Privacy policy

1. Data we collect

• Account data: name, email address, encrypted password and, if you use Google, your identifier and profile photo.
• Usage data: conversations, messages, model used, tokens and credits consumed.
• Payment data: orders, amount, method and status. Card or wallet data is handled by PayPal, Binance or Cryptomus; we do not store it.
• Technical data: IP address, browser, access date and security logs.

2. How we use your data

• To provide the chat service and keep your history.
• To manage your account, credits, plans and payments.
• To send transactional emails (welcome, receipts, password recovery).
• To prevent abuse, fraud and unauthorized access.
• To improve the product in aggregate and measure service performance.

3. Legal basis

We process the data necessary to perform the contract with you (the provision of the service), to comply with legal obligations and, where applicable, based on our legitimate interest in maintaining security and improving the service. Commercial emails are only sent with your consent.

4. Conversations and AI models

Your conversations are stored with your account so you can review them. To generate each response, the conversation content is sent to the provider of the model you choose through OpenRouter. We do not sell your data or use it to train our own models.

You can delete individual conversations from the assistant and request deletion of your account by contacting support.

5. Sharing with third parties

• OpenRouter and model providers, to process your messages.
• PayPal, Binance and Cryptomus, to process payments.
• Hosting and email provider, to operate the site.
• Authorities, when there is a legal obligation.

6. Retention

We keep account data while the account is active. Payment records are kept for the period required by tax regulations. Technical security logs are deleted periodically. If you delete your account, we will delete or anonymize your personal data except what we must keep by law.

7. Cookies

We use cookies necessary to keep your session, remember the model you chose and protect forms against CSRF. We do not use third-party advertising cookies on this site. You can delete them from your browser, although some features will stop working.

8. Security

We apply reasonable technical measures: passwords encrypted with bcrypt, HTTPS connections, access control, request limits and protection of internal files. No system is infallible, but we work to reduce risk.

9. Your rights

You can request access, rectification, deletion, portability or objection to the processing of your data by emailing support@cordivioai.com from your account email. We will respond within a reasonable period and, at most, the period required by applicable law.

10. Minors

The service is not directed at people under 18. If we detect a minor account, we will suspend it and delete its data.

11. Changes

We may update this policy. We will publish the current version on this page with its update date.

12. Contact

Data controller: CordivioAI. Email: support@cordivioai.com.