Privacy Policy

1. What We Collect

• Account data — your email address (magic-link auth; we never have passwords). Used for identity, login, and receipts.
• Purchase history — products bought, amounts, timestamps. Used for your Library, support, and tax records.
• Ally configuration— your Ally's persona choices, settings, and provisioning status. Used to operate your Ally.
• Usage data — pages visited and basic analytics. Used to improve the Services.
• Support communications — emails and messages you send us.

We do notcollect passwords, payment card numbers (Stripe handles those), or the contents of your Ally's memory and workspace except as described in Section 4.

2. How We Use It

To provide the Services (accounts, checkout, delivery, your portal, your Ally); to communicate with you about your account and purchases; to meet legal and tax obligations; to prevent abuse. We do not sell your personal data. We do not use your data to train AI models.

3. Who Processes It (Sub-Processors)

• Supabase — database, authentication, file storage (account, purchases, library content)
• Stripe — payments and sales tax (email, purchase details, payment method)
• Hetzner — server hosting for Allies (Ally runtime data, on servers in Germany/Finland)
• Netlify — website hosting and serverless functions (request logs, form data)
• DeepSeek / OpenAI — AI inference for Allies (prompts sent by your Ally, under your own API key and your agreement with that provider)

Each processor is bound by its own data-protection terms; we share only what each needs.

4. Your Ally's Privacy

• Your Ally runs on a dedicated, single-tenant server. No other customer's Ally shares it.
• We access your Ally's memory, files, or conversations only: (a) at your request for support, (b) for essential maintenance and security, or (c) when required by law.
• When your Ally uses a third-party AI provider via your API key, your prompts travel to that provider under its privacy policy — not ours.

5. Retention and Deletion

• Account and purchase records are retained while your account is active, plus the period required for tax and legal records.
• On subscription cancellation, your Ally's server is decommissioned and its data destroyed within 30 days. Export before canceling if you want to keep anything.
• You may request deletion of your account and associated data at any time by contacting us. We confirm deletion within 30 days, except records we must retain by law.

6. Your Rights (GDPR / CCPA and Similar Laws)

Depending on your location, you may have rights to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. To exercise any of these, contact us at the address below. EU/UK residents may also lodge a complaint with their supervisory authority. We do not "sell" or "share" personal information as defined by the CCPA.

Legal basis (EEA/UK): contract performance, legitimate interest (security, improvement), and legal obligation (tax records). International transfers: we are US-based and use processors in the US and EU; by using the Services you consent to transfer of your data to these locations, protected by our processors' standard contractual safeguards.

7. Security

Encryption in transit (TLS) and at rest; row-level security on all database tables; no passwords stored; signed, short-lived URLs for paid content; dedicated infrastructure per Ally. No system is perfectly secure — we will notify affected users and authorities of breaches as required by law.

8. Children

The Services are not directed at anyone under 18. We do not knowingly collect data from minors.

9. Changes

We will post updates here and notify account holders by email for material changes.