Privacy Policy

1.1. This Policy applies to all information collected through our Service and any related services, sales, marketing, or events.

1.2. By using the Service, you consent to the collection, use, disclosure, and procedures this Policy describes. If you do not agree with our policies and practices, please do not use our Service.

1.3. This Policy applies to users in the United States, European Union, and other jurisdictions where we operate.

3.1. Service Provision: To provide, maintain, and improve our AI companion and image generation services.

3.2. Account Management: To create and manage your account, process payments, and provide customer support.

3.3. Content Generation: To generate personalized AI responses and images based on your interactions and preferences.

3.4. Safety and Security: To monitor for illegal or harmful content and ensure platform safety.

3.5. Analytics and Improvement: To analyze usage patterns and improve our services.

3.6. Legal Compliance: To comply with applicable laws and regulations.

3.7. Age Verification: To ensure users meet the minimum age requirement.

For users in the European Union, we process personal data based on the following legal bases:

4.1. Consent: For optional features, marketing communications, and certain data processing activities.

4.2. Contract Performance: To provide the services you've requested and fulfill our contractual obligations.

4.3. Legitimate Interests: For service improvement, security, and analytics, where not overridden by your privacy rights.

4.4. Legal Obligation: To comply with applicable laws and regulations.

6.1. Account Data: We retain account information for as long as your account is active or as needed to provide services.

6.2. Conversation Data: AI conversation logs are retained for up to 2 years to improve our services, unless you request deletion.

6.3. Generated Content: AI-generated images and content are retained for up to 1 year unless deleted by the user.

6.4. Payment Data: We do not store payment information. Transaction records may be retained according to legal requirements.

6.5. Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for service improvement.

6.6. Legal Holds: Data may be retained longer when required by law or for legal proceedings.

8.1. Encryption: We use industry-standard encryption to protect data in transit and at rest.

8.2. Access Controls: Access to personal data is restricted to authorized personnel only.

8.3. Authentication Security: User authentication is managed by Clerk, which provides secure login and account management.

8.4. Monitoring: We monitor our systems for security threats and unauthorized access.

8.5. Incident Response: We have procedures in place to respond to data breaches promptly.

9.1. Data Location: Your data may be processed and stored in various countries where our service providers operate.

9.2. Safeguards: We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses
• Adequacy decisions by relevant authorities
• Other approved transfer mechanisms

9.3. EU-US Transfers: For transfers from the EU to the US, we rely on approved transfer mechanisms and safeguards.

10.1. Cookie Usage: We use cookies and similar technologies to enhance your experience and analyze usage.

10.2. Cookie Types: We use essential, functional, analytics, and security cookies.

10.3. Cookie Management: You can manage your cookie preferences through your browser settings or our cookie preference center.

10.4. Detailed Information: For more information, see our Cookie Policy.

11.1. Age Verification: We require users to confirm they meet the minimum age requirement during registration.

11.2. Minor Data: If we discover we have collected information from a minor, we will delete it immediately.

11.3. Parental Notification: Parents who believe their child has provided information to us should contact us immediately.

12.1. Updates: We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

12.2. Notification: We will notify you of material changes through email or prominent notice on our website.

12.3. Effective Date: Changes become effective immediately upon posting unless otherwise specified.

12.4. Continued Use: Your continued use of the Service after changes constitutes acceptance of the updated policy.

13.1. Data Controller: GFAI is the data controller for the purposes of data protection laws.

13.2. Contact Details: For privacy-related inquiries, please contact:

• Email: [email protected]
• Support: [email protected]

13.3. Response Time: We aim to respond to privacy requests within 30 days.