Privacy Policy

Who we are

achat.ai is run by [Company legal name], [registered address], which is responsible for your information (“we”, “us”). This policy covers the website, the iPhone and Android apps, and the emails we send. Using the service is also governed by our terms.

What we collect

• Your account — your email address, and your name and profile picture if you sign in with Google. Your plan and its status.
• What you put in — your chats, the files and photos you upload, the pictures and clips made for you, your projects with their instructions and the facts remembered for them, and the reminders you set.
• Voice — when you speak to the app, the recording is sent to be turned into text and is not kept; spoken replies are made from the answer’s text.
• Usage — which model answered each message, how much computing it used, and when. This is what fair use and our costs are measured on.
• Payments — card details go straight to our payment processor, Stripe; we never see or store the number. We keep a customer reference, the plan and the billing dates. We also keep a card fingerprint — a code Stripe gives us that identifies the card without revealing it — to allow one trial per card. We keep it after an account is deleted, so a deleted account cannot start a second trial on the same card.
• Ratings — a thumbs up or down, or asking another model, when you choose to give one.
• If you are not signed in — nothing about your question: what you type before signing in stays in your own browser tab until you have an account. When you ask for a sign-in code we keep a one-way hash of your IP address, so the number of attempts can be limited.

How we use it

• To answer you: your message, and the files and project context it needs, go to the model that answers it.
• To choose that model when you use Auto, and to improve how Auto chooses.
• To run your plan: billing, fair use, and keeping the service fast for everyone.
• To keep it safe: rate limits, abuse prevention and fixing faults.
• To email you: sign-in codes, reminders you asked for, and messages about your plan. When your trial starts we email a confirmation. Some trial accounts also get a reminder two days before the first charge.

We do not sell your information, we do not show advertising, and we do not use your content to build an advertising profile.

AI models and your messages

Answers are written by third-party AI models, reached through Vercel’s AI Gateway. Your message and the context it needs are sent to the provider of the model that answers. Each provider handles it under its own terms. [Confirm with counsel: each provider’s retention and training terms.]

When you use Auto, it reads your message to pick a model, and we keep a masked copy of that message to improve the choice. Our fair usage policy explains what is masked and how long that copy lasts.

Improving Otto

If you are on the 7-day trial, your conversations with Otto 1 may be used to improve Otto, our own model. You can switch this off at any time in Settings under “Help improve Otto”. Conversations on a paid plan are never used to improve Otto.

When a conversation qualifies, we keep a copy of your message and Otto’s answer with email addresses, phone numbers, card numbers and passwords masked. Our staff may read that copy, and may rewrite it in their own words, with no personal details, as an example of a good answer that Otto then follows. A copy nobody has used is deleted after 90 days, or within a day of you switching the setting off.

If you send us feedback or ask our support team for help, our staff may show what you wrote to Otto, with the same details masked, to work out how Otto should answer questions like it.

Automated quality review

To keep Auto choosing well, we use automated tools, including AI models, to review a sample of Auto conversations for quality. Personal details such as contact and payment information are masked first, nothing from a review is kept with your account attached, and what we learn is used only to improve how Auto works — never to improve Otto.

This applies to Auto conversations on every plan. Once you ask us to delete your account, your conversations are not reviewed.

When our staff can read a conversation

Our staff may open one of your conversations to investigate a problem with the app or a request you sent our support team. Only staff signed in to our staff console can do this, they can only read the conversation — never change, continue or delete it — and they must write down why before it opens.

Every time a conversation is opened we record who opened it, when, and the reason they gave. That record is kept after your account is deleted, so we can always show who looked and why. It never contains what the conversation said.

Who processes it for us

• Vercel — hosting, file storage, and the AI Gateway every model call goes through.
• Neon — the database your account, chats and settings are kept in.
• AI model providers — the companies whose models answer you, listed in the model picker in the app.
• Stripe — payments. [Add NMI here if card payments move to it.]
• Rasket — the emails we send you.
• Google — signing in with your Google account, if you choose it.

These companies may process information outside your country. [Transfer safeguards to be confirmed with counsel.]

Cookies and your device

We use only the cookie the service needs: the one that keeps you signed in. Your light or dark choice is kept in your own browser, and so is a question you typed before signing in, for that tab only. There are no advertising or analytics trackers. If you let the app send you notifications, we keep the token your phone gives us so that we can reach it.

How long we keep it

Your chats, files and projects stay until you delete them or your account. You can delete a chat, a file, a remembered fact or a reminder at any time. Server logs hold no message content and are kept for [log retention period]. A masked copy kept to improve Otto is deleted after 90 days unless our staff rewrote it as an example, and always with the chat it came from.

Deleting your account

You can ask to delete your account from Settings or from this page. You then have 7 days to change your mind; after that we erase your chats, files, projects, reminders and settings, and we cancel your subscription and delete your customer record at our payment processor.

Two things stay: the record that a payment was made, which we are required to keep, with your email address removed from it; and the card fingerprint described above, no longer linked to you, so the same card cannot start a second trial.

Your rights

Depending on where you live, you may have the right to see the information we hold about you, to correct it, to have it deleted, to receive a copy of it, and to object to how we use it. Write to us at the address below and we will answer within [response period]. [Supervisory authority and region-specific rights to be confirmed with counsel.]

Security

Everything travels encrypted. The most sensitive things we keep — your reminders, and anything a task read or wrote — are encrypted again inside the database. Sign-in codes are stored only as a one-way hash, are single-use and expire quickly.

Children

The service is not for anyone under [minimum age], and we do not knowingly collect information from them. If you think a child has made an account, tell us and we will delete it.

Changes to this policy

If we change this policy in a way that matters, we will tell you by email at least [notice period] before the change takes effect.

Contact

Questions about your privacy, or a request about your information: info@achat.ai. Post: [registered address].