Privacy Policy

Who is responsible for your data

The operator of sultrai.com is the data controller for personal data processed through the Service. Because we are established in the European Union, our processing is subject to the EU General Data Protection Regulation (GDPR). Full operator identification is available on request and will be published here in due course.

Data we collect

• Account data: the email address you use to sign in and, if you use a social or magic-link login, the identifier returned by that provider.
• Chat messages: the messages you send to your characters and the AI responses, so conversations have memory and continuity.
• Generated images: the images you generate through the Service, along with the prompts and settings used to create them.
• Character and preference data: the characters you create or customize and your in-app settings.
• Payment data: payments are handled entirely by our third-party payment processors — NOWPayments (prepaid crypto top-ups) and CCBill (card processing). These processors receive the payment details needed to complete your transaction. We do not store your full card number or crypto wallet credentials; we receive only confirmation of payment and limited transaction metadata to credit your account.
• Technical data: basic technical information such as IP address, device and browser type, and log data, used for security, fraud prevention, and to keep the Service running.
• Session recordings. To improve the product we may record how your browser session interacts with the app (clicks, typing, navigation — passwords and email fields are masked). Recordings are stored privately on our own infrastructure, are viewed only by our team, are never shared with third parties, and are automatically deleted within 30 days.

Cookies and local storage

We use cookies and browser local storage for essential functions: keeping you signed in, and remembering that you have confirmed you are 18 or older and have accepted our Terms of Service and Acceptable Use Policy. These consent and age-verification records are stored so we do not have to prompt you on every visit. We do not use these for advertising profiling.

How and why we use your data

We use your data to provide the Service (authentication, chat, image generation, memory, and customization), to process payments and credits through our processors, to enforce our Acceptable Use Policy and keep the platform safe, and to comply with our legal obligations. Our legal bases under the GDPR are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (for example, age and terms confirmation), and compliance with legal obligations.

Sharing

We share data only with the service providers that make Sultrai work — for example our payment processors (NOWPayments, CCBill), hosting, and infrastructure providers — under agreements that require them to protect it, and where we are legally required to do so. We do not sell your personal data.

Data retention

We keep your personal data for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymize your account data, chat history, and generated images, except where we must retain limited records for legal, accounting, or fraud-prevention purposes (for example, transaction records required by law), which we keep only for as long as required and then delete.

Blocked requests. When our filters refuse a request because it falls into a category prohibited by our Acceptable Use Policy, we keep a record of it: the category, which filter caught it, the account, and a short excerpt of the text that was refused. The content itself is never generated, shown or added to your conversation. We keep these records because card-brand rules require us to be able to evidence that our controls work, to review appeals, and to report illegal material to the relevant authorities. They are retained under the legal-obligation exception above and survive account deletion.

Deleting your account and your rights

You can delete your account and its associated data at any time from your account settings, or by contacting us at admin@sultrai.com. Under the GDPR you also have the right to access, correct, export, restrict, or object to the processing of your personal data, and to withdraw consent. You may lodge a complaint with your local supervisory authority; in France this is the CNIL (Commission Nationale de l'Informatique et des Libertés).

Contact

For any privacy question or request, contact us at admin@sultrai.com.