Privacy Policy

1. Introduction

ailovee.com ("we", "us", or "our") is operated by Individual Entrepreneur Dimitri Bahdanau, Identification Number: 345679580, with legal address: Georgia, Batumi, Z. Gamsakhurdia/Chavchavadze St., N 49/4, Apt. N17. We are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using our Service, you consent to the practices described in this Policy.

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, and password (stored as a secure hash)
• Payment data: Transactions are processed by PayPal or NOWPayments; we do not store card details, PayPal credentials, or crypto wallet keys. We record transaction IDs and amounts for accounting purposes.
• Content: Prompts you submit for image and video generation
• Photos and images: Photos you send to a character in chat, upload as a reference for image generation, or upload as a reference for generating a character avatar. These files may contain your likeness or other identifiable people.
• Eligibility confirmation: Information needed to confirm that you meet applicable access requirements

2.2 Information Collected Automatically

• Session tokens (stored in HttpOnly cookies)
• Usage data: pages visited, features used, generation history
• Technical data: browser type, device type, IP address, language preference

3. How We Use Your Information

• To provide and maintain the Service
• To process payments and manage your credit balance
• To process uploaded photos and images, including analysing chat photos, using reference images for generation, and creating character avatar options
• To create a private thumbnail and a limited visual description of a chat photo so that the character can respond to it
• To send transactional emails (email verification, password reset)
• To improve our AI models and Service quality
• To detect and prevent fraud and abuse
• To comply with legal obligations
• To respond to customer support requests

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your data under the following legal bases:

• Contract: Processing necessary to provide the Service you signed up for
• Legitimate interests: Fraud prevention, security, Service improvement
• Legal obligation: Compliance with applicable laws
• Consent: Where you have explicitly agreed (e.g., marketing communications)

5. Data Sharing

We do not sell your personal data. We share data only with:

• PayPal: To process payments (governed by PayPal's Privacy Policy)
• NOWPayments: To process cryptocurrency payments and related transaction details (see NOWPayments' Privacy Policy)
• Runware.ai: Prompts, reference images, avatar reference images, and limited visual descriptions may be sent to process image/video generation or image analysis (governed by Runware's Privacy Policy)
• Resend: Your email address and necessary account information may be processed to deliver transactional emails such as verification and password-reset messages (governed by Resend's Privacy Policy)
• Google Analytics: Limited usage and conversion information may be processed to understand site usage and measure sign-up, purchase, and generation events (governed by Google's Privacy Policy)
• Infrastructure providers: Hosting and database services that process data on our behalf under data processing agreements
• Law enforcement: When required by law or to protect our rights

6. Data Retention

You can permanently delete your account and associated AILOVEE data from Account Settings. To prevent the same email from being used to create another account and claim signup credits, we permanently retain a keyed HMAC of the email address after deletion, not the address itself. If the account claimed signup credits, we may also retain a one-way hash of the browser token, detached from the account, to enforce the one-time signup-credit limit.

We retain your account data for as long as your account is active. For photos sent in chat, the original uploaded file is deleted after server-side processing; a small private thumbnail and a limited derived visual description may remain with the chat until the related data is deleted or the account is removed. Reference photos uploaded for image generation or character-avatar generation may be retained in access-controlled storage for as long as needed to complete processing, maintain the related generation history, protect the Service, or comply with legal obligations. Generated images and videos may be stored temporarily and subject to deletion after a defined period. You may request deletion of your account and associated data at any time by contacting us. Some data may be retained for legal and accounting purposes.

7. Cookies

We use cookies and similar technologies for:

• Session cookies: HttpOnly secure cookies to maintain your login session (strictly necessary)
• Preference cookies: To remember your language and display preferences
• Free-offer limit cookie: A first-party HttpOnly browser identifier that shares free avatar, chat-photo, and bot-message limits across accounts using the same browser. It may be stored for up to five years; clearing cookies or using a separate browser profile may prevent us from recognizing the same browser.

Google Analytics 4, Yandex Metrika, Meta Pixel, and Meta server events operate regardless of your cookie choice. Meta receives page views and events for guest-cabinet visits, free-avatar generation, registration progress, character creation, eligible bonus-credit use, pricing views, and checkout. Email verification triggers a separate CompleteRegistration event, while Purchase is sent only after a purchase is confirmed. Events may include your email address and account or visitor ID in hashed form, your IP address, browser user-agent, Meta attribution cookies (if available), and the page URL. If Meta temporarily cannot accept an event, its delivery payload may be held in a server-side retry queue for up to six days, then removed after delivery or when retries expire; a minimal delivery-status record may remain for up to 90 days. You may also disable cookies in your browser, but blocking strictly necessary cookies may prevent you from using authenticated features of the Service.

Regardless of your cookie choice, we record a random first-party visitor ID and a limited set of funnel events on our own server to measure guest-avatar use, account registration, and progress toward checkout. When a visitor registers, this ID can be linked to account events. These records are not sent to Google Analytics or Yandex Metrika; qualifying funnel events are sent to Meta. We also record the first available non-direct UTM source and medium, plus the referring site's hostname when available. We do not store the full referring URL or ad click IDs for this report. Data sent to Google Analytics is governed by Google's Privacy Policy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Rectification: Correct inaccurate data in your account settings
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request restriction of processing in certain circumstances

These rights may include information about uploaded photos and derived descriptions associated with your account. To exercise these rights, please contact us at info@ailovee.com. We will respond within 30 days.

9. Security

We implement industry-standard security measures including: encrypted password storage (scrypt hashing), HttpOnly session cookies, HTTPS encryption in transit, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to children. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will delete it promptly.

11. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws, including through the use of standard contractual clauses where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new Policy on this page with an updated date. Your continued use of the Service after changes constitutes your acceptance of the revised Policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact the data controller at info@ailovee.com or write to Individual Entrepreneur Dimitri Bahdanau, Identification Number: 345679580, legal address: Georgia, Batumi, Z. Gamsakhurdia/Chavchavadze St., N 49/4, Apt. N17. For EU residents, if you believe we have violated your privacy rights, you have the right to lodge a complaint with your local data protection authority.