Privacy Policy
Last updated 17 May 2026
Effective date 1 January 2026
AUVORA HOLDINGS LTD ("we") is the controller of personal data processed through the Service. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights available to you under applicable data-protection laws, including the EU General Data Protection Regulation (GDPR).
1. Data we collect
We collect: (a) account data you provide (email, username, password hash, language and preferences); (b) content data you create (characters, prompts, chats, generated media, library items); (c) payment metadata required to process subscriptions and stars (we do not store full card numbers — those are handled by our PCI-DSS-certified payment processors); (d) device and usage data (IP address, browser and device identifiers, timestamps, pages viewed, features used); and (e) communications you send to support.
2. How we use your data
We process your data to: provide and secure the Service; authenticate your sessions and prevent fraud; deliver and bill subscriptions; moderate content and enforce our policies; improve and develop new features; respond to support requests; send service-related notifications and (with your consent where required) marketing messages; and comply with legal obligations.
3. Legal bases (GDPR)
We process personal data under the following legal bases: performance of our contract with you (to provide the Service), our legitimate interests (security, fraud prevention, analytics, product improvement), your consent (for optional cookies and marketing), and compliance with legal obligations (tax, accounting, lawful requests).
4. Sharing your data
We share data only with vetted service providers acting as processors on our behalf — including hosting and content-delivery, payment processing, email delivery, analytics, and content-moderation providers — and with authorities where required by law or to protect our rights. We do not sell personal data.
5. International transfers
Where personal data is transferred outside the European Economic Area, we rely on safeguards such as adequacy decisions or the European Commission's Standard Contractual Clauses, supplemented by additional measures where appropriate.
6. Data retention
We retain personal data only for as long as we need it for the purposes described in this policy. Account data is retained while your account is active and for a limited period afterwards to allow account recovery, comply with legal obligations, and resolve disputes. You can delete your account at any time from settings; once deleted, associated personal data is removed or anonymised according to our retention schedule.
7. Your rights
Subject to local law, you have the right to access, rectify, erase, restrict the processing of, port, and object to the processing of your personal data, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at the email address below. You also have the right to complain to your local data-protection authority.
8. Cookies and similar technologies
We use strictly necessary cookies to operate the Service and, with your consent where required, analytics and preference cookies. You can manage cookie preferences in your browser and, where shown, through our in-Service cookie banner.
9. Security
We apply technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and ongoing monitoring. No system is perfectly secure; you should also protect your account by using a strong, unique password and enabling any available security features.
Contact us
If you have questions about this policy, contact AUVORA HOLDINGS LTD at [email protected].