Privacy Policy

1. Introduction

Welcome to SoulBond AI ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI companion service.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (name, email address, password)
• Profile information (personality test results, preferences)
• Payment information (processed securely through Stripe)
• Communications with your AI companion

2.2 Automatically Collected Information

• Device information (IP address, browser type, operating system)
• Usage data (features used, time spent, interaction patterns)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI companion service
• Personalize your experience based on your personality profile
• Process payments and manage subscriptions
• Send administrative information and updates
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

4. AI and Data Processing

SoulBond AI uses advanced artificial intelligence, including OpenAI's GPT-4, to provide personalized conversations. Your messages are processed to generate responses and create memories that enhance your experience. We implement strict data handling practices:

• Conversation data is encrypted in transit and at rest
• We use vector databases to store semantic representations of memories
• Content moderation is applied to ensure safety and appropriateness
• We do not sell your conversation data to third parties

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We share data with trusted third-party providers (OpenAI, Stripe, Cloudinary, Pinecone) who help us operate our service
• Legal Requirements: We may disclose information if required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: We may share information with your explicit permission

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Secure password hashing using bcrypt
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Cookie Preferences: Manage cookie settings in your browser

To exercise these rights, please contact us at privacy@soulbondai.com

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Conversation memories may be automatically pruned based on importance scores after 90 days. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

10. Children's Privacy

SoulBond AI is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at:

13. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

Our legal basis for processing your data includes consent, contract performance, and legitimate interests. You may withdraw consent at any time.