Privacy Policy

1. Information We Collect

We prioritize privacy and minimize data collection to only what is strictly necessary to operate the Platform:

• Account Information: Email address, public username, and password hash (encrypted via bcrypt). When authenticating via Google OAuth, we receive your verified Google email address and public profile identifier.
• Transaction Metadata: Billing records, credit balances, and subscription statuses. We do not store credit card numbers or private crypto wallet keys. All payment transactions are processed offloaded through secure cryptocurrency gateways (NOWPayments).
• Technical Telemetry: Anonymized IP addresses, browser User-Agent headers, and request timestamps strictly for sliding-window rate limiting, DDoS mitigation, and server diagnostics.

2. How We Use & Protect Your Information

Collected data is used exclusively to:

• Authenticate your account session and maintain role-based access control;
• Calculate real-time AI credit balances and enforce daily subscription quotas;
• Prevent fraud, abusive automated traffic, and unauthorized API exploitation.

WE NEVER SELL, RENT, OR MONETIZE YOUR PERSONAL DATA TO ADVERTISERS OR THIRD-PARTY DATA BROKERS.

3. AI Interactions & LLM Data Processing

When querying the AI Coach, message text is transmitted to our high-performance language model inference API (e.g., DeepSeek) via stateless encrypted HTTPS. Chats are saved to your personal history for reference within the session and can be deleted upon account termination.

4. Data Retention and Account Deletion

You have full control over your personal data under applicable GDPR and CCPA regulations. To request permanent deletion of your profile, history, and associated API credentials, submit a ticket in the platform or contact @PavelUudiseSupport.