Privacy Policy

Last updated: 2026-09-14

This policy explains what data GAIO processes, what for, how long it is kept and how you can delete it. It is written to be understood: if anything here is unclear, write to us and we will fix it, because a policy nobody understands protects nobody.

1. Who is responsible for your data

The data controller is BIND SEO & DEVELOPMENT LLC, a company incorporated in Wyoming, United States, operating the product under the GAIO brand.

Registered address: 30 N Gould St, Ste R, Sheridan, Wyoming 82801, Estados Unidos.

For anything concerning your data — access, correction, export or deletion — write to soporte@gaio.gg.

2. What data we process

This list comes from our actual database schema, not from a template. If a table holds data about you, it is listed here.

Your account

• email address and username
• avatar, bio and any social links you add
• your GAIO tag and level

Without this there is no account: it is the minimum needed to sign you in.

Your linked accounts

• the linked platform
• your identifier and username there
• the date it was linked

This is what lets GAIO see your library and launch your games. What each platform requests is detailed below, one section per provider.

Your game library

• which games you own and on which store
• hours played and last time played
• unlocked achievements and rank, where the game exposes them
• the install path on your machine

Your Arsenal, the Play button and recommendations come from here. The install path is stored so the game can be launched; it is never shared.

Your status

• whether you are online, away or offline
• what you are playing right now

So your friends know whether they can invite you. You can appear offline from the app itself.

Your devices

• an identifier derived from your machine, which cannot reconstruct its serial number
• the machine name, Windows version and GAIO version
• when it was last seen

So you can see where your account is open and sign out a machine you no longer use. It is a security measure, not profiling.

3. Telemetry: only with your permission

Three groups of data are not collected unless you turn them on. They are performance and network measurements, and they exist so the Optimizer and Radar can do their job.

Your hardware

• CPU and GPU model
• system RAM and video memory

The Optimizer needs to know what you play on to recommend settings your machine can actually sustain.

Your play sessions

• session length and when it happened
• average frames per second
• peak temperature reached
• average CPU, GPU, RAM and video memory usage

This is what turns «it runs badly» into data: without measuring performance it cannot be improved, nor can your per-game statistics be shown.

Your connection, when you use Radar

• latency, jitter and packet loss against each measured node

Radar compares routes to tell you which one suits you. Without measuring them there is nothing to compare.

Legal basis: your explicit consent. You can withdraw it at any time from Settings, without giving reasons and without losing access to the rest of the product. Once withdrawn we stop collecting this data, and you can ask us to delete what was already collected. This data is not sold, is not shared with advertisers and is not used to train artificial intelligence models.

4. Your linked accounts, platform by platform

Linking an account is always your decision and always reversible. Each section states which permissions we request, what specific data we store, what for, for how long and how it is deleted.

5. Who we share data with

We do not sell your data. We do not share it with advertisers. The only third parties that process it are the infrastructure providers we need for the product to work, acting on our behalf and under our instructions:

• Supabase — database, authentication and file storage (United States).
• Cloudflare — delivery of this website, the API and the installers (global network).
• PostHog — usage analytics for this website, and only if you accept the banner (United States).
• Rackspace — domain email (United States).

We may also disclose data where legally compelled by a competent authority. If that happens and the law allows us to tell you, we will.

6. International transfers

BIND SEO & DEVELOPMENT LLC is based in the United States and so is part of its infrastructure. If you write to us from outside that country, your data is processed there. Where your country's law requires additional safeguards for that transfer, we apply them through the relevant contractual clauses with each provider.

7. How long we keep your data

For as long as you have an account. When you delete it, it enters a 14-day grace period during which you can change your mind and recover it; after that, the data is erased. The details are in how to delete your data.

Data from a linked account is deleted as soon as you unlink it, without waiting for the 14 days.

8. Your rights

• Access the data we hold about you.
• Correct anything wrong, from your profile or by writing to us.
• Export your data in a format you can read.
• Delete your account and your data.
• Withdraw telemetry consent without losing the product.
• Object to a specific processing and have us explain why it exists.

To exercise any of them write to soporte@gaio.gg. We respond within 30 days at the latest. If you believe we handled your request poorly, you can complain to your country's data protection authority.

9. Children

GAIO is not directed to children under 13 and we do not knowingly collect data from anyone below that age. If we find an account belonging to someone under 13, we delete it along with their data. If you are a parent or guardian and believe we hold data about a child in your care, write to us and we will sort it out without asking you to justify yourself.

10. Analytics on this website

This site uses PostHog, hosted in the United States, to know which pages are visited and where people arrive from.

It does not load until you accept. Until you press accept on the banner, no measurement cookie is set and not a single request goes out to PostHog. Continuing to browse does not count as accepting, and declining costs one click, same as accepting.

It is configured to collect the minimum that is useful:

• Your IP address is discarded and is not stored alongside the events.
• Your screen and movements are not recorded: session replay is disabled.
• Individual clicks and keystrokes are not logged: autocapture is disabled.
• No profile is created for visitors who do not identify themselves.

This data is not shared with advertisers, is not cross-referenced with your GAIO account and is not used to train artificial intelligence models. Details are in the cookie policy, where you can also change your decision.

11. Usage data from the desktop app

The GAIO app measures which screens you open and which features you use, so we can decide what to build next. It goes to a different PostHog project from this website, so the two are not cross-referenced.

It comes switched on, and we say so here because that is what it does: we tell you on the last step of creating your account, with the checkbox in plain sight, and you can turn it off whenever you want in Settings → Privacy inside the app. Turning it off stops the sending immediately.

What is sent:

• Which screens you open, and in what order.
• Which actions you take: scanning your PC, launching a game, updating it, using the Radar, making a voice call, asking the Assistant.
• What you type in the game catalogue search box, so we know which games are asked for most and which are missing. That box only searches games.
• How long a match lasted, in ranges, and whether it came with a scoreboard.
• Your account identifier, so we can count people and not just visits.

What is not sent, which is the part that actually has to be demonstrable:

• Your screen is not recorded. Session recording is not in the app: it is not that it is disabled, it is that it was never included.
• Your messages are not read. When you send a message, what travels is the fact and whether it was direct, group or Guild. Not the text, not who it went to.
• What you type in the global search is not sent, because that search also finds people, and another person’s name is not yours to give away.
• Not your email, your Riot ID, your Steam ID, your disk paths or your file names.
• Not every click or keystroke.
• Your IP address is discarded, same as on this site.

12. Security

Passwords are stored hashed, never in plain text. Database access is restricted by row-level policies, so a query can only return what belongs to whoever issued it. You can enable two-step verification and review which devices have your session open.

No system is invulnerable. Should a breach affect your data, we will tell you what happened, which data was affected and what we are doing about it.

13. Changes to this policy

When we change something material we will tell you inside the application before it takes effect, not in a footnote. The last update date is at the top of this page.

14. Contact

soporte@gaio.gg — the same address handles privacy, deletion requests and support. You can also reach us from the support page.