Privacy Policy
Created: November 9, 2025
Last Updated: November 9, 2025
Your privacy matters
This policy explains how we collect, use, and protect your personal data when you interact with Ai-Ko.chat. We believe in being transparent, clear, and honest about your privacy.
Who we are
Ai-Ko.chat is operated by Virtual Graphics, based in Switzerland.
Contact us:
- Email: info@ai-ko.chat
- Discord: discord.gg/YNDwUEqFmQ
- Address: Virtual Graphics, Sonnmatt 28, 9122 Mogelsberg - Switzerland
Our role in your privacy
If you are a customer, a community member, or simply visiting our website, this Privacy Policy applies to you. It explains how we handle your data and what rights you have.
We act as the data controller of the personal data you provide to us (such as your account details, companions, chats, or other content).
Your responsibilities:
- Read this Privacy Policy so you know how your data is used
- Keep your login details safe — don' t share your password or account
- Only share data you' re comfortable posting (for example, in companions or chats)
- Contact us if you have questions — we' re here to help
Age restrictions
Ai-Ko.chat is for users aged 18 and over only. We do not knowingly collect data from anyone under 18. If we become aware that a minor has provided data, we will delete it immediately and terminate their account.
When and how we collect data
From the moment you interact with Ai-Ko.chat, we may collect certain data:
- When you browse our website
- When you create an account or update your profile
- When you chat with AI companions or upload content
- When you contact us for support (e.g., via Discord or email)
- When you interact with our announcements or emails
Types of data we collect
1. Account & Login Data
What we collect:
- First name, last name, email address
- Password (stored as a one-way hash — we never see your actual password)
Who can access:
Only the founder of Ai-Ko.chat, and only when necessary for legitimate reasons such as system maintenance, security, or legal compliance
Legal basis: Contract (to provide you with an account and access to Ai-Ko.chat)
2. User-Generated Content (UGC)
Companions/Characters:
- You choose the visibility (public, unlisted, private)
- Public companions may be viewed by anyone
- Private companions are only visible to you
Chats:
- Chats are strictly private
- Chat messages are stored in our database (Upstash) and processed by OpenAI to generate AI responses
- Chat memory/context is stored in Pinecone for improved conversation continuity
- Moderators cannot access your chats
- The founder may only access chats for legitimate technical reasons (security incidents, debugging critical errors, system maintenance)
- Outside of these reasons, explicit user consent is required
- Data retention: Chats are stored while your account is active. When you delete your account, all chats are permanently deleted from active systems
- Third-party processing: OpenAI processes your chat messages to generate responses according to their data usage policies
Comments:
Comments are public and viewable by anyone
Note: Our hosting providers (Hetzner) may technically process this data as part of operating the service infrastructure.
Legal basis: Contract (to provide the service) and Legitimate Interest (to improve the service and maintain security)
3. Technical & Identification Data
We may collect technical information to operate the service securely and efficiently:
- IP address
- Device type and operating system
- Browser version and language settings
- Time zone and approximate geolocation (country/city level)
- Referrer URL (how you found us)
Legal basis: Legitimate Interest (security, fraud prevention, service optimization)
4. Analytics Data
We use privacy-friendly analytics (via Dokploy, and Clerk) to track:
- Pages visited and navigation paths through the site
- Feature usage (e.g., companion creation, chat activity)
- Performance metrics (response times, errors, uptime)
- Frequency of visits to Ai-Ko.chat
This data is aggregated and anonymized — we cannot identify individual users from it.
Legal basis: Legitimate Interest (to improve the service and user experience)
5. Payment & Billing Data
When you subscribe to a paid plan (Basic or Pro), we collect:
- Billing name and email
- Payment method information (processed by Stripe — we never see your full card details)
- Transaction history and subscription status
Legal basis: Contract (to process your payment and provide subscription services)
6. Sensitive Data
We do not actively collect sensitive categories of data (such as health, religion, political opinions, sexual orientation, etc.) unless:
- You choose to share it voluntarily (e.g., in your profile, companion descriptions, or chats), or
- We are legally required to process it
If you share sensitive data in chats or content, remember that it will be processed by our AI providers (OpenAI) as part of generating responses.
How and why we use your data
We only use your personal data for specific, legitimate purposes:
| Purpose | Legal Basis |
|---|---|
| Providing the service (login, authentication, account management) | Contract |
| Processing payments and subscriptions | Contract |
| Generating AI responses to your chats | Contract |
| Improving the app (testing features, fixing bugs, analytics) | Legitimate Interest |
| Customer support (answering questions, resolving issues) | Contract / Legitimate Interest |
| Sending service updates and important announcements | Contract / Legitimate Interest |
| Sending optional newsletters and feature announcements (if you opt in) | Consent |
| Security and fraud prevention | Legitimate Interest / Legal Obligation |
We never sell your data to third parties.
Cookies and tracking
We do not use traditional tracking cookies.
We use privacy-friendly analytics which does not set cookies or track individual users. Clerk (our authentication provider) may use essential cookies necessary for login functionality.
You can manage cookie preferences in your browser settings.
Third parties who process your data
To run Ai-Ko.chat efficiently and securely, we rely on trusted third parties. These services process your data only to the extent necessary to provide their service:
Infrastructure & Hosting
- Hetzner (Germany) – Server hosting
- Dokploy – Deployment interface
- GitHub – Code repository
Databases
- Neon.tech – Main database (user accounts, companions, content)
- Prisma – Database connection layer
- Upstash – Chat message storage
- Pinecone – Chat memory/context storage
Authentication & Payments
- Clerk – User authentication and subscription management
- Stripe – Payment processing (Stripe does not share full payment details with us)
AI Services
- OpenAI – Processes chat messages to generate AI companion responses. OpenAI' s data usage is governed by their own privacy policy and data processing agreement. As of our last review, OpenAI does not use data from their API for training purposes.
Analytics
- Plausible Analytics – Privacy-friendly website analytics (no personal data, no cookies)
Data transfers:
Some of these providers may store or process data outside Switzerland or the European Economic Area (EEA). When data is transferred internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions by the EU Commission
- Encryption in transit and at rest
How secure is your data?
We take security seriously and implement appropriate technical and organizational measures:
- Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
- Access controls: Strict authentication and authorization systems via Clerk
- Password security: Passwords are hashed using industry-standard algorithms (we never store plain-text passwords)
- Regular updates: We keep our systems and dependencies up to date
- Limited access: Only the founder has access to production systems, and only when necessary
However, please remember:
- No online system is ever 100% secure
- You are responsible for keeping your login details safe
- Use a strong, unique password for your Ai-Ko.chat account
- Never share your password with anyone
If you believe your account or privacy has been breached, contact us immediately via Discord or email.
How long do we store your data?
| Data Type | Retention Period |
|---|---|
| Active account data | While your account is active |
| Chats and companions | Until you delete them or delete your account |
| Payment records | 7 years (for tax and legal compliance) |
| Analytics data | 24 months, aggregated and anonymized |
| Backups | Up to 30 days after deletion |
| Inactive accounts | May be deleted after 2 years of no login activity (with advance notice) |
When you delete your account:
- Your data is removed from our active systems immediately
- Some data may remain in backups for up to 30 days, then is permanently erased
- Public comments may remain visible to preserve conversation context, but will be anonymized
- Payment records are retained for legal and tax compliance purposes only
Forced deletion: We may erase accounts or content if needed for system security, legal compliance, or content moderation (e.g., violations of our Terms of Use).
Your privacy choices and rights
Your choices
- You can browse Ai-Ko.chat without creating an account, but you won' t be able to create companions or chat
- You can make your companions private or public
- You can delete individual chats or companions at any time
- You can opt out of optional marketing emails via Discord, email, or your account settings
- You can delete your account at any time from your account settings
Your rights (under GDPR and Swiss data protection law)
You have the following rights regarding your personal data:
Right to access – Request a copy of the personal data we hold about you
Right to rectification – Correct any errors or incomplete information in your data
Right to erasure (right to be forgotten) – Request deletion of your personal data (with certain exceptions, such as legal obligations)
Right to restriction – Request that we limit how we process your data in certain circumstances
Right to data portability – Receive your data in a structured, machine-readable format, or request transfer to another service
Right to object – Object to processing based on legitimate interests, including marketing communications
Right to withdraw consent – If processing is based on consent, you can withdraw it at any time (doesn' t affect the lawfulness of past processing)
Right to lodge a complaint – If you' re unhappy with how we handle your data:
- Contact us first — we' ll do our best to resolve the issue
- If unresolved, you can file a complaint with your local data protection authority:
- Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
- EU/EEA: Your local Data Protection Authority
How to exercise your rights: Contact us via email or Discord (details at the top of this policy). We aim to respond within 30 days of your request.
Automated decision-making
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. AI-generated chat responses are part of the service you request and do not make decisions about you.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- New features or services
- Changes in laws or regulations
- Improvements to our data practices
When we make changes:
- We' ll post the updated policy here with a new ' Last Updated' date
- If the changes are significant, we' ll notify you via email or a prominent notice on the website
- Your continued use of Ai-Ko.chat after changes means you accept the updated policy
Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data:
Email: info@ai-ko.chat
Discord: discord.gg/YNDwUEqFmQ
Address: Virtual Graphics, Sonnmatt 28, 9122 Mogelsberg - Switzerland
We' re here to help and will respond as quickly as possible.
© 2025 Virtual Graphics. All rights reserved.
