Privacy Policy

Information We Collect

We collect the following types of information to provide and improve our Service:

• Account Information: When you register, we collect your email address, username, and a password (stored securely as a hash). If you sign in via Google, we receive your email address and name from your Google profile.
• Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, and device information (browser type, operating system, IP address).
• Messages & Content: We collect and store the messages you send to your AI companion and any other content you create or upload through the Service in order to deliver and improve the conversational experience.
• Payment Information: If you subscribe to a paid tier, your payment details are processed securely by our third-party payment processor. We do not store full credit card numbers on our servers.

How We Use Information

We use the information we collect for the following purposes:

• To operate, maintain, and provide the features of the Service to you.
• To personalize your experience and improve the AI companion responses.
• To communicate with you about your account, including billing, updates, and support.
• To analyze usage patterns and improve the performance, reliability, and user experience of the Service.
• To detect, prevent, and address technical issues, fraud, or abuse.
• To comply with legal obligations and enforce our Terms of Service.

Data Sharing

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We engage trusted third-party companies to perform functions on our behalf, such as payment processing, cloud hosting, email delivery, and analytics. These providers have access to only the information necessary to perform their functions and are contractually obligated to protect your data.
• Legal Compliance: We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service of any change in ownership.

Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include encryption in transit, access controls, logging, and provider security controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Generated Content Storage

The Service may generate and store sensitive conversational, visual, audio, or video content. We apply the following controls and limitations:

• Private and public content: Private user and chat media is stored in access-controlled storage and delivered with expiring links. Content that you deliberately publish or submit for public listing may be publicly accessible.
• Automated processing: Hosting, storage, safety, and AI providers may automatically process content to deliver the Service, prevent abuse, and meet their legal obligations.
• AI providers: Provider handling and retention is governed by the applicable provider terms and our service configuration. Do not submit real-person intimate content or information you are not authorized to share.
• Deletion rights: You may permanently delete your conversation history and generated images through available account controls or a verified privacy request. Limited backups, security logs, and transaction records may remain for legally required retention periods.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except as necessary to comply with legal obligations, resolve disputes, or enforce our agreements. Chat histories and user content associated with a deleted account are permanently removed.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you.
• Correction: You can ask us to correct inaccurate or incomplete data.
• Deletion: You can request that we delete your personal information, subject to certain exceptions.
• Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Objection / Restriction: You can object to or request restriction of certain processing activities.

To exercise any of these rights, please contact us at privacy@oxmate-ai.com. We will respond to your request within 30 days.

Cookies

We use essential storage and cookies for authentication, security, language, and service preferences. When analytics is enabled, we may also use analytics storage to understand product usage; where required, this is subject to consent controls. You can configure your browser to block or alert you about cookies, but some parts of the Service may not function properly without essential storage.

Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible. If you believe we may have collected information from a child under 18, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you have provided one) or through a prominent notice on the Service prior to the change becoming effective. We encourage you to review this page periodically for the latest information on our privacy practices. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.