AiSyster1. Introduction
AiSyster ("we", "our", or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our service.
This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
AiSyster LLC is the data controller for personal data collected through the service.
- Contact email: privacy@aisyster.com
- Data Protection Officer (DPO): dpo@aisyster.com
3. Data We Collect
3.1 Data you provide:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Identification and communication | Contract performance | |
| Name (optional) | Service personalization | Consent |
| Password (hashed) | Authentication | Contract performance |
| Conversations | Service delivery and personalization | Contract performance |
3.2 Automatically collected data:
- Access logs: Date/time of login, IP address (for security)
- Usage data: Number of messages, usage frequency
- Device data: Browser type, operating system
We recognize that conversations about faith, emotions, and personal difficulties may contain sensitive data. We treat this data with the highest level of protection and only with your explicit consent.
4. How We Use Your Data
We use your data to:
- Provide the service: Process conversations and generate personalized responses
- Contextual memory: Remember information you've shared for better support
- Improvements: Enhance the quality of responses and features
- Security: Detect and prevent fraud or misuse
- Communication: Send important updates about the service
5. Data Sharing
We do not sell your data. We may share data only with:
- AI providers: For conversation processing (as data processor)
- Stripe: For payment processing
- Infrastructure providers: Hosting and database services
- Authorities: When required by law or court order
All third parties are contractually obligated to protect your data in compliance with applicable laws.
6. Your Rights
You have the right to:
- Access: Know if we process your data and access it
- Rectification: Correct incomplete or inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured format
- Restriction: Request restriction of processing
- Objection: Object to processing of your data
- Withdraw consent: Withdraw consent at any time
To exercise your rights, email: privacy@aisyster.com
7. Data Security
We implement technical and organizational measures to protect your data:
- Encryption: Data in transit (HTTPS/TLS) and at rest
- Password hashing: Passwords are never stored in plain text (bcrypt)
- Access control: Only authorized personnel can access data
- Audit logs: Monitoring of access to sensitive data
- Secure backups: Encrypted backup copies
8. Data Retention
We retain your data while:
- Your account is active
- Necessary to comply with legal obligations
- Necessary to resolve disputes
After account deletion, data is removed within 30 days, except when retention is required by law.
9. International Transfers
Your data may be processed on servers outside your country (e.g., USA for the AI API). We ensure these transfers comply with applicable data protection laws through:
- Standard contractual clauses
- Adequate level of protection guarantees
10. Cookies and Similar Technologies
We use essential cookies to:
- Keep your session active
- Remember your preferences
- Ensure account security
We do not use tracking cookies for advertising.
11. Children's Privacy
AiSyster is intended for users 18 years or older. Users between 16 and 18 may use the service with parental consent.
12. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes by email or through the service. We recommend reviewing this page regularly.
13. Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe your rights have been violated.
14. Contact
For privacy questions:
- General email: contact@aisyster.com
- Privacy: privacy@aisyster.com
- DPO: dpo@aisyster.com