Privacy Policy
Zuletzt aktualisiert: · v3
Effective Date: August 14, 2026
This Privacy Policy ("Policy") is provided by Fanchaty AI LTD ("Company," "we," "us," or "our") to explain how we collect, use, process, and protect your personal data in connection with your use of the Fanchaty.ai website and its associated digital platforms ("Platform" or "Services").
This Policy has been prepared in compliance with applicable data protection laws, primarily the General Data Protection Regulation (EU) 2016/679 ("GDPR"). By using the Platform, you acknowledge that you have read and understood this Policy.
1. Data Controller
Under the GDPR, the entity determining the purposes and means of processing your personal data is the Data Controller: Company Name: Fanchaty AI LTD (Company Number: 16983888) Contact Email: [email protected]
In this Policy, the terms "user" and "you" refer to visitors and registered members of Fanchaty.ai.
2. Scope of Services
Fanchaty.ai is an online chat platform that allows you to interact with virtual and fictional characters using artificial intelligence algorithms. The Services include:
Chatting with AI,
Generation of content (text, image, audio, etc.),
Account/membership creation,
Features based on paid subscriptions and token usage.
During these processes, certain personal data of yours is processed.
3. Categories of Personal Data Processed
While using the Platform, the following categories of data may be processed:
Account Data:
Email address, username/nickname and profile preferences (optional).
IMPORTANT: The platform does NOT use passwords. You sign in using a one-time
verification code sent to your email address, or via Google Sign-In. For this
reason, no password of yours is stored in our systems.
Usage Data: Login/logout dates and times, IP address, derived city/country location, device information (mobile/desktop, browser type), token/limit balance, and subscription plan.
Content Data: Messages and prompts you enter during chats, AI outputs (responses, generated content), and preferred character settings.
Payment Data (if applicable): Full name related to the payment, transaction amount, currency, date and time, masked card details (e.g., last 4 digits), payment reference number, and technical data required by the payment provider.
Contact & Support Data: Contact forms, support tickets, email correspondence, descriptions of your requests, and screenshots (if any).
Marketing Preferences (Optional): Newsletter/announcement subscription status and marketing consent.
4. Purposes and Legal Bases for Processing
We process your personal data for the following purposes, relying on the legal bases set out in Article 6 of the GDPR:
4.1 Account Creation and Management
Purposes: Registering your membership, creating your account, managing passwords, logging in, and displaying token balances.
Legal Basis: Performance of a Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f)) for platform security.
4.2 Provision and Customization of Services
Purposes: Operating the AI chat feature, delivering a customized experience based on your character/content settings, and running the technical infrastructure.
Legal Basis: Performance of a Contract (Art. 6(1)(b)).
4.3 Execution of Payment Transactions
Purposes: Collecting subscription fees, processing transactions via payment gateways/banks, and maintaining billing/accounting records.
Legal Basis: Performance of a Contract (Art. 6(1)(b)) and Compliance with a Legal Obligation (Art. 6(1)(c)).
4.4 Support and Communication
Purposes: Receiving and responding to your inquiries, complaints, and resolving account/payment issues.
Legal Basis: Performance of a Contract (Art. 6(1)(b)) and Legitimate Interests (Art. 6(1)(f)) for customer satisfaction.
4.5 Security, Fraud Prevention, and Moderation
Purposes: Automated detection of rule violations or abuse, content moderation, and reporting to authorities if illegal acts are detected.
Legal Basis: Legal Obligation (Art. 6(1)(c)) and Legitimate Interests (Art. 6(1)(f)) to protect the platform and users.
Regarding Automated Processing: Content moderation is carried out by automated systems and may prevent one of your messages from being sent. These checks are not infallible. If you believe an automated decision was made in error, you may request human review by writing to [email protected]. Decisions with permanent consequences, such as account closure, are taken only following human review.
4.6 Service Improvement and AI Training
4.6 Service Improvement
Purposes: Debugging, performance and cost analysis, measuring service quality,
and developing new features.
Legal Basis: Legitimate Interests (Article 6(1)(f)).
NOTE: Your chat content is NOT used to train OUR OWN artificial intelligence
models. The platform uses pre-trained models provided by third-party model
providers.
4.7 Marketing and Announcements (Optional)
Purposes: Sending emails or notifications regarding new features, campaigns, and updates.
Legal Basis: Explicit Consent (Art. 6(1)(a)). You can opt out at any time (see Section 8).
5. Data Sharing and Recipients
We do not sell your personal data. We may share your data, strictly limited to the stated purposes, with:
Service Providers: Hosting/cloud providers, payment processors, email delivery services, and technical support/security providers.
Artificial Intelligence Service Providers: In order to generate chat responses,
your messages and character settings are transmitted to model providers
(including DeepSeek, Google and similar model providers accessed through
OpenRouter). For voice features, audio and speech-to-text data may be
transmitted to ElevenLabs; for image generation, your image prompts may be
transmitted to Novita; and for content moderation, message text may be
transmitted to Hotmate.
Some of these providers are located outside the European Economic Area,
including the United States of America and the People's Republic of China.
Such transfers are carried out subject to the safeguards described in Section 6. The transmission of your chat content to these providers is necessary for the operation of the service (Performance of a Contract, Article 6(1)(b)).
Professional Advisors: Lawyers, accountants, and auditors.
Authorities: Law enforcement or regulatory bodies when legally required or mandated by a court order.
Authorized Staff: Internal personnel who need access to perform their duties.
6. International Data Transfers
Our servers or some of our technology service providers may be located outside the European Economic Area (EEA). In such cases, your personal data will only be transferred internationally if appropriate safeguards are in place, such as:
An Adequacy Decision by the European Commission for the recipient country.
The implementation of Standard Contractual Clauses (SCCs) approved by the European Commission, alongside your explicit consent or other valid transfer mechanisms under GDPR Chapter V.
7. Data Retention
Your personal data is retained only for as long as necessary to fulfill the purposes outlined or as required by law:
Account Deletion and Recovery Process: When you delete your account, your access
is terminated immediately and the automatic renewal of your subscription, if any, is stopped. For 30 days following deletion, you may recover your account by signing in with the same email address; during this period your chat history and
any remaining membership term are preserved. At the end of the 30-day period,
access to the account using that email address is permanently closed.
After that period, data subject to the statutory retention obligations set out
below (in particular payment/invoicing records and security/moderation records)
will continue to be retained for the periods prescribed by applicable law. Your remaining data will be deleted or anonymised.
Account & Usage Data: Retained while your account is active, and for a reasonable period (e.g., 3–5 years) after closure for potential dispute resolution.
Payment & Billing Data: Retained for 5 to 10 years to comply with tax and commercial laws.
Marketing Data: Retained until you withdraw your consent, or deleted/anonymized after a prolonged period of inactivity. Once the retention period expires, data is securely deleted or anonymized.
8. Marketing Communications and Right to Object
If you have opted in to receive marketing emails:
You can withdraw your consent at any time by emailing [email protected] or clicking the "unsubscribe" link in our emails.
Note: Opting out of marketing does not affect essential service-related emails (e.g., password resets, billing notices).
9. Children’s Privacy
Fanchaty.ai is strictly not intended for individuals under the age of 18. If you are under 18, you must not use the Platform. Where we determine that an account has been created using a false declaration of age, access to that account will be blocked and the associated data will be deleted in accordance with applicable law, without prejudice to statutory
retention obligations.
10. Your Data Protection Rights (Under GDPR)
Depending on your location, particularly within the EEA or UK, you have the following rights regarding your personal data:
Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal exceptions.
Right to Restriction of Processing: Request that we temporarily halt processing your data.
Right to Data Portability: Receive your data in a structured, machine-readable format to transfer to another controller.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw previously given consent at any time.
Right to Lodge a Complaint: You have the right to file a complaint with your local Data Protection Authority (DPA) if you believe our processing violates the GDPR.
11. How to Exercise Your Rights
To submit a request regarding your privacy rights, please contact us at: 📩 [email protected] We will respond to your request within 30 days, as required by the GDPR. We may request additional information to verify your identity before fulfilling your request.
12. Data Security
We implement appropriate technical and organizational measures (such as access controls, encryption, logging, and firewalls) to protect your personal data against unauthorized access, loss, alteration, or unlawful disclosure. While no system is 100% secure, we continuously strive to apply reasonable and up-to-date security practices.
13. Changes to the Privacy Policy
We may update this Policy from time to time. The updated version will be:
Published on the Platform,
Reflected in the "Effective Date" at the top of this document. For significant material changes, we may notify you via email or an in-platform alert. Continued use of the Platform signifies your acknowledgment of the updated Policy.