Privacy Policy

1. Controller and Scope

This Privacy Policy explains how Aiflyn collects, uses, stores, shares, and protects personal data when you access or use the service. For the purposes of this policy, Aiflyn acts as the data controller for the personal data processed through the platform, unless a separate notice states otherwise.

This policy applies to the website, chat experience, account features, billing flows, support interactions, and any other service component that links to or references this Privacy Policy.

2. Personal Data We Collect

Depending on how you use the service, we may collect account identifiers, name, email address, profile image, language preference, selected model, chat titles, chat messages, usage records, credit balance history, payment-related metadata, session information, device information, IP address, browser type, timestamps, and technical logs.

If you sign in with Google, we receive the information that is made available to us through the sign-in flow and your connected Google account, subject to the permissions and settings you choose.

3. Purposes of Processing

We process personal data to create and maintain your account, authenticate sign-in activity, provide chat functionality, store conversation history, calculate usage, manage credit balances, support billing and payment operations, respond to support requests, maintain service security, detect abuse or fraud, improve product performance, and comply with legal obligations.

We also use limited technical data to diagnose issues, monitor service reliability, prevent unauthorized access, and keep the platform running in a secure and stable manner.

4. Chat Content and AI Processing

Chat messages and related conversation data may be stored so that we can preserve your history, allow you to return to existing threads, and present prior conversations in your account.

To generate responses, messages may be transmitted to model providers and infrastructure providers that process the request on our behalf. Those providers receive only the information necessary to deliver the service, and their own terms and processing rules may also apply.

5. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember your theme and language preferences, preserve selected settings, and support essential security and session-management functionality.

Where required by law, non-essential cookies or similar technologies are used only with your consent or as otherwise permitted.

6. Sharing and Service Providers

We may disclose personal data to trusted service providers only to the extent reasonably necessary to operate the service. These providers may include authentication, hosting, storage, model access, logging, support, security, and payment providers.

We do not sell personal data. We do not permit service providers to use personal data for their own unrelated purposes unless a separate lawful basis applies.

7. International Transfers

Because the service may rely on infrastructure or providers located in different jurisdictions, your personal data may be processed outside your country of residence. Where required, we use appropriate safeguards intended to protect the transfer of personal data.

8. Retention

We retain personal data only for as long as necessary to provide the service, maintain account records, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business purposes. Retention periods can vary depending on the category of data and the reason it was collected.

When data is no longer required, we may delete it, anonymize it, or otherwise securely dispose of it in accordance with our internal retention practices.

9. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures are intended to reduce risk, but no system can be guaranteed to be completely secure.

10. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing activities, and to request portability of your personal data. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise a right, contact us at support@aiflyn.com. We may need to verify your identity before acting on a request.

11. Children

The service is not intended for children, and we do not knowingly collect personal data from individuals who are not permitted to use the service under applicable law. If you believe a child has provided personal data, please contact us so we can review the matter.

12. Legal Basis for Processing

Where applicable law requires a legal basis for processing personal data, we rely on the following: performance of a contract or steps taken at your request prior to entering into a contract (account creation, service delivery, billing); compliance with a legal obligation; our legitimate interests in operating, securing, and improving the service, where those interests are not overridden by your rights; and, where required, your consent.

You may withdraw consent at any time where processing is based solely on consent, without affecting the lawfulness of processing carried out before withdrawal.

13. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects about you solely through automated processing. AI model outputs are generated automatically and are presented to you as informational responses, not as binding determinations about your rights or interests.

14. Supervisory Authority

If you are located in a jurisdiction that provides for it, you have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your personal data is being processed in violation of applicable law. We encourage you to contact us first so we can address your concern directly.

15. Changes to This Policy and Contact

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or service structure. The updated version will be published on this page with a revised effective date where appropriate.

If you have questions about this Privacy Policy or our data practices, please contact support@aiflyn.com.