Privacy Notice

This Privacy Notice is incorporated by reference into Aeliana Terms of Engagement and explains collection, use, retention, deletion requests, and user rights for web surfaces.

1) Data We Collect

Account data: email, authentication state, and subscription entitlement signals.
Chat/session data: prompt/response content, timestamps, persona/mode selection, and quality/safety events.
Restricted-access verification data: eligibility status, verification time, coarse jurisdiction, and a provider proof reference. Aeliana does not receive Stripe's ID images or your date of birth.
Form data: notify, vote, and feature-request submissions.
Telemetry: page views, interaction events, browser/device metadata, and fraud-abuse indicators.

2) How We Use Data

Operate and secure chat, authentication, and saved-memory features.
Detect policy abuse, fraud, and safety-risk behavior.
Improve product quality, reliability, and UX performance.
Respond to support, legal, and compliance requests.

3) Sharing and Processors

Infrastructure and processing providers may process data on our instructions (for example cloud hosting, analytics, safety tooling, and model APIs).
OpenAI, xAI, and Anthropic are model processors for supported chat paths. The provider selected for a response receives the prompt and the conversation or saved-memory context needed to generate that response. Daylight may use server-controlled fallbacks; After Hours honors the account provider choice without silent substitution.
Stripe Identity processes government-ID and camera evidence when a restricted-access age check is required. New checks receive an opaque correlation value rather than your Aeliana email address or user ID.
External security indicators may load on supported pages to communicate site-safety posture, but they do not replace legal age/access controls.
We do not sell personal data in the ordinary meaning of "sell."
We may disclose data when required by law, legal process, or to protect safety and platform integrity.

4) Retention

Web guest sessions are primarily session-based; saved-memory features are tied to signed-in accounts and active entitlements.
Operational logs and safety events are retained for security, abuse prevention, and compliance windows, then deleted or de-identified.
Aeliana retains the minimum access outcome and audit reference needed to enforce restricted access and investigate verification failures; provider evidence remains governed by Stripe's processing and retention controls.
We retain records as long as needed for service operation, legal obligations, dispute resolution, and fraud prevention.

5) User Rights and Requests

Depending on jurisdiction, you may request access, correction, deletion, or portability of certain personal data.
To request deletion or privacy review, email [email protected] from the account address with subject "Privacy Request".
Authorized agent requests may require identity and authority verification.

6) High-Risk and Sensitive Use

Do not submit passwords, government identifiers, card numbers, or emergency-only details in chat.
Aeliana is not an emergency service; if there is immediate danger call local emergency services.
For self-harm and crisis support protocol summary, see /safety.

Conflict Rule

This Privacy Notice controls privacy topics. If another page conflicts on a privacy issue, this Privacy Notice controls for that issue unless stricter law requires otherwise.

Privacy contact: [email protected]