Privacy Policy

1. Who We Are

AIOLGY ("we", "us", "our") is an AI-powered content generation service operated as an online platform accessible at aiolgy.net. For any privacy-related questions, contact us at privacy@aiolgy.net.

2. Data We Collect

We collect only what is necessary to provide the service:

• Account data: Your name, email address, and hashed password when you register.
• Usage data: Content types you select, prompts you enter, and generated outputs — stored so you can access your history.
• Technical data: IP address, browser type, and device type for security and rate-limiting purposes.
• Billing data: If you subscribe to a paid plan, payment processing is handled by PayPal. We do not store card details.

3. Legal Basis for Processing (GDPR)

• Contract performance: Processing your account data and usage data to deliver the service you signed up for.
• Legitimate interests: Security monitoring, fraud prevention, and service improvement.
• Consent: For optional marketing communications (you may opt out at any time).
• Legal obligation: Where required by applicable law.

4. How We Use Your Data

• Create and manage your account.
• Deliver AI-generated content based on your prompts.
• Store your generation history (accessible only to you).
• Send transactional emails (password resets, account verification).
• Enforce our rate limits and detect abuse.
• Comply with legal obligations.

5. Data Retention

We retain your account data for as long as your account is active. Generated content history is retained for 24 months. You may delete individual items or your entire account at any time from your dashboard. Upon account deletion we anonymise personal identifiers within 30 days.

6. Data Sharing

We do not sell your personal data. We share data only with:

• Groq (AI inference provider): Your prompts are sent to Groq's API to generate content. Groq processes this data under their own privacy policy.
• Turso (database hosting): Your data is stored in Turso's serverless database infrastructure.
• Vercel (hosting): Our application runs on Vercel's platform.
• PayPal (payments): For subscription billing only.
• Law enforcement: Where required by a valid legal order.

7. Your Rights

Under GDPR and equivalent laws you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate data (you can do this from your dashboard).
• Erasure ("right to be forgotten"): Request deletion of your account and associated data.
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Ask us to stop processing your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@aiolgy.net. We will respond within 30 days.

8. Cookies

We use only strictly necessary cookies. We do not use advertising or tracking cookies. Your authentication token is stored in localStorage (not a cookie) and is cleared when you sign out.

9. Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt with a cost factor of 12. Authentication tokens expire after 7 days. We implement rate limiting to protect against brute-force attacks. No system is completely secure — please use a strong, unique password.

10. International Transfers

Your data may be processed in the United States where our infrastructure providers are located. Where we transfer data outside the EEA, we rely on Standard Contractual Clauses or equivalent safeguards as approved by the European Commission.

11. Children's Privacy

AIOLGY is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy. If we make material changes, we will notify you by email or by a prominent notice in the app at least 14 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

13. Contact & Complaints

For privacy enquiries: privacy@aiolgy.net
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.