Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR").
1. Data controller
The controller of your personal data is CONNEXT EOOD, a company incorporated under the laws of the Republic of Bulgaria, with registered office at Dunav 35, Sofia Center, 1000 Sofia, Bulgaria, EIK/VAT BG207748920 ("we", "us"), which operates the TG360.ai platform (the "Service"). For any matter relating to your personal data, including contacting the person responsible for data protection, write to info@connext-world.com.
2. Scope
This Policy applies to the tg360.ai website and web application: account registration and sign-in, the dashboard, uploading and live browser recording of gameplay, AI video analysis and reports, the coach chat, highlight clips, sharing, challenges, squads and comments, the referral and voucher programs, welcome credits and the purchase of credits.
3. Categories of personal data
Account data: name, email address, password (stored only as a secure hash), consents to the Terms, this Policy and AI video processing, with timestamp and the IP address of the confirmation. If you sign in with Google or Discord, we receive your email address and profile name from that provider.
Gameplay content: videos you upload, live browser recordings (the temporary raw recording and the window you select), the compressed copy kept with your report, a preview frame and the highlight clips you create.
Data about third parties visible in your footage (Art. 14 GDPR): in-game names, voice or text chat, webcam overlays or other information about other people that may appear in the video you submit. We don't collect it on purpose; it is processed only as part of the analysis you request.
Analysis data: AI-generated reports, skill scores, key moments, training plans, detected game metadata (game, character, visible rank, K/D/A, outcome), your questions to the coach and its answers.
Social data: share and challenge links, squad membership, timestamped comments, referral relationships.
Billing data: credit balance and history, purchases and payment status. Card data is handled exclusively by Stripe: we never see or store full card numbers.
Technical and security data: IP address, timestamps, browser and device technical identifiers, anti-bot verification results, security logs.
Support communications: messages you send to info@connext-world.com.
4. Purposes and legal bases
Providing the Service (Art. 6(1)(b), performance of a contract): creating and managing your account; receiving, storing and analyzing your gameplay; generating reports, training plans, clips and coach answers; managing credits, welcome credits, referrals and challenges; service emails such as account confirmation.
Third-party data in your footage (Art. 6(1)(f), legitimate interest): processed only to deliver the analysis you asked for. You are responsible for having a legal basis to submit it.
Legal obligations (Art. 6(1)(c)): invoicing, accounting and tax records.
Security and abuse prevention (Art. 6(1)(f)): rate limiting, anti-bot verification, preventing multiple accounts created to collect welcome credits, protection against unauthorized access.
Service improvement (Art. 6(1)(f)): aggregated, non-identifying usage and cost analysis.
Optional cookies (Art. 6(1)(a), consent): only if you allow them in the cookie banner. You can withdraw consent at any time.
We do not sell your data, we do not use it for advertising, and we do not carry out automated decision-making producing legal or similarly significant effects (Art. 22 GDPR). Skill scores and the Coach Score are coaching suggestions with no legal or contractual consequence.
5. How the AI analysis works
The window of video you select is sent to Google Gemini, acting as our processor, only to generate your report. The copy uploaded to the provider for the analysis is deleted from its file storage when the analysis is complete. Follow-up questions to the coach are answered from your written report, without sending the video again. We do not train our own AI models on your content.
6. Video data and deletion of raw footage
Live recordings and uploads. Your browser uploads the raw video in chunks, through short-lived signed links, directly to private object storage. As soon as the window you selected has been compressed into the working copy used for the analysis, the raw recording or upload is permanently and automatically deleted. Raw footage for which no window is ever selected is deleted automatically within 1-2 days.
Working copy and clips. A compressed copy of the selected window (720p), its preview frame and any highlight clips you create are kept with your analysis, so you can replay them next to the report. They are visible only from your account, unless you create a share link.
Deletion. You can delete any analysis from your history at any time: its report, video, clips, share links, comments and challenges are deleted permanently. A record of the credits used is kept for accounting.
7. Recipients and sub-processors
We share data only with providers acting on our behalf under data processing agreements (Art. 28 GDPR): Supabase (database, authentication and real-time notifications, EU region); Cloudflare (R2 object storage for videos and clips; Turnstile anti-bot verification); Google (Gemini API for AI analysis); the provider of our dedicated application server. Payments are handled by Stripe, which also acts as an independent controller for its own legal obligations. Transactional emails are sent through an SMTP server operated by the controller. The up-to-date list is available on request at info@connext-world.com.
Content you choose to share through a public link, a challenge, a squad or comments is visible to the people you share it with.
8. International transfers
Where a provider processes data outside the European Economic Area, the transfer is based on an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework, where the provider is certified) or on the Standard Contractual Clauses adopted by the Commission, with supplementary measures such as encryption in transit.
9. Retention
Raw recordings and uploads: deleted as soon as the working copy is ready, at most 1-2 days if abandoned. Analyses, working videos and clips: while your account is active, or until you delete them. Account data: for the life of the account; after closure, only as long as required by law. Billing and accounting records: as required by Bulgarian accounting and tax law. Security logs: rolling 30 days. Consent records: for the life of the account plus the limitation period for claims.
10. Security
Least-privilege access controls, secure password hashing, TLS/HTTPS encryption in transit, row-level security on the database, private storage with short-lived signed links, server-side-only secrets, anti-bot verification and security logging.
11. Your rights
Under Articles 15-22 GDPR you have the right to: access your data and obtain a copy; rectification of inaccurate or incomplete data; erasure ("right to be forgotten"); restriction of processing; data portability, receiving the data you provided, including your reports, in a structured, machine-readable format; objection to processing based on legitimate interest; and to withdraw consent at any time, without affecting earlier processing.
You also have the right to lodge a complaint with a supervisory authority: in Bulgaria, the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg, or the authority of your EU country of residence.
12. How to exercise your rights
Email info@connext-world.com, if possible from the address registered to your account, stating your name, your registered email, the right you want to exercise and any detail that helps identify the data (for example a specific analysis). We reply without undue delay and within one month, extendable by two further months for complex requests, in which case we tell you within the first month. Requests are free of charge unless manifestly unfounded or excessive. We may ask for information to verify your identity. You can also delete single analyses yourself from your history.
13. Cookies
We use essential cookies for sign-in, session and security, and optional cookies only with your consent. Details and your choices in the Cookie Policy.
14. Minors
The Service is not intended for children under 16. Users aged 16 to 18 need the consent of a parent or legal guardian to register. If we learn that we hold data of a child under 16 without valid consent, we delete it.
15. Is providing data mandatory?
Account and content data are needed to provide the Service: without them we can't create your account or analyze your gameplay. Optional cookies are, as the name says, optional.
16. Changes to this Policy
We may update this Policy. Material changes are announced by email or in the app before they take effect; the date at the top shows the current version.