Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, that we collect automatically, and that we receive from third parties.

• Personal Information: When you create an account, we collect information such as your name, email address, and username. If you subscribe to a paid plan, our third-party payment processors will collect your payment information.
• User-Generated Content: We collect the content you create, upload, or generate while using our Services. This includes the personas you design, the workflows you build, the inputs you provide to simulations, and the text, audio, and images generated during those simulations ("User Content").
• Usage and Technical Data: We automatically collect data about your interactions with our Services. This includes your IP address, browser type, operating system, device information, pages visited, time spent on pages, and the actions you take within the platform.
• Device Identifiers: We collect anonymous device identifiers for analytics and diagnostics purposes. These identifiers help us understand app performance and usage patterns without identifying you personally.
• Biometric Authentication Data (Mobile App Only): If you enable biometric authentication (Face ID, Touch ID, or fingerprint unlock) in our mobile app, the biometric data itself is processed entirely on your device by your operating system. We never receive, store, or have access to your actual biometric data. We only receive a confirmation from your device that authentication was successful. Note: Biometric authentication is only available in the PersonifAI mobile app for iOS and Android. The web application does not use or collect any biometric data.
• Communications Data: We collect information you provide when you contact us for customer support, provide feedback, or otherwise communicate with us.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain Services: To create and manage your account, process subscriptions, and run the simulations and workflows you design.
• To Improve Our Platform: To understand how users interact with our Services, allowing us to enhance functionality, improve the user experience, and develop new features.
• For Research and Development: To train and refine our own proprietary AI models. [cite_start]The data used for this purpose is anonymized and aggregated to protect your privacy[cite: 154, 155].
• To Communicate with You: To send you important service-related announcements, security alerts, and support messages. We may also send marketing communications, which you can opt-out of at any time.
• For Security and Fraud Prevention: To monitor for and prevent malicious, deceptive, fraudulent, or illegal activity.
• To Comply with Legal Obligations: To adhere to applicable laws, regulations, and legal processes.

3. How We Share Your Information

We do not sell your personal data. We may share your information with the following parties under specific circumstances:

[cite_start]
• Third-Party AI Model Providers: Our platform orchestrates multiple best-in-class AI models[cite: 8, 49]. [cite_start]To run simulations, we send parts of your User Content (such as prompts and persona details) to these providers, which may include OpenAI, Google, Anthropic, and others[cite: 51]. [cite_start]We implement data minimization techniques to send only the data necessary for the task[cite: 252].
[cite_start]
• Service Providers: We use trusted third-party vendors for payment processing, cloud hosting (Microsoft Azure)[cite: 216], analytics, and other services necessary to operate our platform. These providers are bound by confidentiality obligations.
[cite_start]
• The Co-Creation Community: If you choose to share your personas or workflows in the public marketplace, other users will be able to view and use that content[cite: 126, 127].
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
• Legal Compliance and Protection: We may disclose your information if required by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect our rights or property, or ensure the safety of our users.

4. Data Security

We implement technical and organizational measures designed to protect your information from unauthorized access, use, or disclosure. This includes data encryption, access controls, and secure development practices. However, no internet transmission is ever completely secure, and we cannot guarantee the absolute security of your data.

5. Data Retention

We retain your personal information for as long as is necessary to provide the Services to you, or until you request its deletion. We may retain certain information for longer periods if required for legal, tax, or regulatory reasons, or for legitimate and lawful business purposes such as security and fraud prevention. Anonymized data may be kept for research and development purposes indefinitely.

Specific Retention Periods:

• Account Data: Retained until you delete your account or request deletion.
• Product Analytics: Anonymized usage analytics and app interaction data are retained for up to 12 months.
• Crash and Error Reports: Diagnostic data including crash logs and error reports are retained for up to 90 days.
• Billing Records: Payment and transaction records are retained for 7 years as required for tax and legal compliance.
• Support Communications: Customer support tickets and related correspondence are retained for 90 days after resolution.

6. Analytics and Diagnostics

To improve our Services, we use third-party analytics and diagnostics tools. You can opt out of these at any time through your account privacy settings.

• Product Analytics (PostHog): We collect anonymized usage data to understand how users interact with our app, including feature usage, navigation patterns, and session information. This data is retained for up to 12 months. No personal identifiers are linked to this data.
• Crash Reporting (Sentry): When errors occur, we collect diagnostic information including device type, operating system version, app version, and error stack traces to identify and fix issues. This data is retained for up to 90 days.

Your Control: Both analytics and crash reporting are opt-in features. You can enable or disable these at any time in the PersonifAI mobile app under Settings → Privacy & Security, or on the web at your Account Settings page.

7. Your Data Protection Rights

Depending on your location, you may have the following rights concerning your personal data:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure (Deletion): You can request that we delete your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You can request that we limit the processing of your personal data under specific circumstances.
• Right to Data Portability: You can request that we provide your data in a structured, machine-readable format.
• Right to Object: You can object to our processing of your personal data, particularly for marketing purposes.

To exercise any of these rights, please contact us at the email address provided below.

8. Account Deletion

You can delete your PersonifAI account at any time. Here's how to request deletion and what happens to your data:

How to Delete Your Account:

From the PersonifAI Mobile App:

1. Open the PersonifAI app and sign in to your account
2. Tap on Settings (gear icon)
3. Navigate to Privacy & Security
4. Scroll down and tap Delete Account
5. You will be directed to our secure web portal to complete the deletion
6. Type DELETE to confirm and submit your request

From the Web:

1. Sign in to your account at personifai.net
2. Go to Account Settings
3. Select the Privacy & Data tab
4. Click Delete Account
5. Type DELETE to confirm and submit your request

Via Email:

You can also request account deletion by emailing support@personifai.net from the email address associated with your account. Include "Account Deletion Request" in the subject line.

Important: Account deletion is permanent and cannot be undone. Before deleting, you may want to export your data using the "Export Data" feature in your Account Settings. Any active subscriptions will be cancelled without refund upon account deletion.

9. Data Deletion Without Account Deletion

PersonifAI allows you to request deletion of specific data while keeping your account active. This gives you more control over your personal information.

How to Request Data Deletion:

From the PersonifAI Mobile App:

1. Open the PersonifAI app and sign in to your account
2. Tap on Settings (gear icon)
3. Navigate to Privacy & Security
4. Use the individual delete options to remove specific content (personas, conversations, etc.)
5. Toggle off Analytics and Crash Reporting to stop future data collection

Via Email:

For broader data deletion requests while keeping your account, email support@personifai.net with the subject line "Data Deletion Request" and specify what data you would like deleted.

Processing Time: Data deletion requests are typically processed within 30 days. You will receive email confirmation once the deletion is complete.

10. Children's and Teen Privacy

PersonifAI is designed for users aged 13 and older. Our target audience includes teens (ages 13-17) and adults (18 and over).

Children Under 13: Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly.

Teen Users (Ages 13-17): If you are between 13 and 17 years old, please review this Privacy Policy with your parent or guardian before using our Services. We encourage parents and guardians to monitor their teen's online activities and to help enforce this Privacy Policy. Parents or guardians may contact us at support@personifai.net to request information about data collected from their teen, or to request deletion of that data.

Parental Rights: Parents or legal guardians of users under 18 may:

• Request access to their child's personal information
• Request correction of inaccurate data
• Request deletion of their child's account and data
• Withdraw consent for future data collection

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

Email: support@personifai.net