Privacy Policy for Aniflow AI

This policy explains, in plain language, what Aniflow AI collects when you use aniflows.com, why we hold it, how long we keep it and what you can ask us to do with it.

The full terms

1. Who we are. Aniflow AI operates the companion chat service at aniflows.com. Where this policy says we, us or Aniflow AI, it means that operator.
2. Scope. This policy covers the website, the chat interface, account management and any support conversation you have with us. It does not cover third-party sites you reach through an external link.
3. Age requirement. The service is for adults aged 18 or over. We do not knowingly collect information from anyone under that age, and any account we identify as underage is closed and its data erased.
4. Account information. When you register we collect an email address and a password hash. Providing a display name is optional and can be a nickname.
5. Chat content. Messages you send to a companion, and the replies generated for you, are stored so the conversation can continue over time. Memory is the core of the product and it cannot function without this.
6. Preference data. Settings such as tone, pace, language and chosen companion are stored against your account so they persist between sessions.
7. Payment information. Card details are handled by our payment processor and never reach our servers. We keep only the plan you are on, the currency, the renewal date and a transaction reference.
8. Technical data. We log IP address, browser type, device type, referring page and timestamps. This is used for security, fraud prevention and troubleshooting.
9. Cookies. We use strictly necessary cookies to keep you signed in and to protect the form endpoints. Analytics cookies are optional and are only set after you accept them.
10. Analytics. Aggregated usage statistics tell us which pages load slowly and where people get stuck. Reports are read at the level of totals, not individuals.
11. Legal bases. We process data to perform our contract with you, to meet legal obligations, on the basis of your consent for optional cookies and marketing, and for our legitimate interest in keeping the service safe.
12. Why we process chats. Chat data is used to deliver the conversation, to maintain continuity, to enforce our safety rules and to investigate reported abuse. It is not sold.
13. Model training. We do not sell your conversations and we do not use identifiable chat content to train third-party models without your explicit, separate opt-in.
14. Service providers. We rely on hosting, storage, payment and email providers. Each is bound by a written agreement limiting them to processing data on our instructions.
15. International transfers. Data may be processed in countries outside your own. Where that happens we rely on recognised safeguards such as standard contractual clauses.
16. Retention of chats. Conversation history is kept while your account is open. Deleting a thread removes it from your account immediately and from backups within thirty days.
17. Retention of records. Billing and tax records are kept for the period required by law, typically six years, even after an account is closed.
18. Security measures. Traffic is encrypted in transit, data is encrypted at rest, access is restricted to staff who need it, and administrative access is logged and reviewed.
19. Breach notification. If a breach is likely to affect your rights we will notify the relevant supervisory authority and, where required, you directly and without undue delay.
20. Access and portability. You may request a copy of the personal data we hold about you in a portable format. We respond within thirty days.
21. Correction. If information about you is wrong you can correct it in your settings or ask us to do it for you.
22. Erasure. You may delete individual conversations, your entire history, or your whole account. Account deletion is permanent and cannot be reversed.
23. Objection and restriction. You may object to processing based on legitimate interests, and ask us to restrict processing while a dispute is being resolved.
24. Withdrawing consent. Where processing rests on consent you can withdraw it at any time. Withdrawal does not affect processing carried out before then.
25. Marketing choices. Promotional email is opt-in and every message contains a one-click unsubscribe link. Service and billing notices are not marketing and continue while your account exists.
26. Do not track. We honour browser-level signals where they are supported and do not set optional cookies when such a signal is present.
27. Children's content. Any attempt to direct a companion towards content involving minors results in immediate termination and, where the law requires it, a report to the authorities.
28. Third-party links. Pages we link to have their own policies. Read them before sharing anything on those sites.
29. Automated processing. Companion replies are produced automatically. No automated decision with a legal or similarly significant effect on you is made without human review.
30. Complaints. If you are unhappy with how we handled your data you may complain to your local data protection authority. We would appreciate the chance to fix it first.
31. Changes to this policy. Material changes are announced in the product at least fourteen days before they take effect, and the date at the top of this page is updated.
32. Contact. Data protection requests can be sent through the support channel in your Aniflow AI account and are handled by a named person, not an automated queue.

Getting in touch

If anything here is unclear, or you want a copy of your data, write to the support address inside your Aniflow AI account and a person will answer.