Draft, pending lawyer review. Not yet in force.

Privacy Policy

Last updated: October 18, 2026 (draft)

Clever Frontier [COMPANY LEGAL NAME, IF DIFFERENT] (“we”) runs AIOAIA at [WEBSITE]. This policy explains what we collect, why, and your choices. It is written to meet major privacy laws, such as the EU and UK GDPR and California privacy law. [CONFIRM WITH LAWYER]

What we collect

• Account data: email address, display name, and your sign-in method (email link or Google).
• Chats: the messages you send and the answers you receive, with the mode and model used.
• Memory: short facts and preferences AIOAIA picks up from your chats or that you add yourself, stored with a numeric “embedding” so the right ones can be found later.
• Usage and receipts: for every AI request, the model, tokens, cost and an answer receipt (reason, references, models, credits); thumbs up/down ratings.
• Billing: plan, payment status and top-ups. Payments are processed by Paddle (our merchant of record, which also handles sales tax); we don't store full card numbers or e-wallet credentials.
• Technical data: sign-in sessions and error logs.

Why we use it

To answer your messages, remember context across AI models, choose the right model, enforce usage limits, itemize every credit in an answer receipt, bill you, prevent abuse, and meet legal obligations. We do not sell personal data and do not use your chats to train our own models.

Who we share it with

• AI providers: OpenAI, Anthropic, Google and xAI receive your message, any files you attach, your personal instructions, recent chat history and relevant memories to generate an answer. OpenAI also creates the embeddings used for memory search. Their data-use terms apply. [CONFIRM EACH PROVIDER'S API RETENTION TERMS]
• Hosting and database: Railway (app hosting) and Supabase (database and sign-in). [CONFIRM DATA REGIONS]
• Google, if you choose to sign in with Google.
• Payment provider: Paddle (our merchant of record, which also handles sales tax).
• Authorities, when legally required.

How long we keep it

Chats, memory and context: while your plan is active. If you cancel, they are deleted from our servers 30 days after the month you paid for ends (we email you the date; download your memory first from the Memory Vault or the Usage page); if you subscribe again after that, AIOAIA starts fresh. A renewal that is only waiting on a card retry doesn't count as cancelling. Backups are kept for 30 days, so deleted data leaves them within 30 more days. We keep data longer only when the law requires it, for example when a court or authority orders us to preserve it. Files you attach: 7 days, then removed (the chat keeps the file name); removed sooner when you delete the chat. Private chats: deleted 24 hours after your last message, and never added to memory. Shared links: anyone with a link can read that chat as it was when you shared it, until you stop sharing it or delete the chat; shared pages are hidden from search engines. Voice: when you speak a question, your browser turns speech into text using its own speech service (for example Google in Chrome or Apple in Safari); AIOAIA receives only the text. Answer receipts and billing records: while your account is open, and [PERIOD] after closing where tax or accounting law requires. Error logs: [RETENTION PERIOD].

Your rights and controls

• View, edit, delete and export your memory in the Memory Vault.
• View and download every answer receipt on your Usage page.
• Delete single chats from the chat list, or all your chats, memory and files at once on the Usage & settings page. To close your account, cancel your plan, or contact [CONTACT EMAIL].
• You may also complain to the National Privacy Commission (privacy.gov.ph).

Security

Encryption in transit, row-level access rules so each account sees only its own data, and server-only access to payment and usage controls.

Contact

[COMPANY LEGAL NAME], [ADDRESS], [CONTACT EMAIL]. Data protection officer: [NAME / EMAIL].