Privacy Policy

1. Introduction

This Privacy Policy explains how Thayssa ("we", "us", "our") collects, uses, shares, and protects personal data when you use our website and apps (the "Service"). Thayssa is an adults-only (18+) AI companion service. We act as the data controller for the personal data described here. By using the Service you also agree to our Terms of Service.

2. Data we collect

Account data

• Email address and authentication details.
• Your 18+ self-declaration and the consent choices you make (age gate, cookie consent).
• Subscription and billing status (handled by Stripe — we receive the status and the last digits of your card, never the full card number).

Usage & content data

• The companions ("Thays") you create and your customization settings.
• Your conversations, prompts, and the AI-generated text, images, and voice associated with your account, so the Service can keep memory and continuity.
• Technical and diagnostic data such as device type, browser, approximate region (from IP), app version, and basic interaction events.

We do not seek to collect special-category data, and you should not submit sensitive personal information about real, identifiable third parties.

3. How we use your data

• To provide, personalize, and maintain the Service, including memory.
• To process payments, manage subscriptions, and deliver credits.
• To keep the Service safe — enforcing our hard red lines (no minors/CSAM, no promotion of self-harm, no real-world harm or illegal activity), preventing fraud and abuse, and complying with law.
• To respond to support requests and send essential service messages.
• With your consent, to measure aggregate, privacy-friendly analytics so we can improve the product.

4. We do not train AI on your private chats

Your private conversations, prompts, and generated media are not used to train AI models — neither ours nor our providers'. Your chats are sent to our AI processor solely to generate the next response for you, and are not repurposed as training data. We may use fully aggregated, de-identified metrics (for example, error rates or feature usage) that cannot identify you or reconstruct your conversations to operate and improve the Service.

5. Service providers (processors)

We share the minimum data necessary with carefully chosen processors who act on our instructions under data-processing agreements:

• nano-gpt — AI inference. Receives your prompts and conversation context to generate companion responses, text, and media. Used to produce output only, not to train models on your content.
• Stripe — payment processing. Handles card details and billing; we never store your full card number.
• Resend — transactional email (verification, security, and account notices).
• Hetzner — hosting and infrastructure (servers and data storage), located in the EU.
• Cloudflare — content delivery, DNS, and security/DDoS protection.

Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses. We do not sell your personal data.

6. Data retention & deletion

We keep your account, conversation, and memory data for as long as your account is active so the Service works as intended. You can delete individual chats or companions at any time from within the app.

• When you delete your account, we delete or irreversibly anonymize your personal data within 30 days, except where we must retain limited records to meet legal, tax, or safety obligations (for example, records relating to a CSAM report).
• Backups are purged on a rolling cycle. Aggregated, de-identified statistics may be retained.

To request deletion, use the in-app controls or email privacy@thayssa.ai.

7. Cookies

We use essential cookies to operate the Service (including remembering your 18+ confirmation and your cookie choice) and, with your consent, analytics cookies. See our Cookie Policy for details and how to change your choice.

8. Your rights (GDPR & CCPA)

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct inaccurate data or complete incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing, including profiling.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• For California residents (CCPA/CPRA): know what we collect, request deletion, and opt out of "sale"/"sharing". We do not sell your personal data, and we will not discriminate against you for exercising your rights.

To exercise any right, email privacy@thayssa.ai. You also have the right to lodge a complaint with your local data-protection authority.

9. Security

We use encryption in transit, access controls, and EU-based infrastructure to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and regulators of qualifying breaches as required by law.

10. No one under 18

The Service is strictly for adults. We do not knowingly collect data from anyone under 18. If we learn that a minor has used the Service, we will delete the account and associated data. If you believe a minor is using Thayssa, contact privacy@thayssa.ai.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and, for material changes, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact