Privacy Policy
Last updated: 2026-07-07
This Privacy Policy explains what information [Company Legal Name] collects when you use GatifyAI (the "Service"), how we use it, and the choices you have. It applies whether you use the Service as a registered user or as a guest.
Information we collect
Account information: your email address, password (stored as a salted hash, never in plain text), and any profile details you provide. Content: the messages, prompts, and personas you create or send through the Service, including chat history saved to your account. Usage data: which features and models you use, request counts, and rate-limit status, used to enforce plan limits and improve reliability. Guest and device data: a fingerprint or cookie identifier used to enforce the free-message limit for users who have not yet registered. Payment data: if you subscribe to a paid plan, our payment processor handles your card details directly — we do not store full card numbers ourselves. Technical data: IP address, browser type, and log data collected automatically for security and diagnostics.
Cookies
We use a small number of cookies: one to remember your session when you are logged in, one to remember your language preference, and one to track guest usage against the free-message limit. We do not use third-party advertising cookies. You can block cookies in your browser, but some parts of the Service, such as staying logged in, will not work correctly without them.
How we use information
We use your information to operate and improve the Service, including: authenticating you and maintaining your session; routing your chat requests to the model you selected and returning the response; enforcing usage limits tied to your plan; displaying content you have chosen to publish to the community gallery; communicating with you about your account, security, or changes to our policies; and detecting abuse, fraud, or violations of our Acceptable Use Policy.
Sharing with model providers and processors
To generate a response, the content of your message is sent to the AI model provider you selected (which may be a third-party provider or a model we self-host). We choose providers that agree not to use your API traffic to train their own models where such an option is available, but you should assume that message content leaves our systems to be processed by the selected model. We also share data with service providers who help us run the Service, such as hosting and payment processing providers, under agreements that limit their use of your data to providing that service to us.
Data retention
We retain your account and chat history for as long as your account is active, so that your conversation history remains available to you. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we are required to keep it for legal, security, or accounting purposes. Guest identifiers used only to enforce the free-message limit are retained for a short period and are not linked to an account.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile and delete your account from within the Service, or contact us at [contact email] to exercise these rights.
Children's privacy
The Service is not directed to children, and we do not knowingly collect personal information from children under the age required by local law to consent to data processing. If you believe a child has provided us with personal information, contact us and we will delete it.
Security
We use technical and organizational measures, such as encryption in transit and hashed credentials, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
International transfers
Your information may be processed in countries other than your own, including where our hosting and model providers operate. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect data transferred internationally.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the date at the top of this page or by notifying you within the Service.
Contact
Questions about this Privacy Policy or requests about your data can be sent to [contact email].