Privacy Policy

This Privacy Policy explains how Charmsy("we") collects, uses, and protects your information. Your conversations are sensitive, and we treat them that way.

Information we collect

• Account information - such as your email and a display handle, used to create and secure your account.
• Content you create - characters, scenarios, and the messages in your conversations.
• Usage and device data - such as feature usage, approximate region (for example inferred from your IP address), browser and device type, and technical logs needed to run and protect the Service.
• Payment data - processed by our payment providers, or by an app store (Apple or Google) if you subscribe inside a mobile app. We do not store full card numbers.

How we use your information

• To provide the Service, including generating character responses.
• To meter usage, manage Charms, subscriptions, and entitlements.
• To keep the platform safe, including moderation and abuse prevention.
• To improve the Service and develop new features.
• To communicate with you about the Service, your account, and changes to our terms.
• To comply with legal obligations and enforce our terms.

Your conversations are private by default

Conversations are private to your account by default. A conversation only becomes public if you explicitly choose to publish it, in which case it is moderated before it can be shared and indexed. You can unpublish at any time. We do not sell your conversations.

Improving our models

We may use de-identified or aggregated usage and content data to maintain, evaluate, and improve the quality and safety of the Service, including the AI models that power character responses. Private conversations are not made public through this process.

Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your settings, and understand how the Service is used. We may use privacy-respecting analytics to measure and improve the product. Most browsers let you control or decline cookies, though some features may not work properly without them.

Service providers

We share limited data with vetted processors that help us run the Service - for example, model providers that generate responses, our payment provider, and our hosting, database, and storage providers. They may only use the data to provide services to us. We may also disclose information where required by law, to protect the safety, rights, or property of users and the public, or in connection with a merger or sale of our business.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and afterward only as required to meet legal obligations, resolve disputes, and enforce our agreements. After that we delete or aggregate it.

Deleting your account

You can delete characters at any time, and you can request deletion of your account. Account deletion is permanent and cannot be undone. When you delete your account:

• Your access is permanently removed and the account cannot be recovered.
• Your personal data, conversations, pinned memories, and generated images are deleted, except where we must retain limited information for legal or safety reasons.
• For a character you published and that has an active audience, we may keep the character available so other users' experience is not broken; its creator is then shown as a deleted account. If you do not want this, unpublish or delete the character first.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Residents of the EEA and UK have rights under the GDPR; California residents have rights under the CCPA, including the right not to be discriminated against for exercising them. To make a request, contact us using the details below; we may need to verify your identity first.

International transfers

We operate globally and your information may be stored and processed in the United States and other countries whose data-protection laws may differ from those where you live. By using the Service you consent to this transfer.

Security

We use technical and organizational measures to protect your data, including encryption in transit and at rest, and we restrict access to conversation data to limited personnel for operational, safety, and legal purposes. No system is perfectly secure, so we cannot guarantee absolute security.

Third-party links

The Service may link to third-party sites we do not control. Their handling of your information is governed by their own policies, not this one.

Children

Charmsy is for adults (18+) only. We do not knowingly collect data from anyone under 18. If we learn that a minor has used the Service, we will close the account and delete the data. If you believe a minor has used the Service, contact us.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the date above.

Contact

Privacy questions or requests? Contact us at support@charmsy.io.