Privacy Policy

• Account data — name, email address, password (hashed), and account settings.
• Subscription and billing data — your plan, billing history, and limited payment confirmation data. Payment card details are collected and processed by Paddle, our Merchant of Record; we do not store your full card number.
• Input and Output — the prompts, files, and data you submit, and the content the Service generates in response. See Section 4 for how we handle AI processing.
• Usage data — features used, Token consumption, logs, timestamps, and interaction data.
• Device and technical data — IP address, browser type, device identifiers, and similar information collected via cookies and similar technologies (see our Cookie Policy).
• Communications — messages you send to support and related correspondence.

We use personal data to: provide, operate, and secure the Service; create and manage your Account; process Subscriptions and confirm payments via Paddle; meter and enforce Token usage and fair-use limits; route Inputs to AI Providers and return Output; provide customer support; detect, prevent, and investigate fraud, abuse, and security incidents; comply with legal obligations; and improve and develop the Service.

Where GDPR applies, we rely on: performance of a contract (to provide the Service you subscribe to); legitimate interests (security, fraud prevention, service improvement, analytics, balanced against your rights); consent (for non-essential cookies and any optional communications); and legal obligation (tax, accounting, compliance). Under the PDPL we process personal data on comparable bases, including your consent and the necessity to perform the contract.

To generate Output, your Input is transmitted to the relevant third-party AI Provider and processed by their model. Each AI Provider processes data under its own terms and privacy practices.

We do not use the content of your Inputs or Outputs to train our own models, and we contract with AI Providers on terms intended to limit their use of your content to delivering the Service. We may process Inputs and Outputs to operate, secure, debug, and enforce policies (for example, automated safety filtering). Please do not submit sensitive personal data, confidential information, or content you are not authorised to share.

We share personal data only as needed:

• AI Providers — to generate Output from your Inputs.
• Paddle (Merchant of Record) — to process payments, taxes, invoicing, and refunds.
• Service providers / sub-processors — hosting, storage, analytics, email, and customer support tools, bound by confidentiality and data-protection obligations.
• Legal and safety — authorities or third parties where required by law or to protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets.

We do not sell your personal data.

We and our service providers may process data outside the UAE, including in the EEA and other countries. Where we transfer personal data internationally, we use safeguards required by the PDPL and, for GDPR-covered transfers, mechanisms such as Standard Contractual Clauses or transfers to adequate jurisdictions.

We retain personal data for as long as your Account is active and as needed to provide the Service, then for the period required to comply with legal, tax, accounting, and dispute-resolution obligations. Inputs and Outputs may be retained for a limited period to operate and secure the Service and are deleted or anonymised thereafter, subject to law.

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. Where a personal data breach occurs, we will notify the UAE Data Office and, where required, affected individuals without undue delay and, where feasible, within 72 hours in line with UAE Data Office guidance. No system is completely secure, and we cannot guarantee absolute security.

Subject to the PDPL and, where applicable, GDPR, you may have the right to: access your personal data; correct inaccurate data; request erasure; restrict or object to processing; withdraw consent; request data portability; and lodge a complaint with the competent supervisory authority (the UAE Data Office under the PDPL, or your local data protection authority under GDPR). To exercise these rights, contact [email protected]. We will respond within the timeframes required by applicable law.

The Service is not directed to, and we do not knowingly collect personal data from, anyone under 18. If you believe a minor has provided us personal data, contact [email protected] and we will delete it.

We use cookies and similar technologies as described in our Cookie Policy, which explains the types of cookies we use and how you can manage them.

We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice.

ABUSE TECH - FZCO — IFZA, Dubai Digital Park, Dubai, United Arab Emirates. Privacy enquiries: [email protected] · Support: [email protected]