Privacy policy

Last updated 1 November 2026

Payama turns a sentence into a Roblox game. This page explains what we collect, why, and what we do not do.

What we collect

Your account

• Email address — to identify your account and sign you in.
• Password — stored only as a salted scrypt hash. We cannot read it, and neither can anyone who obtains the database.
• Studio name — optional, shown in your account.

Linked Roblox Studio installations

When you link Studio, we store a name for the installation, the plugin and Studio versions it reported, and a hash of the credential it was issued. The credential itself is shown to the plugin once and never stored in readable form. We also record when a device was last used, and the IP address it last connected from, so you can spot a device you do not recognise.

Your Roblox account, if you connect one

If you sign in with Roblox, we receive your Roblox user ID, username and avatar image from Roblox, and store them so your Payama account can show them. We ask only for the openid and profile scopes. We cannot see your Roblox password, your friends, your messages or your Robux balance.

Your Google, GitHub or Discord account, if you connect one

If you sign in with Google, GitHub or Discord instead, we receive your account ID, email address and username or avatar from that provider, and store them so your Payama account can show them and so you can sign back in. We ask only for your basic profile and email — never access to your Google Drive, your GitHub repositories, or your Discord servers and messages.

Projects and builds

• The prompt you typed, so you can see your own history.
• Which Roblox place a build belonged to, how many parts it produced, whether it succeeded, and how long it took.

We deliberately do not store the generated build itself or the raw model output. They are large, they stop being useful once the build is applied, and keeping them would mean holding far more of your work than we need to.

The AI model

The assistant you talk to in Payama is called Payama AI. As of 2026-08-20, it is powered by DeepSeek's V4 Flash model, a third-party, hosted AI model. Your prompts are sent to DeepSeek's servers in order to answer them.

Earlier previews ran the model locally on your own machine instead, and Payama may switch back to a local or different provider in the future. This page reflects whichever provider is live today; if that changes again, we'll update this section, because it is a real change to where your words go.

Cookies

One cookie, named payama_session. It keeps you signed in. It is HttpOnly, so page scripts cannot read it.

There is no analytics, no tracking and no advertising on Payama. We do not use third-party cookies and we do not build a profile of you.

Who we share it with

Nobody. We do not sell your data, share it with advertisers, or pass it to other companies.

The exceptions are the ordinary ones: the infrastructure that runs Payama (hosting and database), the inference provider once one is chosen, and anything we are legally required to disclose.

What you can do

• Remove a linked Studio at any time from your device list. It stops working immediately.
• Sign out, which ends your browser session.
• Ask for your data or its deletion — see below. Self-service account deletion is not built yet.

How long we keep it

Account data is kept while your account exists. Device credentials expire after 90 days and can be revoked sooner. Pairing codes last ten minutes. Build history is kept until you ask us to remove it.

Children

Roblox is popular with children, so this matters. Payama is aimed at people making games, and you should be old enough to agree to these terms in your country. If you are under 13, please ask a parent or guardian before making an account.

Changes

If this policy changes in a way that affects what we collect or where it goes, we will update the date at the top and say so on the site.