logo Essay

Privacy Policy

1. Data Collection & Processing

1.1 Types of Data Collected

We collect:

  • Account Information: Email, hashed password during registration
  • Payment Details: Tokenized card data via PCI-DSS compliant processors
  • Content Data: Input prompts & AI-generated outputs
  • Technical Logs: IP address, device fingerprint, API request patterns

1.2 Purpose of Processing

Your data is used to:

  • Provide core AI generation services
  • Prevent subscription plan abuse (e.g. multiple accounts)
  • Improve model accuracy through anonymized analysis
  • Comply with tax/anti-fraud regulations

2. Data Sharing & Transfers

2.1 Third-Party Partners

Essential service providers include:

  • Payment: Stripe/Creem (transaction processing)
  • Analytics: PostHog (usage pattern monitoring)

We may disclose data when legally required:

  • Valid court orders/subpoenas
  • Government regulatory investigations

3. Account Security & Monitoring

3.1 User Responsibilities

  • Prohibited activities:
    ▶ Creating multiple accounts to bypass usage limits
    ▶ Using bots/scripts for bulk content generation

3.2 System Safeguards

We implement:

  • Realtime anomaly detection (login locations/device changes)
  • Rate limiting:
    • Free Tier: 10 generations/hour
    • Pro Tier: 50 generations/hour (soft limit)

4. AI Content Governance

4.1 User Accountability

  • You must verify legal compliance of AI-generated content
  • Prohibited inputs:
    ▶ Copyrighted materials without authorization
    ▶ Prompts violating ethical guidelines

5. Liability Limitations

5.1 Service Availability

  • No SLA guarantee for free tier users
  • Scheduled maintenance may cause downtime

5.2 Content Disclaimer

We are not liable for:

  • Damages from reliance on AI-generated content
  • Legal consequences of improper content usage
  • Third-party link accuracy/security

6. Policy Updates & Compliance

6.1 Notification Methods

Material changes will be communicated via:

  • In-app notifications (14 days prior)
  • Email to active subscribers

6.2 User Rights

You may:

  • Request data access/deletion via DSAR form
  • Opt-out of marketing communications
  • Appeal account suspensions within 30 days