Privacy Policy

Last updated: July 2026

This Privacy Policy describes how AI Copilot Pro ("we", "us", or "our") collects, uses, and shares information about you when you use our service ("Service"). This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Information We Collect

Account Information: When you register, we collect your email address and hashed password.

Usage Data: We log your interactions with the Service, including queries sent, models used, timestamps, and credit consumption.

Device Information: We may collect information about your browser, device type, IP address, and operating system.

Cookies: We use essential cookies for authentication. No third-party tracking cookies are used.

2. How We Use Your Information

To provide and maintain the Service
To process transactions and manage your account
To route your queries to the appropriate AI models
To monitor usage patterns and improve Service quality
To detect and prevent abuse, fraud, or security incidents
To communicate with you about Service updates and support

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

Contract performance: Processing necessary to fulfill our service agreement with you.
Legitimate interests: Processing for Service improvement, security, and fraud prevention.
Legal obligation: Processing required to comply with applicable laws.
Consent: Where you have given explicit consent for specific processing activities.

4. Data Sharing

Your queries are forwarded to third-party AI model providers (YunwuAI, SiliconFlow, DeepSeek) as necessary to fulfill the Service. These providers have their own privacy policies and data handling practices. We do not sell your personal data to third parties.

5. Data Retention

We retain your account data for as long as your account is active. Conversation data may be retained for up to 90 days after the last interaction. You may request deletion of your data at any time by contacting us.

6. Your Rights (GDPR)

If you are in the EEA, you have the following rights:

Right of access: Request a copy of your personal data.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your personal data ("right to be forgotten").
Right to restrict processing: Request limitation of data processing.
Right to data portability: Request transfer of your data to another controller.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@aicopilot.club.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs), to protect your data.

8. Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), secure password hashing, JWT-based authentication, rate limiting, and regular security audits.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact

For privacy-related questions or to exercise your data rights, contact our Data Protection Officer at privacy@aicopilot.club.