Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address (required for account creation)
• Username and display name (chosen by you)
• Password (stored as a secure hash — we never store plaintext passwords)
• Profile information you voluntarily provide: avatar image, cover image, bio
• OAuth provider data if you sign in via Google (name, email, profile picture from your Google account)

Usage & Activity Data

We automatically collect certain data when you use the platform:

• Pages visited, features used, and time spent on the platform
• Content you upload (images, videos, collections)
• AI generation requests, prompts, and results
• AI chat conversation content (messages sent to AI characters)
• Interactions such as likes, saves, and follows
• IP address, browser type, device type, and operating system
• Referring URLs and session identifiers

Payment Information

If you make a payment, we collect:

• Cryptocurrency wallet address (for crypto payments)
• Transaction hash and network (ETH, SOL, or BTC)
• Payment amount and selected plan
• Payment status and timestamp
• Transaction confirmation and subscription status from payment processors (e.g., Stripe, PayPal)

We do not collect or store credit card numbers or full banking details. All cryptocurrency transactions are processed on-chain and are publicly verifiable on their respective blockchains.

User-Generated Content

Content you create or upload — including images, AI-generated animations, collections, and waifu characters — is stored on our infrastructure (Cloudflare R2 object storage) and may be visible to other users depending on your privacy settings.

2. How We Use Your Information

We use the information we collect to:

• Create and maintain your account and provide platform services
• Process your AI generation requests and deliver results
• Personalize your experience and show you relevant content
• Process payments and manage subscription tiers and credits
• Provide AI chat functionality (messages are sent to third-party AI providers to generate responses)
• Enforce our Terms of Service and Community Guidelines
• Send transactional emails (account verification, password reset) — we do not send unsolicited marketing emails
• Detect and prevent fraud, abuse, and illegal activity
• Analyze aggregate usage to improve the platform
• Comply with legal obligations

We do not use your personal information to train AI models. Generated images and prompts may be used in aggregate, anonymized form to improve service quality.

3. AI Chat & Conversation Data

WaifuVerse uses AI language models (currently powered by xAI's Grok API) to generate responses from AI companion characters. When you send a message:

• Your message and conversation context are transmitted to xAI's API servers to generate a response
• For authenticated users, messages are stored in our database so your conversation history persists across sessions and devices
• For guest (unauthenticated) users, messages are stored only in your browser's local storage and are not transmitted to our servers
• xAI's data handling is governed by their own privacy policy. We encourage you to review it at x.ai/privacy

We do not use your private conversation content to train AI models, and we do not sell conversation data to third parties.

4. Third-Party Service Providers

We rely on the following trusted third-party providers to operate the platform. Each processes data in accordance with their own privacy policies:

5. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• Service providers: Third-party vendors listed above who help us operate the platform, under strict confidentiality agreements
• Legal compliance: If required by law, court order, or valid governmental request
• Safety and fraud prevention: To protect the rights, property, or safety of WaifuVerse, our users, or the public
• Business transfer: In connection with a merger, acquisition, or sale of assets, in which case you will be notified via email or a prominent notice on the platform
• With your consent: In any other circumstance with your explicit consent

Public profile information (username, avatar, uploaded public content) is visible to all users of the platform by design.

6. Cookies & Tracking

We use cookies and similar technologies for:

• Essential Cookies: Session cookies to keep you logged in. Required for the service to function — cannot be disabled.
• Preference Cookies: Storing your sidebar state, column preferences, and display settings locally.
• Analytics Cookies: Aggregate, anonymized usage statistics to improve the platform. Can be declined.

We do not use advertising cookies or sell your data to ad networks. You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Service.

7. Data Retention

• Account data: Retained for as long as your account is active. Deleted within 30 days of a verified account deletion request.
• Generated content: Images you generate are stored until you delete them or your account is closed.
• Chat messages: Retained until you delete them or close your account.
• Uploaded content: Retained until you delete it or your account is terminated. Cached copies on Cloudflare CDN may persist briefly after deletion.
• Usage logs: IP address and request logs retained for up to 90 days for security and debugging, then deleted or anonymized.
• Payment records: Retained for a minimum of 7 years to comply with applicable tax and financial recordkeeping requirements, even after account deletion.

8. Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update inaccurate or incomplete information via your profile settings
• Deletion: Request deletion of your account and associated personal data (subject to legal retention requirements)
• Portability: Request an export of your data in a machine-readable format
• Objection: Object to certain processing activities
• Withdraw consent: Where processing is based on consent, withdraw it at any time
• Opt-Out: Unsubscribe from marketing emails at any time via the link in each email

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, contact us below.

EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including data subject access rights and the right to lodge a complaint with your local supervisory authority. Our lawful basis for processing is primarily legitimate interests (operating the platform) and, where applicable, contractual necessity and consent.

9. Children's Privacy

WaifuVerse is intended exclusively for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has created an account, we will terminate the account and delete all associated data immediately. If you believe a minor is using our platform, please contact us.

10. Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• Secure password hashing (bcrypt)
• Row-level security (RLS) policies in our database so users can only access their own data
• Cloudflare DDoS protection and WAF
• Access controls and principle of least privilege for internal systems
• Regular security reviews

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.

11. International Data Transfers

WaifuVerse is operated from the United States. If you access the platform from outside the US, your data may be transferred to and processed in the US and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws. By using the platform, you consent to this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or a banner on the platform. Continued use of WaifuVerse after changes take effect constitutes acceptance of the updated policy.