Privacy Policy

1.1 Everty.ai is the data controller responsible for your personal data processed through the Service. For any privacy questions or to exercise your rights, contact us at support@everty.ai.

1.2 The Service is intended for adults (18+) only. We do not knowingly collect data from anyone under 18. See clause 11.

2.1 Information you provide directly:

• Account data — your email address and authentication credentials. If you sign in with Google, we receive your email address, basic profile information, and a unique identifier from Google (we do not receive your Google password).
• Profile / persona data — any display name, age, gender, physical-appearance description, avatar image, and free-text "about you" description you choose to provide. This information is optional and is used to personalise your conversations.
• Content you create — characters, universes, backstories, scenarios, key memories, and other creative content you author.
• Conversation content — the messages you send to and receive from AI characters, including any images or audio you share, and the derived memory data the Service generates from your conversations (summaries, mood, relationship state, extracted facts).
• Payment data — when you subscribe or buy credits, payment is processed by Stripe. We do not store your full card number; we retain a Stripe customer identifier and subscription status.
• Communications — messages you send us for support or feedback.

2.2 Information collected automatically:

• Usage data — message counts, feature usage, credit transactions, achievements, and interaction timestamps, used to enforce plan limits, power features, and improve the Service.
• Technical data — IP address, browser type, device information, and log data, used for security, abuse prevention, and diagnostics.
• Cookies and local storage — used to keep you signed in and to remember preferences such as your chosen language. See clause 12.
• Push notification tokens — if you enable notifications, a browser-provided subscription token so we can deliver proactive messages and re-engagement notices.

3.1 We use your personal data to:

• Provide, operate, and maintain the Service, including generating AI responses and powering memory, mood, and relationship features.
• Create and manage your account and authenticate you.
• Personalise your conversations using your profile and prior interactions.
• Process subscriptions, credit purchases, and creator payouts.
• Enforce usage limits, credit balances, and fair-use throttling.
• Detect, prevent, and respond to abuse, fraud, and security incidents.
• Operate safety features, including crisis detection that may surface support resources.
• Send you service, transactional, and (where you have opted in or as permitted by law) re-engagement communications.
• Comply with legal obligations and enforce our Terms.

4.1 To generate character responses, the content of your conversations — including your messages, relevant memory data, your persona description, and character definitions — is transmitted to third-party AI providers, currently Anthropic (Claude models) and Mistral (used for explicit/NSFW conversations). Text-to-speech audio is generated by ElevenLabs, and images are generated by fal.ai.

4.2 These providers process your content solely to return a response to us. We select providers that, under their business/API terms, do not use API-submitted content to train their models. Their processing is governed by their own terms and privacy policies.

4.3 We do not sell your conversations, and we do not use the content of your private conversations to train our own or third-party models.

5.1 Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies, we rely on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for (account, conversations, billing).
• Consent — for optional features such as push and email marketing notifications, and for processing associated with explicit (NSFW) content, which you may withdraw at any time.
• Legitimate interests — to secure the Service, prevent abuse and fraud, and improve our features, balanced against your rights.
• Legal obligation — to comply with applicable law, including tax and record-keeping requirements.

6.1 We do not sell your personal data. We share it only with service providers ("subprocessors") who process it on our behalf to operate the Service, under contractual data-protection obligations:

• Supabase — database, authentication, and file storage hosting.
• Vercel — application hosting and content delivery.
• Anthropic and Mistral — AI text generation.
• ElevenLabs — text-to-speech audio generation.
• fal.ai — image generation.
• Stripe — payment processing and creator payouts.
• Resend — transactional and notification email delivery.
• Google — optional sign-in (OAuth) authentication.

6.2 We may also disclose data where required by law, to enforce our Terms, to protect the rights, safety, or property of Everty.ai or others, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you).

7.1 Some of our providers are located outside the European Economic Area, including in the United States. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so that your data receives an equivalent level of protection.

8.1 We retain your personal data for as long as your account is active and as needed to provide the Service.

8.2 If you delete your account (Settings → Account → Delete Account), we delete your account data, profile, private characters, conversations, and associated memory data. Public characters you created are transferred to the platform administrator account rather than deleted, to preserve continuity for other users who have interacted with them, as described in our Terms.

8.3 Certain records may be retained for a limited period where required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes. Voice message audio is automatically deleted after a short retention window. Backups are cycled out on a rolling basis.

9.1 Depending on your location, you have rights over your personal data, including the rights to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") — you can delete your account at any time.
• Restrict or object to certain processing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

9.2 To exercise any of these rights, contact support@everty.ai. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

10.1 We implement technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security on our database. No system is completely secure; we cannot guarantee absolute security, but we work to protect your information and to notify you and the relevant authorities of a data breach where legally required.

11.1 The Service is strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it and terminate the account. If you believe a minor has provided us with personal data, contact support@everty.ai.

12.1 We use strictly necessary cookies and browser local storage to keep you signed in, secure your session, and remember preferences such as your selected language. We do not use third-party advertising cookies. Disabling essential cookies may prevent the Service from functioning correctly.

13.1 The Service uses automated processing to generate AI responses, infer conversational mood and memory, and detect potential safety crises or abuse. These features do not produce legal or similarly significant decisions about you without human involvement. Crisis-detection prompts are informational only and are not clinical advice.

14.1 We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via an in-app notice before the changes take effect. The "Effective date" above indicates when this Policy was last revised. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

For privacy questions or to exercise your rights:

• Privacy & support: support@everty.ai
• Website: everty.ai