Privacy Policy

Effective March 13, 2026 · Elenchus Inc.

1. What We Collect

Account data: Username and hashed password. We do not collect your real name or email unless you provide it voluntarily (e.g., waitlist signup).
Conversation data: Messages you send to characters and the AI-generated responses. Stored to maintain conversation continuity.
Usage data: Which characters you interact with, message counts, and session timestamps. Used for service improvement and abuse prevention.
Technical data: Vercel Analytics collects anonymous page views and performance metrics. No cookies are used for tracking.

2. How We Use Your Data

To provide and maintain the Service — generating character responses and preserving conversation history
To improve character behavior and system quality
To detect abuse, enforce rate limits, and protect system integrity
To communicate with you about the Service (only if you provided contact info)

3. Third-Party Processors

Your messages are processed by third-party AI providers to generate character responses. These providers process text transiently and do not retain your data for their own training purposes. Current providers include Anthropic (Claude) and Google (Gemini). Conversation history is stored on our own servers. The frontend is hosted on Vercel. We select providers that maintain appropriate data protection standards.

4. What We Do NOT Do

We do not sell your data to anyone
We do not use your conversations to train AI models
We do not share your data with advertisers
We do not use tracking cookies
We do not collect biometric data, location data, or device identifiers

5. Data Retention

Conversation data is retained for the duration of your account. You may request deletion of your data at any time by contacting us. Account deletion removes all associated conversation history. During the beta period, we may periodically purge inactive accounts and their data.

6. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and token-based authentication. However, no system is perfectly secure. You use the Service at your own risk.

7. Your Rights

You have the right to: (a) request a copy of your data; (b) request deletion of your data; (c) withdraw from the beta at any time. To exercise these rights, contact us at the address below.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that a minor has created an account, we will delete it promptly.

9. Changes

We may update this policy as the Service evolves. Material changes will be communicated through the Service. Continued use after changes constitutes acceptance.

10. Contact

Privacy inquiries: hello@heyvesper.com