Privacy Policy

Data we collect

We collect information you provide, such as your name, email address, support messages, files, media, and Core chats. We also process information about your account, scopes, subscriptions, Spark transactions, and use of the services.

We collect technical information needed to operate and secure the services, such as IP address, device and browser information, diagnostics, and security logs. Payment checkout is handled by a payment provider; we do not ask you to enter payment card details in the app.

How we use data

We use this information to create and secure accounts, store and organize your content, provide Core and other requested features, process subscriptions and Spark charges, respond to support requests, prevent abuse, and comply with legal obligations.

How we share data

We share data as needed with providers that support hosting, storage, authentication, payments, email, analytics, customer support, security, and AI features. Content submitted to an AI feature may be processed by an external model provider to return the requested result. We may also share data at your direction, to comply with law, protect rights and safety, or as part of a business reorganization.

We do not sell personal data or share it with third parties for targeted advertising.

Delete your account and data

You can delete your account in the app's Settings. You can also email [email protected] from the relevant address to request account or data deletion. We may verify your identity before acting on an emailed request.

After verification, we delete or deidentify covered data within 30 days. Copies in encrypted backups are removed through the normal backup cycle within 90 days. We may retain limited fraud prevention, security, or legal records for as long as required by law or reasonably necessary to establish or defend legal claims.

Delete selected data without deleting your account

You can delete individual files and folders in the app without deleting your account. For other specific data, email [email protected] from the relevant address and identify what you want removed. After verification, we delete or deidentify covered data within 30 days, with backup copies expiring within 90 days, subject to the limited retention described above.

Retention

We retain personal data only for as long as needed for the purposes described in this policy. Retention periods depend on the type of data, security needs, contractual obligations, and legal requirements. When data is no longer needed, we delete or deidentify it.

Storage is charged from prepaid Sparks hourly. If the available balance cannot cover storage, no debt or grace-period backcharges accrue and uploads can continue. Existing data remains available for export, deletion, and recovery before deletion begins. Adding enough Sparks before deletion begins restores prospective storage charging. After 90 consecutive days without enough Sparks to cover storage, stored files and media are permanently deleted; adding Sparks after deletion begins cannot restore them.

Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to withdraw consent where processing relies on consent. Make a request by emailing [email protected] from the relevant address. You may also have the right to complain to your local data protection authority.

Security and international processing

Vorinthex AI hosts and processes personal data in the United States. If you access the services from outside the United States, your personal data may be transferred to, stored in, and processed in the United States and other countries where Vorinthex AI or its service providers operate. Those countries may have data-protection laws different from those in your country.

We use administrative, technical, and organizational safeguards designed to protect personal data, including safeguards for international transfers where required by applicable law. No system is completely secure, so we cannot guarantee absolute security.

Children

Vorinthex AI services are not directed to children under 13, or under the higher minimum age required in their country. We do not knowingly collect personal data from children below that age. Contact us if you believe a child has provided personal data so we can investigate and delete it.

Changes and contact

We may update this policy as our services or legal obligations change. We will post the updated policy here and revise its effective date.

For privacy questions or requests, contact Vorinthex AI at [email protected].