Privacy Policy

This Privacy Notice for Epiphyte LLC (doing business as CheatCodeAI) ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://cheat-code.ai or any website of ours that links to this Privacy Notice
• Use CheatCode AI. AI-Powered Interview assistant that analyzes your screen and audio to help you solve coding challenges and system design questions in real-time.
• Engage with us in other related ways, including any marketing or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at team@cheat-code.ai.

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.

Do we process any sensitive personal information? We do not intentionally collect sensitive personal information, but the screen images and audio you provide could incidentally contain information that some jurisdictions treat as sensitive. We process such information only to provide our Services, and we do not sell it, use it for advertising, or use it to train artificial intelligence models.

Do we collect any information from third parties? We do not buy or obtain personal information about you from third-party data sources. Note that audio you capture during a session may include the voices of other people in your conversation (such as an interviewer).

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.

How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.

How do you exercise your rights? The easiest way to exercise your rights is by emailing us at team@cheat-code.ai. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• email addresses
• name
• profile image

Sensitive Information. We do not ask you for sensitive personal information. However, because screen images and audio reflect whatever is on your screen or spoken during a session, they could incidentally contain information that some laws treat as sensitive. We use this content only to provide the Services described in this Notice, and we do not sell it, use it for advertising, or use it to train artificial intelligence models.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country (determined from your IP address and used to confirm eligibility for our US-only Services), information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Audio. When you enable audio features, we process audio from your device in real time to provide transcription and assistance, and only while a recording session is active; you control when audio capture is on. This audio may include the voices of other participants in your conversation (such as an interviewer). Audio is saved to a folder on your device and is streamed to our speech-to-text provider (Deepgram) for processing; we do not store your audio on our servers at any point — it is relayed in real time and is not written to disk or retained by us during or after your session. The transcripts generated from your audio are returned to your device and are likewise not stored on our servers. You are responsible for obtaining any consent that applicable law requires before recording a conversation or its participants.
• Screen images and inputs. When you use screen-analysis features, the application captures a still image of your screen at your initiative (for example, by clicking a button or pressing a keyboard shortcut) and processes it, together with any text or questions you submit, to generate AI responses. Our screen-analysis feature does not record your screen continuously or in the background. A screen image may include any content visible on the display you select. These images are saved to a folder on your device and are sent to our AI Service Providers for analysis; we do not store them on our servers at any point — they are relayed to the provider in real time and are not written to disk or retained by us during or after processing.
• Remote viewing and control (optional feature). The application includes an optional feature — off by default, and re-disabled each time the application starts — that you may enable in the application's settings to view and control the application from a second device (such as a phone or tablet) on the same local network. When enabled, this feature continuously streams video of the application window and your primary desktop (which may include content from other applications visible on that desktop) to your second device, and accepts input such as mouse and keyboard commands from that device. This data travels only between your own devices over your local network; it is not sent to or processed by Epiphyte or any of our service providers. You are responsible for enabling this feature only on networks and devices you trust.
• Software updates. Each time the desktop application starts, it contacts our update service (updates.cheat-code.ai) to check for a new version. This request includes your application version, operating system, and device type, and your IP address is visible to the service as part of the connection.
• Crash and error diagnostics. When the desktop application encounters an error, it sends diagnostic and crash reports — such as error details, application version, and operating system — to our error-reporting provider (Sentry) to help us detect and fix problems. This is configured not to attach user identifiers, though your IP address is visible to the provider as part of the connection.

Third-party individuals in your sessions. When you use the Services to capture a conversation, the resulting audio and transcripts may include the voices and words of other people (such as an interviewer). We process that content on your behalf and at your direction, solely to provide the Services to you, acting in the role of a processor or service provider with respect to it. You, as the person who directs the capture, are responsible for that collection, including providing any notices and obtaining any consents required by applicable law. If you are a third party whose personal information was captured by one of our users, please direct any request concerning that information to the user who captured it; where required by law, we will provide reasonable assistance in responding to such requests.

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To deliver our AI features. We process the screen images, audio, and text you submit in order to transcribe audio and generate AI responses, including by transmitting that content to our AI and speech-to-text providers as described in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"
• To facilitate account creation and authentication and otherwise manage user accounts. We process your information so you can create and log in to your account and to keep your account in working order.
• To send you service-related communications. We process your information to send transactional messages such as sign-in links and billing or subscription notices.
• To send you marketing and promotional communications. We may send you marketing email about our Services, such as news about new features or offers. You can opt out of our marketing email at any time by using the unsubscribe link in any such email or by contacting us at team@cheat-code.ai (see "WHAT ARE YOUR PRIVACY RIGHTS?" below). Opting out does not affect the transactional messages needed to operate your account.
• To process payments. We process your information to take payment and manage your subscription through our payment processor.
• To keep the application secure and up to date. We process information to check for and deliver software updates, to detect and fix errors and crashes, and for security and fraud prevention.
• To respond to user inquiries and offer support. We process your information to respond to your inquiries and resolve any issues you may have with the Services.
• To evaluate and improve our Services. We process your information to understand how the Services are used and to evaluate and improve them.
• To comply with law. We process your information where necessary to comply with our legal obligations.

In Short: We share your information with the third-party service providers ("subprocessors") we rely on to operate the Services, and in the limited additional situations described below. We do not sell your personal information or share it for cross-context behavioral advertising.

Vendors and Service Providers (Subprocessors)

We share personal information with the third-party service providers below, which process it on our behalf under written contract solely to provide services to us. For the categories of personal information involved, see "WHAT INFORMATION DO WE COLLECT?"

The AI providers above are the same recipients referred to in "DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?", and the analytics provider is the one referred to in "DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?" All are US-based providers. Each processes personal information on our behalf under written contracts or service terms requiring protections consistent with this Privacy Notice. We may add or replace service providers from time to time; when we do, we will update the table above, and if a change materially affects how your session content (audio, screen images, or transcripts) is processed, the updated Privacy Notice will be presented for your review and acceptance the next time you sign in, as described in "DO WE MAKE UPDATES TO THIS NOTICE?" Where a change is needed to keep the Services operating (for example, during a provider outage), we may make the change first and update this Privacy Notice as soon as reasonably practicable afterward.

We may also share or transfer your information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal and Regulatory Requirements. We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process, or where disclosure is necessary to protect the rights, property, or safety of our company, our users, or others, or to detect, prevent, or address fraud, security, or technical issues.

In Short: We use cookies and similar technologies that are necessary to operate our website, together with first-party product analytics that helps us understand how our Services are used. We do not use advertising cookies or third-party ad trackers, and we do not record your sessions.

Our website uses cookies that are strictly necessary to provide the Services — specifically, session cookies and cross-site request forgery (CSRF) tokens used by our authentication system to keep you signed in and to protect your account. Without these cookies, you cannot log in or use authenticated features.

To understand how our Services are used and to improve them, we use product analytics provided by our analytics subprocessor (PostHog). On our website, our analytics uses cookies and similar technologies (such as browser local storage) to recognize your browser across visits, and collects the pages you visit, your interactions with the site (such as clicks and form submissions — but not the text you type into form fields), and device and browser information. The desktop application may also send usage events — such as the features you use, the application version, and basic device information — to our analytics provider; these events never include your session content (your screen images, audio, transcripts, or prompts). If you have an account, we may link analytics information to your account so we can understand how the Services are used over time. Our analytics does not record your screen or your sessions (no session replay), and we do not use analytics information for advertising or share it with advertising networks.

We do not use advertising cookies, marketing pixels, cross-site tracking technologies, or third-party advertising trackers, and we do not sell or share your personal information for targeted or cross-context behavioral advertising.

Most web browsers let you block or delete cookies through their settings. If you block the strictly necessary cookies described above, you will not be able to log in to or use the Services. Blocking or deleting analytics cookies and storage does not affect your ability to use the Services.

In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.

As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this Privacy Notice govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through third-party service providers ("AI Service Providers"), including Deepgram, OpenAI, Microsoft, Google, and OpenRouter. OpenRouter does not generate AI responses itself; it routes your requests to the underlying model providers, and we restrict this routing so your requests are only sent to those disclosed providers. As outlined in this Privacy Notice, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?" You must not use the AI Products in any way that violates the terms or policies of any AI Service Provider.

Our AI Products

Our AI Products are designed for the following functions:

• Audio transcription (speech-to-text)
• Screen image analysis
• Text and conversation analysis

How We Process Your Data Using AI

All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreements with the third-party AI Service Providers described in this Notice.

No Training on Your Content

We do not use your content — your audio, screen images, transcripts, prompts, or the AI responses generated for you — to train artificial intelligence or machine learning models, and we do not permit our AI Service Providers to do so: your content is processed through business API endpoints under agreements and terms that do not allow the provider to use it to train its models. As described elsewhere in this Notice, we also do not retain your audio, screen images, or transcripts on our servers after processing.

In Short: We keep your information only as long as necessary for the purposes described in this Notice, unless a longer period is required by law. Some content is stored on your own device, where it stays under your control until you delete it.

We retain personal information for as long as it is needed for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax or accounting requirements). Our retention periods by type of information are:

• Account data (such as your email address, name, and profile image). Kept while your account is active, and deleted or anonymized after you close your account (generally within 90 days), except records we are required to keep to comply with law or demonstrate compliance (see "Legal agreement and consent records" below). If your account remains inactive for twenty-four (24) consecutive months, we may delete or anonymize it and its associated data after providing at least thirty (30) days' notice to the email address associated with your account.
• Payment and transaction records. Retained for approximately seven (7) years to meet tax, accounting, and legal record-keeping requirements. Full payment card details are held by our payment processor (Stripe), not by us.
• Legal agreement and consent records. When you accept our Terms of Service and Privacy Notice, we keep a record of that acceptance (including your email address, the document versions accepted, the date and time, and the IP address, country, and device information at the time of acceptance). We retain these records after you close your account for as long as necessary to demonstrate compliance with our legal obligations and to establish or defend legal claims, consistent with applicable statutes of limitations.
• Service usage and rate-limit data. Operational counters held on our backend (such as rate-limit and usage counters) expire automatically, on schedules ranging from about a day for abuse-prevention counters to roughly one billing period plus 90 days for usage counters that support billing reconciliation and customer-support inquiries.
• Crash and diagnostic data. Retained by our error-reporting provider (Sentry) for approximately 90 days.
• Analytics data. Product-analytics events (described in "DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?") are retained by our analytics provider (PostHog) for as long as we have an ongoing need to analyze how the Services are used. When your account is deleted, we also delete the analytics profile and the events linked to your account (generally within 90 days).
• Email records. Records of the emails we send you (such as sign-in, billing, and marketing emails) are retained by our email provider (Resend) according to its own retention schedule.
• Content stored on your device (screen images, audio, transcripts, and conversation history). Saved in folders on your own device and kept there indefinitely, under your control. We cannot access or delete this content; you can remove it at any time using your device's file system. Deleting a conversation in the application removes it from the application's stored history, and the application's storage settings include a control that permanently deletes all screen images and audio recordings saved in its storage folder. Depending on your device settings, backup services you control (such as iCloud, Time Machine, or OneDrive) may copy these folders as part of your device backups; those copies are made by your backup provider under its own terms and remain under your control, not ours.

When we no longer have an ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because it has been stored in backup archives), we will securely store it and isolate it from any further processing until deletion is possible. Backup copies containing personal information are deleted or overwritten on a rolling basis in line with our hosting providers' standard backup cycles, and we do not use backups to restore personal information that has been deleted, except as needed to recover from data loss or as required by law.

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. These measures include: encryption of data in transit using TLS (HTTPS) for communications between the application, our services, and our service providers; storage of account and operational data with hosting providers that encrypt stored data at rest; access controls that limit internal access to personal information to personnel who need it to operate the Services; and a design in which your audio, screen images, and transcripts are not retained on our servers after processing. If we become aware of a breach of security affecting your personal information, we will notify you and any applicable regulator as and when required by applicable law.

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at team@cheat-code.ai.

In Short: You may review, change, or close your account at any time, depending on your country, province, or state of residence.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional email at any time by clicking the unsubscribe link in any such email or by contacting us at team@cheat-code.ai. You will then be removed from the marketing email list. We will still send you transactional, service-related messages that are necessary to operate your account — for example, sign-in links and billing or subscription notices — which you cannot opt out of, because they are required to provide the Services.

Account Information

If you would at any time like to review or change the information in your account, or close your account, you can:

• Log in to your account settings to update your display name; or
• Email us at team@cheat-code.ai to request a copy of your account information, a correction, or account closure. We do not currently offer self-service account deletion, so closure requests are handled by our team.

Upon your request to close your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at team@cheat-code.ai.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. Because we do not sell or share personal information for cross-context behavioral advertising and do not engage in targeted advertising, there is no sale, sharing, or targeted-advertising opt-out for a Global Privacy Control ("GPC") or similar signal to activate; however, where required by applicable law, we will treat a valid GPC signal received through a supported browser as a request to opt out of the sale or sharing of personal information collected from that browser, to the extent we engage in such practices in the future. If a broader standard for online tracking is adopted that we must follow, we will inform you about that practice in a revised version of this Privacy Notice.

California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to the section "WHAT INFORMATION DO WE COLLECT?"

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

Sources of Personal Information

Learn more about the sources of personal information we collect in "WHAT INFORMATION DO WE COLLECT?"

How We Use and Share Personal Information

Learn more about how we use your personal information in the section, "HOW DO WE PROCESS YOUR INFORMATION?"

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information.

We disclose personal information to our service providers — including our AI Service Providers — for the business purposes described in this Notice, in order to deliver the Services. In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose, in each case only to the service providers identified in "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?": Category A (identifiers), Category B (personal information as defined in the California Customer Records statute), Category D (commercial information), Category F (internet or other similar network activity), Category H (audio, electronic, sensory, or similar information), and Category I (professional or employment-related information). We have not sold personal information, or shared it for cross-context behavioral advertising, in the preceding twelve (12) months.

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")

Depending upon the state where you live, you may also have the following rights:

• Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)
• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
• Right to obtain a list of third parties to which we have sold personal data (as permitted by applicable law, including the privacy law in Connecticut)
• Right to review, understand, question, and depending on where you live, correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Connecticut and Minnesota)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)

How to Exercise Your Rights

To exercise these rights, email us at team@cheat-code.ai, or contact us using the details at the bottom of this document. We do not currently offer a separate online request form; email is the fastest way to reach us. We will respond to a verifiable request within forty-five (45) days of receiving it; where reasonably necessary, we may extend that period once by an additional forty-five (45) days as permitted by applicable law, in which case we will notify you of the extension within the initial 45-day period.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at team@cheat-code.ai. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?"

Nevada Residents

Nevada law (Nevada Revised Statutes Chapter 603A) allows Nevada residents to opt out of the sale of certain personal information. We do not sell personal information as defined by that law. If you are a Nevada resident and have questions about our data practices, you may contact us at team@cheat-code.ai.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we will prominently post the updated notice on this page before or at the time the changes take effect, and the next time you sign in you will be required to review and accept the updated notice before continuing to use the Services. Non-material updates become effective when posted. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

If you have questions or comments about this notice, you may email us at team@cheat-code.ai or contact us by post at:

Epiphyte LLC
30 N Gould St Ste N
Sheridan, WY 82801
United States

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, email us at team@cheat-code.ai describing your request. We will verify your identity as described above and respond within the timeframes required by applicable law.