Privacy Policy

1. Information We Collect

We collect the following categories of information when you use the Service:

• Account information. When you sign up through our authentication provider (Clerk), we receive and store your name, email address, and avatar image, along with an account identifier. If you sign in with a third-party provider (for example, Google), we receive the profile information that provider shares. If you set up an optional backup password for our fallback sign-in system, we store it only as a secure cryptographic hash, never in plain text.
• Profile information. Optional details you add to your profile, such as a bio, location, website link, custom status, and your presence status (online, away, offline).
• Content you create. Your conversations and messages (including text, images you attach, voice recordings you submit for transcription and their transcripts), AI memories saved for you, characters you create (names, descriptions, greetings, system prompts, avatars), tags, message templates, and personas.
• Usage and analytics data. Records of how you use AI features, including per-request token counts and estimated costs, the models and personalities you use, and feature activity such as character views, likes, and usage counts.
• Payment information. Payments are processed by Stripe. We store your Stripe customer and subscription identifiers, your plan, and your billing period status. We never receive or store your full card number.
• Device and log data. Information your browser sends automatically, such as IP address, browser type, operating system, and the date and time of requests, used for security, rate limiting, and troubleshooting.

2. How We Use Information

We use the information we collect to:

• Provide and operate the Service, including delivering AI responses, syncing your account, and powering real-time messaging and presence features.
• Process subscription payments, creator tips, and creator subscriptions.
• Enforce usage limits (such as monthly AI message limits on the free plan) and track token usage for billing transparency.
• Keep the Service safe, including automated content moderation, rate limiting, user blocking, and handling content reports.
• Send transactional emails, such as welcome messages and account-deletion notices.
• Monitor errors and performance so we can fix problems.
• Comply with legal obligations and protect our rights, users, and the public.

We do not sell your personal information.

3. AI Processing

AI conversations are central to the Service. When you chat with an AI character, your messages, relevant conversation history, character prompts, and saved AI memories are sent to Anthropic (Claude models) to generate responses. Depending on the features you use, content may also be sent to OpenAI: voice recordings for transcription, image generation prompts, and message text for automated content moderation. These providers process your content to provide the requested functionality. Please avoid including sensitive personal information in conversations that you do not want processed by AI systems.

4. Service Providers

We share information with the service providers below only as needed to operate the Service:

• Clerk — authentication and account management
• Stripe — payment processing, subscriptions, tips
• Anthropic — AI conversation responses (Claude)
• OpenAI — voice transcription, image generation, and content moderation
• Postmark — transactional email delivery
• Cloudinary — image hosting and processing
• Pusher — real-time messaging, typing indicators, and presence
• Sentry — error monitoring
• Vercel — application hosting
• Neon — Postgres database hosting

5. Other Sharing

Beyond the providers above, we may share information in these situations:

• Content you choose to share. Characters you mark as public are visible to other users. Conversations you share via a share link or invite are visible to anyone with access under the permissions you set.
• Legal requirements. If required by law, or where we believe in good faith that disclosure is necessary to comply with legal process, enforce our terms, prevent fraud or abuse, or protect the safety of any person.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

6. Data Retention and Deletion

We keep your information for as long as your account is active. You can manage retention yourself in several ways:

• Delete individual messages or entire conversations at any time.
• Enable auto-delete in settings to automatically remove conversations older than a retention period you choose (from 7 to 365 days), with options to include archived conversations or exclude tagged ones.
• Request account deletion from your account settings. Deletion takes effect after a 30-day grace period, during which you can cancel the request and keep your account. After the grace period, your account data is deleted or anonymized.

7. Your Rights

Depending on where you live, you may have legal rights regarding your personal information, including under the GDPR. Regardless of location, we offer everyone the ability to:

• Access and correct your information through your profile and account settings.
• Export your conversations in JSON, Markdown, or plain-text format, and export characters you created as portable character card files.
• Delete your account as described in Section 6, including the right to cancel a pending deletion during the 30-day grace period.
• Control communications through notification preferences in your settings.

To exercise any other rights, or if you need help, contact us at support@lscaturchio.xyz. We may need to verify your identity before acting on a request.

8. Cookies

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in, securing requests against cross-site request forgery, and remembering preferences like your theme. We do not use third-party advertising cookies. You can control cookies through your browser settings, but blocking essential cookies may prevent you from signing in or using parts of the Service.

9. Security

We use commercially reasonable technical and organizational measures to protect your information, including encryption in transit, hashed credentials, request validation, rate limiting, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password and keep your sign-in credentials confidential.

10. Children and Age Requirements

The Service is not directed to children under 13, and you must be at least 13 years old (or older where required by local law) to use it. Content marked as mature (NSFW) is restricted to users who are at least 18 years old and who have explicitly confirmed their age and enabled mature content in their safety settings. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us at support@lscaturchio.xyz and we will investigate and delete it as appropriate.

11. International Data Transfers

We and our service providers process data in the United States and other countries that may have different data-protection laws than your country. By using the Service, you understand that your information may be transferred to and processed in those countries. Where required, we rely on appropriate safeguards for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and revise the "Last updated" date above. If the changes are material, we will provide additional notice, such as by email or an in-app notice. Your continued use of the Service after changes take effect means you accept the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us atsupport@lscaturchio.xyz.