Privacy Policy for ai-girls.app

Welcome to ai-girls.app! This Privacy Policy outlines how DK Nordic SIA ("DK Nordic SIA", "we", "us", or "our") manages your information when you use our website, ai-girls.app, and any associated services (collectively, the "Services"). DK Nordic SIA is a company registered in Latvia, with its address at 26 - 18, Vesetas iela, LV-1013, Riga, Latvia. We are the Controller for the data processing activities described herein.

Our Services are designed as an online chat application that utilizes advanced artificial intelligence algorithms to create virtual and fictional characters, referred to as "AI Companions." Through the Services, you, as a user, can engage in conversations and exchange messages with these AI Companions. The Services may also incorporate other forms of media, including but not limited to images, videos, and voice notes. Certain functionalities of the Services may require you to register a user account or become a paid subscriber.

This Privacy Policy details the methods by which DK Nordic SIA collects, uses, discloses, and handles your Personal Data in connection with the Services. It also explains your rights under relevant data protection laws, including the European Union's General Data Protection Regulation 2016/679 and Directive 2002/58/EC (together, "EU GDPR"), the UK Data Protection Act 2018 and the Privacy and Electronic Communications, Regulations 2003 (together, "UK GDPR"), and the Federal Act on Data Protection 235.1 ("FADP") (collectively, "Applicable Data Protection Law").

By accessing or using our Services, you acknowledge that you have read and understood the terms of this Privacy Policy.

1. Key Definitions

Unless otherwise specified in this Privacy Policy or the GDPR, the following capitalized terms hold the meanings defined below:

• Content: Refers to the information you provide during registration or while using our Services. This includes your Personal Data, your inputs during conversations with AI Companions, and the AI Companions' responses.
• Consent: Your freely given, specific, informed, and unambiguous indication, through a statement or clear affirmative action, signifying agreement to the processing of Personal Data concerning you.
• Controller: The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For the Services, DK Nordic SIA acts as the Controller.
• Performance of our Services: Actions necessary for us to deliver our Services to you.
• Personal Data: Any information that relates to an identified or identifiable natural person ("Data Subject"). Examples include your email address, nickname, gender, and any content you submit through our Services.
• Processing: Any operation or set of operations performed on Personal Data or sets of Personal Data, whether automated or not. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
• Subscription: An agreement between DK Nordic SIA and you that enables you to access and utilize the Services.
• User," "you," and "your: Collectively refers to any individual who has visited or is actively using the Services.
• Visitor: Anyone browsing the Services without a valid Subscription.

2. How and Why We Process Your Information

We are dedicated to safeguarding your privacy. All processing of your Personal Data is conducted in accordance with the most relevant legal bases.

Purpose of Processing	Categories of Personal Data Involved	Legal Basis for Processing
Account Creation	Email address (mandatory), Encrypted password (mandatory), Nickname/screen name, User gender, First and last name (if provided or via third-party authentication), Creation date and time, Signup provider (e.g., Google, Discord, Email), Phone number (optional).	Consent; Necessity for the performance of a contract.
Account Management	Currency (based on detected country), Country and/or city (detected based on IP address and zipcode, if provided), Token balance (generated by us), Last account update date and time (generated by us), Current and last sign-in date and time (generated by us), Current and last sign-in IP (generated by us), Sign-in count (generated by us).	Our legitimate interest in managing your account and addressing your queries.
Provision of Services	User prompt voluntarily entered to generate Content, Content generated by AI Companions (as generated by us). Customization data for AI Companions or Service features (e.g., image action, body, clothes, interactive chat, voice call).	Necessity for the performance of a contract.
Support of Services	Data submitted via "Contact us" form and email, Device information and browser type (detected by us).	Our legitimate interest in addressing your queries and technical issues.
Subscription Payment Processing	Via Stripe: First and last name, Email address, Card brand, Credit card number, Payment transaction date and time, Type, Amount, Currency, BIN country, IP address, Recurring billing type, Response code (issuer).	Necessity for the performance of a contract.
Direct Marketing	Email address (mandatory registration field), First and last name, Account number, Website or traffic source URL, Data from affiliate marketing program questionnaire (if applicable).	Our legitimate interest in improving our Services (for similar products and services directly from us) or Consent (for third-party marketing).
Analytics (excluding third-party cookies)	Account number, Email address (mandatory registration field), User-provided answers to surveys.	Consent.
Safety and Moderation	Content of communications and/or reports, Account data, Flagged messages and actions taken.	Necessity to comply with legal obligations; Necessity for the performance of the Service agreement (in case of breach of our policies).
Legal & Accounting	Supporting data such as contact data, payment data, or credentials.	Necessity for compliance with legal obligations.
Defending Legal Rights	Supporting data such as contact data, payment data, or credentials.	Our legitimate interest to defend our rights.

Please be aware that if you do not provide certain Personal Data, we may be unable to deliver the full scope of our Services as per your Subscription. In such instances, we may need to cancel your Service, and we will inform you accordingly.

3. Marketing Communications

We may send you communications related to our Services, such as newsletters, alerts, and invitations to events or features that we believe might interest you. These communications may also include relevant commercial updates.

If you no longer wish to receive these marketing communications, you can easily opt-out by:

• Clicking the 'Unsubscribe' or subscription preferences link found in any direct marketing email you receive from us.
• Contacting us directly using the details provided in Section 11.

Opting out of marketing communications will not affect service-related messages, such as those concerning your account or Subscription.

4. No Third-Party Marketing Disclosure

We do not share any of your information with marketing companies or any other third parties for their direct marketing purposes without your explicit consent, unless legally required.

If we ever were to consider sharing your Personal Data with any entity outside of DK Nordic SIA for marketing purposes, we would obtain your express opt-in Consent beforehand. You can always adjust your marketing preferences through the Services or by using the opt-out links in our marketing communications.

5. How Your Information May Be Shared

DK Nordic SIA may share your information in the following circumstances:

• Service Providers: We engage trusted service providers to assist in delivering the Services. These include:
  • Payment service providers (using Stripe for all payments, which is based in the EU for European users).
  • Hosting service providers (based in the US).
  • Email marketing tools providers (based in the US).
  • Affiliate partner tools (based in the EU).
• Professional Advisors: As needed, we may share information with our professional advisors for legal, accounting, IT, or public relations support.
• Legal and Regulatory Authorities: We will disclose information when legally required by applicable laws and regulations, including in response to court orders or governmental requests.
• Our Employees: Access to your information is limited to our employees who require it to perform their job duties related to the Services.

We are committed to not disclosing, selling, trading, or otherwise transferring your Personal Data to any third parties without your explicit Consent, except as outlined in this Privacy Policy or when required by law.

In the event of a corporate restructuring, such as a merger, acquisition, or asset sale, your Personal Data may be transferred to the involved third parties. However, your data will remain subject to the terms of this Privacy Policy.

6. Data Retention Period

We retain your Personal Data for as long as your account is active or as necessary to fulfill the purposes for which it was collected, and to provide you with the Services, unless a longer retention period is mandated by law.

Upon account termination, we will retain your Personal Data for a subsequent period to address potential inquiries, meet legal obligations, or resolve disputes.

Retention periods may be adjusted based on business operational needs or regulatory requirements. Generally, we keep:

• Personal Data related to your account for a period of three to five years following your last use of the Services.
• Financial and transactional data for seven years from their issuance date, in accordance with accounting regulations.
• Marketing data until you withdraw your Consent or for two years after your last interaction with our marketing communications.

Our support team is available to assist with any account closure requests or to cease marketing communications.

7. Age Restriction

DK Nordic SIA does not offer Services to, nor knowingly collect Personal Data from, individuals under 18 years of age (or the equivalent minimum age in your jurisdiction). Our Services are exclusively intended for users who are at least 18 years old. Should we discover that we have inadvertently collected data from an individual under the applicable age, we will promptly delete such data and block the user's access.

8. External Links

The Services may contain links to third-party websites, plug-ins, or applications. Clicking on these links may allow third parties to collect or share information about you. Please note that we do not control these external websites and recommend reviewing their respective Privacy Policies before providing any information.

9. Your Rights Under GDPR

As a Data Subject, you have certain rights concerning your Personal Data under the GDPR.

9.1. Right to Access Your Personal Data

You have the right to request a copy of the Personal Data we hold about you, as per Article 15 GDPR. This includes information regarding:

• The purposes for which your data is processed.
• The categories of your Personal Data being processed.
• The recipients or categories of recipients to whom your Personal Data has been or will be disclosed, including those in third countries or international organizations.
• The anticipated period for which your Personal Data will be stored, or the criteria used to determine that period.
• The existence of your right to request rectification or erasure of Personal Data, or restriction of its processing.
• Your right to lodge a complaint with a supervisory authority.
• Where your Personal Data was not collected directly from you, any available information about its source.
• The existence of automated decision-making, including profiling.

9.2. Right to Rectification

You have the right to request the correction of any inaccurate Personal Data we hold about you without undue delay. This allows you to have incomplete or incorrect information updated, subject to verification.

9.3. Right to Erasure ("Right to Be Forgotten")

You can request the deletion of your Personal Data in circumstances where it is no longer necessary for the purposes for which it was collected, where you have withdrawn your Consent and no other legal basis applies, where the data has been unlawfully processed, or in response to a successful objection to processing.

However, we may not be obliged to erase Personal Data if:

• It is necessary for compliance with a legal obligation.
• It is required for the establishment, exercise, or defense of legal claims.
• It is necessary for the performance of a contract.

9.4. Right to Request Restriction of Processing

You may request that we suspend the processing of your Personal Data under specific conditions, such as when you dispute the accuracy of the data, when the processing is unlawful, or when you require the data to be retained for legal claims, even if we no longer need it.

We may continue to use your Personal Data if:

• You have provided your Consent.
• It is necessary to establish, exercise, or defend legal claims, or to protect the rights of another person.

9.5. Right to Data Portability

You have the right to receive your Personal Data, which you have provided to us, in a structured, commonly used, and machine-readable format. You may also request that we transmit this data directly to another Controller, where the processing is based on your Consent or the performance of a contract.

9.6. Right to Withdraw Your Consent

You have the right to withdraw your Consent at any time, free of charge. Withdrawing your Consent will not affect the lawfulness of any processing carried out based on your Consent before its withdrawal. Please note that if you withdraw your Consent, we may be unable to provide the Services to their full extent.

9.7. Right to Object to the Processing

You have the right to object to the processing of your Personal Data where the processing is based on our legitimate interests, if you believe that your fundamental rights and freedoms override those interests. Upon receiving an objection, we will assess whether our compelling legitimate grounds for processing outweigh your rights and freedoms.

9.8. Right to Object to Direct Marketing

You have the right to object to the use of your Personal Data for direct marketing purposes. You can request that we change the manner in which we contact you for marketing, or withdraw your Consent for direct marketing at any time, free of charge.

10. Safeguards for International Transfers

You have the right to request a copy of, or reference to, the safeguards under which your Personal Data is transferred outside of the EU, UK, or Switzerland, with any non-data protection related terms redacted.

11. Contact Us

For any questions, concerns, or complaints regarding this Privacy Policy or the processing of your Personal Data, we encourage you to first attempt to resolve the issue directly with us.

Our dedicated support team is available to assist you:

Email: support@ai-girls.app

Mailing Address: DK Nordic SIA 26 - 18, Vesetas iela, LV-1013, Riga, Latvia

We are committed to addressing your requests promptly and will make every reasonable effort to respond to all legitimate requests within one month. In complex cases, we will keep you informed of any potential delays. If you are not satisfied with our resolution, you also have the right to lodge a complaint with your local data protection supervisory authority.

12. Data Security

We have implemented robust and appropriate technical and organizational security measures to protect your Personal Data from accidental loss, unauthorized use or access, alteration, or unlawful disclosure.

13. Updates to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Should we make significant changes, we will notify you through other means (such as email) before the changes take effect. Your continued use of the Services following such updates indicates your acceptance of the revised Privacy Policy. It is your responsibility to inform us of any changes to your Personal Data to ensure its accuracy.