Privacy Policy

1. Introduction

AI Response Generator ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered email and discussion response generation service.

Our service is operated from Vancouver, Canada, and we provide services to users globally.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email Address: Used for account login and sending notifications
• Nickname: Automatically filled if you sign in with Google (optional)
• Profile Picture: Only if you choose to upload one, stored on Cloudflare R2 CDN for your personal viewing

Important: We do NOT store passwords. We use secure authentication methods including Google Sign-In and Magic Link (passwordless) authentication.

2.2 Payment Information

All payment processing is handled by Stripe. We do NOT store any credit card or payment information on our servers. Payment data is processed and stored securely by Stripe in accordance with their privacy policy and PCI DSS standards.

2.3 Usage Data

IP Address: Recorded during login and payment transactions for security purposes.

We do NOT collect:

• Browser information or device details
• Generated email or discussion response content (not saved on our servers)
• Usage history or activity logs

2.4 Content You Generate

We do NOT save any email responses or discussion responses you generate using our service. However, please note that:

• Your content is sent to third-party AI providers (primarily OpenAI and Google Gemini) for processing
• These providers may retain logs according to their own privacy policies
• We cannot guarantee what data these third-party providers collect or retain

3. How We Use Your Information

We use the collected information for:

• Account Management: To create and manage your account
• Service Delivery: To provide AI response generation services
• Authentication: To verify your identity during login
• Communication: To send important notifications and service updates
• Security: To detect and prevent fraudulent transactions and unauthorized access

4. Third-Party Services

We work with the following third-party services:

4.1 AI Service Providers

• OpenAI: Processes your generated content to provide AI responses
• Google Gemini: Processes your generated content to provide AI responses

Please review their privacy policies for information on how they handle your data.

4.2 Payment Processing

• Stripe: Handles all payment transactions securely

4.3 Infrastructure Services

• Cloudflare R2: Stores user-uploaded profile pictures only (if you choose to upload one)
• Google Sign-In: Provides secure authentication services

4.4 Analytics

We do NOT use Google Analytics or any similar tracking services.

5. Data Retention

Account Data: Your email address and account information are retained for as long as your account is active.

Profile Pictures: Stored on Cloudflare R2 until you delete them or close your account.

Generated Content: We do not store your generated responses.

6. Account Deletion

You may request account deletion at any time by contacting us. To delete your account:

• Email us at your request
• We will permanently delete your account information within 30 days
• This action is irreversible

Please note that some information may be retained for legal or regulatory compliance purposes.

7. Data Security

We implement appropriate security measures to protect your information:

• No password storage (passwordless authentication only)
• Secure HTTPS connections
• IP-based fraud detection during login and payments
• Minimal data collection principle

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies and Tracking

We use essential cookies for:

• Session management and authentication
• Remembering your preferences

We do NOT use cookies for advertising or cross-site tracking.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update incorrect or incomplete information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Objection: Object to certain data processing activities

To exercise these rights, please contact us using the information below.

10. Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Our servers are located in Canada. If you access our service from outside Canada, your information may be transferred to, stored, and processed in Canada. By using our service, you consent to this transfer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of the service after changes are posted constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

14. Legal Compliance

We comply with applicable data protection laws including:

• Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
• General Data Protection Regulation (GDPR) - for EU users
• California Consumer Privacy Act (CCPA) - for California residents