Player One operates these services. Email: hello@1p.dev. We have not yet appointed representatives in the UK or the EU; contact us directly at that address on any data protection matter.
We handle personal data in two different ways, and your rights depend on which applies.
The website, your account, billing and support. For this we decide how and why data is used. We are the controller. Part A below applies.
Your Player One instance. Everything inside your instance - files, conversations, agent memory, connected accounts and the credentials you store - belongs to you. We host it and operate the software. You decide what goes in and what it is used for. You are the controller and we are your processor. Part B below applies.
One thing to know before you store anything. Content in your instance is sent to Google for search indexing, and voice audio to Groq for transcription, under our accounts. This cannot be switched off. Section 8 explains what that means for you.
We do not sell personal data. We share it only with providers who process it for us:
Each provider processes data for us under its own published data processing terms.
We will also disclose personal data if the law requires it, or to a buyer or successor if our business is sold or reorganised, in which case this policy continues to apply.
Your instance holds whatever you and your agents put there: files, documents, conversations, agent memory, configuration, the accounts you connect (such as email, calendars, cloud drives and messaging channels) and the credentials you store. This can include personal data about other people - your customers, contacts and staff.
You own this data and you are responsible for it, including for having a lawful basis to process any personal data in it. We process it only to host and operate your instance for you. We do not use it for our own purposes and we do not use it to train or improve any model.
Player One works by sending content to AI models. There are two kinds of provider, and the difference matters.
Providers you connect yourself. For the language models your agents use, you choose the provider and connect it under your own account with that provider. When your agents run, the relevant content - your prompts, the files and messages the agent is working with, and its memory - is sent to the provider you chose. That processing happens under your agreement with that provider, not ours. Read your provider's terms before connecting it.
Two built-in functions that use providers under our account. Search and memory indexing, and voice transcription, are built into how Player One works. They cannot be switched off, and you cannot replace our account with your own. For these, we are responsible for the arrangement and the provider is our sub-processor:
Read this before you store personal or confidential data. Storing content in your instance means it is sent to Google for indexing under our account. There is no setting that prevents this. If you are a controller of personal data, that is a transfer to our sub-processor: you need a lawful basis for it, and your own privacy notice and processor arrangements need to reflect it. If your regulator, professional rules or client agreements do not permit onward transfer to a provider you have not contracted with, Player One is not currently suitable for that data. Audio is sent to Groq only when you use voice features; if you do not want that, do not use them.
We will email account holders at least 30 days before adding a provider under our own account or changing what one receives.
When you connect an external account, your agents can read from and act on it - for example reading email, sending messages, or editing files in a cloud drive - within the permissions you grant. You can disconnect an account at any time from your instance. What the external service does with its own data is governed by its terms.
Your instance is hosted on Akamai (Linode) in the United States, in the us-east region. The website is delivered through Cloudflare's global network. Content sent to Google for Fold indexing and audio sent to Groq for transcription is processed in the United States. We are established in Hong Kong. If you are in the UK or the EU, this means your data is transferred outside those territories, and neither the United States nor Hong Kong is covered by a UK or EU adequacy decision.
Transfers from us to the providers above are covered by the safeguards in their own data processing terms: Akamai Technologies, Inc. and Linode LLC are certified under the EU-US Data Privacy Framework and its UK Extension, which you can check on the Data Privacy Framework participant list at dataprivacyframework.gov, and Google's and Groq's data processing addenda incorporate the European Commission's standard contractual clauses and the UK transfer terms.
The transfer from you to us, as a company established in Hong Kong, needs its own safeguard. We have not yet put the standard contractual clauses and the UK International Data Transfer Addendum in place for it. If you are in the UK or the EU and need that before you store personal data, contact us at hello@1p.dev and we will provide the clauses for signature.
What we do:
What we do not do, so that you can decide what to store:
If your personal data is inside a customer's instance - for example because you are their customer or contact - the customer is the controller. Please contact them. If you contact us instead, we will tell you which customer to approach where we can, and we will assist the customer in responding.
You have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. Email hello@1p.dev. We may ask you to confirm your identity first. We respond within one month; if a request is complex we may take up to two further months and will tell you if so.
If you are unhappy with how we handle your data you can complain to a supervisory authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the data protection authority in your country; in Hong Kong, the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).
Player One is for adults. We do not knowingly collect personal data from anyone under 18.
We will post changes here and update the date at the top. If a change materially affects how we use your data we will email account holders before it takes effect.
Player One. Email: hello@1p.dev.