extent the law allows, of the assets you generate. You give us a limited licence to process and store them only to provide the service.
• No profiling. We do not use your prompts or outputs to build advertising profiles or to make decisions about you.

Service providers and other disclosures

We disclose personal information to the service providers below, which process it for us. Under our contracts they may use it only to provide their services to us, and they must protect it. Google Fonts is the exception noted in its entry. The categories are:

• Payment processor — a PCI DSS–compliant processor that handles checkout, card charges, renewals and refunds. It receives your card details directly; we receive only the card brand, last four digits, expiry date and billing country and postal code.
• Cloud hosting — stores and runs the website, the workspace, your account data and your assets in the United States.
• Email delivery — sends service emails and, if you opted in, marketing emails.
• AI model inference providers — receive prompts and reference images only to generate outputs, under contracts that forbid training on them.
• Customer-support tooling — helps us receive, track and answer support emails.
• Google Fonts — the website loads fonts from Google's servers, so your browser sends your IP address and basic browser information to Google when a page loads. Google receives this directly from your browser and handles it under the Google Privacy Policy. We do not send Google any other information about you.

We may also disclose personal information:

• when the law requires it, for example in response to a valid court order;
• to protect the rights, safety or property of our users, other people or CALDRIVO GLOBAL INC, including to prevent fraud;
• to a successor if CALDRIVO GLOBAL INC is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information and we will notify you; or
• when you direct us to.

No sale, no sharing, no tracking cookies

We do not sell your personal information and do not share it for cross-context behavioural advertising. We use no advertising or analytics cookies.

We have not sold or shared personal information in the past 12 months. We do not use advertising networks, tracking pixels, analytics tools or data brokers. The marketing website stores only functional preferences in your browser (bf-lang and bf-theme); the signed-in workspace uses an essential session cookie and a CSRF-protection cookie; and our payment processor's checkout page may set its own cookies for fraud prevention and security. Details are in our Cookie Policy.

We honour Global Privacy Control (GPC) signals as a valid request to opt out of the sale and sharing of personal information and of targeted advertising. Because we do not track you across websites, "Do Not Track" signals do not change how the site behaves. See Do Not Sell or Share My Personal Information.

How long we keep information

We keep personal information only for as long as we need it for the purposes above:

We keep specific information longer only where the law requires it or where it is needed to establish, exercise or defend a legal claim, and only for as long as that need lasts. When a retention period ends, we delete the information or irreversibly anonymise it. Copies of deleted information can remain in secure backups for a limited time, until the backups are overwritten in the normal backup cycle. We restore a backup only to recover from a system failure, and we do not use backup copies for any other purpose.

International data transfers

CALDRIVO GLOBAL INC is based in the United States, and we store and process personal information in the United States. If you use blockforgeo.net from Japan, the EEA, the UK or anywhere else, your information is transferred to and processed in the United States, where data protection laws may differ from those in your country.

The United States has no single comprehensive federal privacy law. Personal information is protected by sector-specific federal laws, the Federal Trade Commission Act and state laws such as the CCPA/CPRA and the Colorado Privacy Act. We protect your information as described in this policy wherever it is processed. Where the GDPR or UK GDPR requires a transfer mechanism for our service providers, we use the European Commission's Standard Contractual Clauses (with the UK Addendum) or rely on the provider's certification under the EU–US Data Privacy Framework and its UK Extension. For users in Japan, we require our service providers by contract to take measures equivalent to those required under the APPI.

Security

We use administrative, technical and physical safeguards appropriate to the risk, including:

• encryption in transit (HTTPS/TLS) for the website, the workspace and checkout;
• card payments handled entirely by a PCI DSS–compliant payment processor, so we never see or store full card numbers;
• secure session cookies and CSRF protection in the workspace;
• access to personal information limited to staff who need it for their work;
• contracts requiring service providers to keep information confidential and secure; and
• periodic review of our safeguards, taking into account the legal environment in the United States, where the data is stored.

No system is perfectly secure. If a security incident affects your personal information, we will notify you and the relevant authorities as the law requires. Please keep your email account secure, because we verify requests and send billing notices through your account email.

Your privacy rights

Depending on where you live, you have some or all of the rights below. We handle every request through the process in "How to exercise your rights".

United States: California, Colorado and other states

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act and the comprehensive consumer privacy laws of other US states, you may have the rights below. The exact rights vary by state; we apply the same process, timing and appeal route to every US resident.

• Know and access the categories and specific pieces of personal information we hold about you, its sources, our purposes and the categories of recipients;
• Correct inaccurate personal information;
• Delete personal information we collected from you, subject to legal exceptions such as billing records we must keep for tax purposes;
• Portability: receive your personal information in a portable, commonly used format;
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects (we do none of these);
• Limit the use of sensitive personal information (we use it only for purposes the law permits, such as keeping your account secure);
• Appeal our decision on your request; and
• Non-discrimination: we will not deny you service, charge you a different price or give you a different quality of service because you exercised your rights.

In the past 12 months we have collected these categories of personal information as defined by the CCPA: identifiers (email address, display name, IP address); customer records (billing country and postal code, card brand, last four digits and expiry date); commercial information (plan, charges, refunds and credit usage); internet or other electronic network activity (usage records, browser and device data, server logs); audio, electronic or visual information (reference images you upload and assets you generate, to the extent they relate to you); and sensitive personal information limited to the data needed to sign in to your account. We collected them from the sources, and used them for the business purposes, described above, and disclosed each category only to the service providers listed above. We do not draw inferences about you.

Japan: Act on the Protection of Personal Information (APPI)

If you are in Japan, the APPI lets you ask us to:

• disclose the retained personal data we hold about you and our records of any provision of it to third parties;
• correct, add to or delete retained personal data that is inaccurate;
• stop using or erase data that is used beyond the purposes of use or was obtained improperly, that we no longer need, that has been involved in a data breach, or whose handling may harm your rights or legitimate interests; and
• stop providing your data to third parties where the law gives you that right.

Our purposes of use are those listed in "How we use information and our legal bases". We do not provide personal data to third parties except to service providers entrusted with processing on our behalf, or where the law permits. We disclose the name of our representative without delay on request. Complaints about how we handle personal information go to the address in "Contact" below. You may also consult Japan's Personal Information Protection Commission.

EEA and UK: GDPR

If the GDPR or UK GDPR applies to you, you have the right to:

• access your personal data and receive a copy;
• have inaccurate data rectified, and have data erased;
• restrict processing, and receive your data in a portable format;
• object to processing based on our legitimate interests, and object at any time to processing for direct marketing;
• withdraw consent at any time, without affecting processing that took place before; and
• not be subject to decisions based solely on automated processing that significantly affect you.

You also have the right to lodge a complaint with the data protection authority where you live or work or where an alleged infringement took place, or, in the UK, with the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

How to exercise your rights

1. Send a request. Email support@blockforgeo.net, ideally from the email address on your blockforgeo.net account, with the subject "Privacy Request". Tell us which right you want to exercise and where you live, so we can apply the right law.
2. Verification. We verify your identity through your account email: we reply to the address on file and ask you to confirm the request. If you no longer have access to it, we may ask for a few details only the account holder would know, such as the date and amount of a recent charge and the last four digits of the card used. We use these details only to verify the request.
3. Timing. We confirm receipt within 10 business days and answer within 45 days. If we need more time, we may extend once by up to 45 more days, and we will tell you why before the first 45 days end. Where a law sets a shorter deadline, we meet it: for example, one month under the GDPR, and without delay under the APPI. Opt-out requests are carried out within 15 business days.
4. Authorised agents. Someone you authorise may submit a request for you if they provide permission signed by you. We may still ask you to verify your identity directly with us or to confirm that you gave permission, unless the agent holds a power of attorney that is valid under applicable law.
5. Appeals. If we decline your request in whole or in part, we will explain why. You can appeal by replying to our decision email with "Appeal" in the subject. We will respond in writing within 45 days, explain the outcome and, if we deny the appeal, tell you how to contact your state Attorney General (for Colorado residents, the Colorado Attorney General) or the relevant authority.

Requests are free of charge. Where the law allows, we may decline, or charge a reasonable fee for, requests that are manifestly unfounded, excessive or repetitive, and we will explain why.

Children

blockforgeo.net is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that a child under 13 has created an account, we delete the account and its data. Users aged 13 to 17 may use blockforgeo.net only with a parent or legal guardian who accepts our Terms of Service for them and manages billing. You must be at least 18, or the age of majority where you live if that is higher, to start a trial or make a purchase. We do not sell or share the personal information of anyone, including consumers under 16. If you believe a child under 13 has given us personal information, please email support@blockforgeo.net and we will delete it.

Service and marketing emails

Service emails. We send the emails you need to manage your subscription: the trial confirmation with the exact trial end time and how to cancel; a receipt after every charge; a reminder at least 7 days before each annual renewal charge; notice at least 30 days before a price change applies to your renewal; confirmations of cancellations and refunds; and security or legal notices. Because these emails concern your contract and your charges, you cannot unsubscribe from them while your account is active.

Marketing emails. We send product news or offers only if you opt in. Every marketing email contains an unsubscribe link, and you can also opt out by emailing support@blockforgeo.net. We act on opt-outs promptly, and within 10 business days at the latest. Unsubscribing from marketing does not affect service emails.

Changes to this policy

We may update this policy when our service, our providers or our legal obligations change. We will post the new version on this page with a new "Last updated" date. If a change is material, for example a new purpose or a new type of recipient, we will tell you by email or with a notice in the workspace before it takes effect, and ask for your consent where the law requires it. We will not start selling or sharing personal information without first updating this policy and giving you the notice and choices the law requires.

Contact

For privacy questions or requests, contact CALDRIVO GLOBAL INC, the operator of blockforgeo.net:

We reply to emails within 2 business days, in English or Japanese. You can also reach us through our contact page.