Privacy Policy

Effective date: June 7, 2026

FluidTalk ("FluidTalk", "we", "us") operates the FluidTalk service at talk.fluidvip.com (the "Service"). This policy explains what personal data we collect, how we use it, and your rights.

1. Scope

This policy applies to personal data processed when you use the Service or visit our website.

2. Data we collect

• Account data — your email address and authentication identifiers (via our identity provider), and display name.
• Profile & settings — preferences, language, and plan/subscription status.
• Content you upload — persona images and other assets, stored on Cloudflare R2.
• Conversation data — messages and metadata processed by the Service's engines, including AI-generated output, extracted profile "facts", and session records.
• Usage & billing data — token wallet balance and usage ledger, feature usage, analytics events, and (once paid billing launches) payment information handled by our payment processor.
• Technical data — IP address, device/browser information, and logs.

3. How we use data

To provide, operate, and secure the Service; generate AI responses; meter and bill usage via tokens; provide customer support; improve and develop features; and comply with legal obligations.

4. Legal bases (where the GDPR applies)

Performance of a contract (providing the Service); our legitimate interests (securing and improving the Service); consent (where required, e.g., certain analytics); and compliance with legal obligations.

5. AI processing

To generate output, conversation content and persona data are processed by AI models that may be self-hosted by us and/or operated by third-party inference providers. We do not sell your personal data.

6. Service providers / processors

We share personal data only as necessary with providers acting on our behalf under appropriate agreements, including: our authentication/database provider (Supabase); Cloudflare (R2 object storage and network/DNS); our hosting/deployment infrastructure (Coolify-managed servers); AI inference providers (e.g., OpenRouter and the underlying model hosts); and our email/support provider.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, after which we delete or anonymize it within a reasonable period, unless a longer retention period is required by law. You may request deletion (see Your rights).

8. Your rights

Depending on your location, you may have the right to access, correct, delete, export (portability), restrict, or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact [email protected]. You may also lodge a complaint with your local data-protection authority.

9. Security

We use industry-standard safeguards, including encryption in transit and access controls. No system is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

11. Children

The Service is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your country) to use the Service, and we do not knowingly collect personal data from children below that age. If you believe a child has provided us personal data, contact us and we will delete it.

12. Cookies

We use essential cookies for authentication and session management and may use limited analytics cookies. (A cookie banner/preferences control will be added where legally required.)

13. Changes

We may update this policy from time to time; we will notify you of material changes in-product or by email and update the effective date.

14. Contact

For privacy questions or requests: [email protected].