Privacy at a Glance

Local Model Privacy

Your conversations with local models never leave your device

Your Rights

Access, correct, or delete your data anytime

Global Compliance

GDPR, CCPA, and other privacy law compliant

Minimal Data

We only collect what's necessary for service operation

1. Information We Collect

Information You Provide Directly

  • Chat Messages: The messages you send to our AI models
  • Account Information: Email address, username (if you create an account)
  • Support Communications: Messages you send to our support team

Information Collected Automatically

  • Usage Data: How you interact with our service, features used, session duration
  • Technical Data: IP address, browser type, device information, operating system
  • Cookies: Essential cookies for functionality, analytics cookies (with consent)

Local Model Privacy: When using local AI models, your conversations are processed entirely on your device and are never transmitted to our servers.

2. How We Use Your Information

Service Provision

  • Process and respond to your chat messages via cloud-based AI models
  • Maintain your conversation history (for cloud models only)
  • Provide technical support and customer service

Service Improvement

  • Analyze usage patterns to improve our service
  • Develop new features and capabilities
  • Monitor service performance and reliability

Legal Basis (GDPR)

  • Consent: For optional features like analytics
  • Contract Performance: To provide our chat services
  • Legitimate Interests: For service improvement and security
3. Information Sharing and Disclosure

Third-Party AI Providers

When you use cloud-based models (like Gemini), your messages are sent to:

  • Google (Gemini): Subject to Google's privacy policy and terms
  • Other AI model providers as clearly indicated in our interface

Service Providers

  • Cloud hosting providers for infrastructure
  • Analytics services (with your consent)
  • Customer support platforms

Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

We Never: Sell your personal data, use it for advertising, or share it for commercial purposes unrelated to our service.

4. Data Security and Retention

Security Measures

  • End-to-end encryption for data transmission
  • Secure cloud infrastructure with industry-standard protections
  • Regular security audits and monitoring
  • Access controls and authentication requirements

Data Retention

  • Chat History: Retained for 90 days, or until you delete it
  • Account Data: Retained while your account is active
  • Usage Analytics: Aggregated data retained for 2 years
  • Local Model Data: Never stored on our servers
5. Your Privacy Rights

Access

Request a copy of your personal data

Correction

Update or correct your information

Deletion

Request deletion of your data

Portability

Export your data in a standard format

California Residents (CCPA)

Additional rights include:

  • Right to know what personal information is collected
  • Right to opt-out of sale (we don't sell your data)
  • Right to non-discrimination for exercising your rights

Exercise Your Rights: Contact us at privacy@privgptstudio.com or use our in-app settings to manage your data.

6. Cookies and Tracking

Types of Cookies We Use

Essential

Required for basic functionality (login, preferences)

Analytics

Help us understand usage patterns (optional, requires consent)

Cookie Management

You can control cookies through your browser settings or our cookie preferences center. Note that disabling essential cookies may affect service functionality.

7. International Data Transfers

Your data may be processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses for EU data transfers
  • Adequacy decisions where applicable
  • Additional security measures for sensitive data
8. Children's Privacy

Our service is not intended for children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Parents: If you discover your child has provided personal information, contact us to have it removed.

9. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for legal compliance. We will:

  • Notify you of material changes via email or in-app notification
  • Update the "Last Modified" date at the top of this policy
  • Maintain previous versions for your reference

Continued use of our service after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions, concerns, or to exercise your rights, contact us:

Privacy Officer

privacy@privgptstudio.com

Data Protection Officer (EU)

dpo@privgptstudio.com

Mailing Address

PrivGPT Studio
Privacy Department
[Your Business Address]
[City, State, ZIP Code]

We will respond to your privacy requests within 30 days (or as required by applicable law).