Skip to content
Privacy

Your data, handled with care.

Last updated July 11, 2026

1. Data Controller

Paramour.chat is operated from Spain by [Legal entity name] (the "operator"). For the purposes of the EU General Data Protection Regulation (GDPR), the operator is the data controller for personal data processed through the service. You can reach the operator on data-protection matters at privacy@paramour.chat.

2. Data We Collect

Account data: Email address and name, provided during registration via Clerk (our authentication provider).

Conversation data: Messages you send and AI responses, stored to provide message history and character memory.

Generated images: AI-generated illustrations associated with your conversations, stored for display in your chat history.

Billing data: Subscription and payment information, processed by our payment provider and its licensed payment partners. We do not store card numbers.

Usage data: Daily message and image generation counts, used for plan limit enforcement.

3. How We Use Your Data

  • To provide the service: delivering conversations, generating images, maintaining message history and character memory.
  • To enforce plan limits and billing.
  • With your consent, to understand and improve the service through usage analytics, heatmaps, and privacy-masked session replay. Chat text, account details, inputs, and images are excluded from replay.
  • To communicate with you about your account, billing, or changes to these policies.

We do not use your conversations or personal data to train AI models. We do not sell your data to third parties.

4. Legal Basis (GDPR)

We process your data on the following legal bases:

  • Contract performance (Art. 6(1)(b) GDPR): Processing necessary to provide the service you signed up for.
  • Legitimate interest (Art. 6(1)(f) GDPR): Service security, fraud prevention, and aggregate analytics.
  • Consent (Art. 6(1)(a) GDPR): For optional communications. You may withdraw consent at any time.

5. Third-Party Processors

We use the following third-party services that process your data:

  • Cloudflare (US) — Hosting, CDN, database. Data processed under Cloudflare's DPA and Standard Contractual Clauses.
  • Clerk (US) — Authentication. Processes email and session data.
  • PayGate.to and its licensed payment partners — Payment processing. Handle checkout and payment method data.
  • OpenRouter / LLM providers — AI inference. Conversation text is sent for response generation. No user identity is transmitted.
  • Modal (US) — Image generation. Scene descriptions (no user identity) are sent for image generation.
  • PostHog (EU cloud) — Consent-based product analytics, heatmaps, and privacy-masked session replay. Chat text, account details, inputs, and images are excluded from recordings.

All US-based processors operate under appropriate safeguards for EU-US data transfers (Standard Contractual Clauses or EU-US Data Privacy Framework).

6. Data Retention

Your data is retained for as long as your account is active. When you delete your account, all associated data (messages, memories, images, sessions) is permanently deleted within 30 days. Billing records may be retained for the period required by Spanish tax law (currently 4 years). We do not retain conversation data after account deletion for any purpose, including AI model training.

7. Your Rights (GDPR)

As an EU resident, you have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten") — available via account deletion.
  • Port your data in a machine-readable format.
  • Restrict processing of your data in certain circumstances.
  • Object to processing based on legitimate interest.
  • Lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

You can erase your account and all associated data yourself at any time — go to your account settings and use Delete account in the Danger zone. To exercise any of the other rights above, email privacy@paramour.chat from the address associated with your account. We respond to verified requests within one month, as required by the GDPR, and may ask you to confirm your identity first to protect your data from unauthorised access.

8. Cookies

Paramour.chat uses essential storage for authentication, guest chat continuity, and core service operation. Guest chat may set an essential cookie so a logged-out user can resume a temporary conversation and continue it after signing in. With your consent, PostHog also uses browser storage for product analytics, heatmaps, and privacy-masked session replay. You can decline analytics in the consent banner; the core service will still work. We do not use advertising cookies or sell data for advertising.

9. Children

Paramour.chat is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that a user is under 18, their account and all data will be deleted immediately.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email at least 14 days before they take effect.

11. Contact

For privacy-related inquiries: privacy@paramour.chat