Back to home

Privacy Policy

Last updated October 28, 2026

1. Introduction and Scope

This Privacy Policy explains how the company identified in Section 13 (the "Company", "we", "us" or "our") processes personal data when you use Chatbotappai (the "Service").

This Privacy Policy explains how we collect, use, share, and protect personal data when you use our website, apps, and services (the "Service"). It applies to visitors and registered users. Terms not defined here have the meaning given in our Terms of Service.

2. Personal Data We Collect

  • Account data: such as your name, email, and login identifiers (including via Google sign-in, if you use it).
  • Your content: the prompts, messages, files, and images you submit, and the output generated in response.
  • Billing data: plan, transaction, and limited payment metadata. Full card numbers are handled by our payment provider, not stored by us.
  • Usage and device data: such as feature usage, log data, IP address, browser and device type, and approximate location derived from IP.
  • Cookies and similar technologies: used to keep you signed in and to understand and improve the Service (see Section 11).
  • Support data: messages you send us when you contact support.

3. How We Use Personal Data

  • to provide, operate, secure, and improve the Service;
  • to process your requests by sending them to the relevant AI model providers;
  • to manage accounts, subscriptions, billing, and trials;
  • to provide support and respond to your requests;
  • to detect, prevent, and address fraud, abuse, and security issues;
  • to comply with legal obligations and enforce our Terms.

4. Legal Bases

Where required by law, we rely on a lawful basis for each use, such as performing our contract with you, our legitimate interests in running and improving the Service, your consent, or a legal obligation.

5. Sharing and Recipients

We share personal data only as needed, with:

  • Authorised Reseller (Alvin AI Studio LLC, as shown on your receipt): merchant of record for website purchases. Receives only the data needed for payment, receipts, taxes, refunds, chargebacks and fraud prevention, and acts as an independent controller for those purposes only.

  • AI model providers, to deliver your requests (see “AI Models and Your Prompts” below);

  • Service providers and processors, such as hosting, database, payment, and analytics vendors acting on our instructions;

  • Advertising and measurement partners, such as Google and our conversion-tracking partners, on our sign-up pages and in the web app — identifiers, device data, and conversion events (never the content of your chats);

  • Our merchant of record and payment provider, to process subscriptions;

  • Authorities or others, where required by law or to protect rights, safety, and the integrity of the Service;

  • A successor, in connection with a merger, acquisition, or sale of assets.

We do not sell your personal data for money. Our use of advertising and measurement partners may count as "sharing" for cross-context behavioural advertising under some US state laws — see Section 9.

5.1 AI Models and Your Prompts

To answer your requests, we transmit your prompts and related inputs to the third-party model providers you choose (for example OpenAI, Anthropic, Google, xAI, or DeepSeek) through their official interfaces. Those providers process the data under their own terms and privacy policies. We do not use your prompts or content to train AI models, and we ask providers to handle your data in line with their business and privacy commitments.

6. International Transfers

Because the Company is in Türkiye, our merchant of record is in the United States, and our providers operate globally, your data may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) for these transfers.

7. Retention

We keep personal data for as long as your account is active or as needed to provide the Service, and afterwards only as required to meet legal, accounting, security, or dispute- resolution needs. You can delete your chats and account; some data may persist for a limited period in backups before it is removed.

8. Security

We use technical and organizational measures to protect personal data, including encryption in transit and at rest and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. These rights apply, for example, under the EU/UK GDPR and, for users in Türkiye, under the Personal Data Protection Law (KVKK, Law No. 6698). To exercise your rights, contact us using Section 13; we may need to verify your identity, and you can also complain to your local data protection authority.

If you live in California or another US state with a similar law, you can also opt out of the "sale" or "sharing" of your personal data for targeted advertising on our Do Not Sell or Share page or by enabling a Global Privacy Control (GPC) signal, which we honor automatically. We will not discriminate against you for exercising your rights.

10. Children

The Service is not directed to children under the age required by local law, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

11. Cookies and Tracking

We use strictly necessary cookies to run the Service (for example to keep you signed in) and, where permitted, cookies to measure and improve performance and to measure our advertising. In the EU/EEA, the United Kingdom, Switzerland, Türkiye, Canada and California, non-essential cookies are set only after you accept them in our cookie banner (CookieScript), and you can change your choice at any time through the cookie settings on the site. Elsewhere you can opt out of advertising cookies on our Do Not Sell or Share page or with a Global Privacy Control (GPC) signal. You can also control cookies through your browser settings.

12. Changes to This Policy

We may update this Policy from time to time and will post the updated version with a new date.

13. Controller and Contact

The controller of the personal data described in this Policy is Natives AI Yazılım Uygulama Bilgi Teknolojileri Reklamcılık Danışmanlık Sanayi ve Ticaret Anonim Şirketi, a company incorporated in Türkiye, İçerenköy Mah. Topçu İbrahim Sk. Quick Tower Sit. No: 8-10D, Ataşehir / İstanbul, Türkiye.

For privacy questions or to exercise your rights: support.chatbotappai.ai.