Privacy Policy

This Privacy Policy explains how Chatbotappai ("we", "us", "our") collects, uses, shares, and protects personal data when you use our website, apps, and services (the "Service"). It applies to visitors and registered users. Terms not defined here have the meaning given in our Terms of Service.

1. Who is responsible for your data

The Service is operated by our technical provider, NATIVES AI YAZILIM UYGULAMA BİLGİ TEKNOLOJİLERİ REKLAMCILIK DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ (İstanbul, Türkiye), which acts as the data controller for the Service. Subscription payments are handled by our merchant of record, Alvin AI Studio LLC (New York, United States), together with our payment provider. Contact details are in section 12.

2. Data we collect

• Account data: such as your name, email, and login identifiers (including via Google sign-in, if you use it).
• Your content: the prompts, messages, files, and images you submit, and the output generated in response.
• Billing data: plan, transaction, and limited payment metadata. Full card numbers are handled by our payment provider, not stored by us.
• Usage and device data: such as feature usage, log data, IP address, browser and device type, and approximate location derived from IP.
• Cookies and similar technologies: used to keep you signed in and to understand and improve the Service (see section 6).
• Support data: messages you send us when you contact support.

3. How we use your data

• to provide, operate, secure, and improve the Service;
• to process your requests by sending them to the relevant AI model providers;
• to manage accounts, subscriptions, billing, and trials;
• to provide support and respond to your requests;
• to detect, prevent, and address fraud, abuse, and security issues;
• to comply with legal obligations and enforce our Terms.

Where required by law, we rely on a lawful basis for each use, such as performing our contract with you, our legitimate interests in running and improving the Service, your consent, or a legal obligation.

4. AI models and your prompts

To answer your requests, we transmit your prompts and related inputs to the third-party model providers you choose (for example OpenAI, Anthropic, Google, xAI, or DeepSeek) through their official interfaces. Those providers process the data under their own terms and privacy policies. We do not use your prompts or content to train AI models, and we ask providers to handle your data in line with their business and privacy commitments.

5. How we share data

We share personal data only as needed, with:

• AI model providers, to deliver your requests (section 4);
• Service providers and processors, such as hosting, database, payment, and analytics vendors acting on our instructions;
• Our merchant of record and payment provider, to process subscriptions;
• Authorities or others, where required by law or to protect rights, safety, and the integrity of the Service;
• A successor, in connection with a merger, acquisition, or sale of assets.

We do not sell your personal data.

6. Cookies

We use strictly necessary cookies to run the Service (for example to keep you signed in) and, where permitted, cookies to measure and improve performance. You can control non-essential cookies through your browser settings or any consent controls we provide.

7. Data retention

We keep personal data for as long as your account is active or as needed to provide the Service, and afterwards only as required to meet legal, accounting, security, or dispute- resolution needs. You can delete your chats and account; some data may persist for a limited period in backups before it is removed.

8. Security

We use technical and organizational measures to protect personal data, including encryption in transit and at rest and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International transfers

Because our technical provider is in Türkiye, our merchant of record is in the United States, and our providers operate globally, your data may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. These rights apply, for example, under the EU/UK GDPR and, for users in Türkiye, under the Personal Data Protection Law (KVKK, Law No. 6698). To exercise your rights, contact us using section 12; we may need to verify your identity, and you can also complain to your local data protection authority.

11. Children

The Service is not directed to children under the age required by local law, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

12. Changes and contact

We may update this Policy from time to time and will post the updated version with a new date. For privacy questions or to exercise your rights, reach us through our support center. Company details:

Data controller / Technical Provider:
NATIVES AI YAZILIM UYGULAMA BİLGİ TEKNOLOJİLERİ REKLAMCILIK DANIŞMANLIK SANAYİ VE TİCARET ANONİM ŞİRKETİ
İçerenköy Mah., Topçu İbrahim Sk., Quick Tower No: 8-10D, Ataşehir / İstanbul, Türkiye

Merchant of Record (payments):
Alvin AI Studio LLC
447 Broadway, 2nd Floor, Suite 3007, New York, NY 10013, United States