PRIVACY POLICY

1. Information We Collect

1.1 Information You Provide

We may collect information you provide directly to us, including:

• **Telegram account information:** your Telegram user ID, display name, and, if you voluntarily share it, your phone number. We do not collect email addresses, passwords, or profile details unless separately provided through another platform (e.g., website or app, if available).
• **Payment information:** limited billing details, payment method type, and transaction identifiers processed securely through third-party payment providers.
• **User inputs and generated content:** text prompts, uploaded reference files, generated images or videos.
• **Support communications:** any messages, requests, or feedback you send to us.

We do not require or intentionally collect personally identifying images or biometric information.

1.2 Information Collected Automatically

When you use the Service through our Telegram bot, we do not use cookies or analytics identifiers, and we do not collect your IP address or geolocation.

Telegram may independently collect limited technical data (such as device type and connection metadata) as described in the Telegram Privacy Policy.

If the Service is available through a website or mobile app in the future, we may collect limited technical information (usage data, cookie files, IP address and approximate geolocation) necessary for operation of the Service.

1.3 Information from Third Parties

We may receive limited data from:

• Payment processors confirming successful transactions.
• Analytics or advertising partners providing aggregated statistics.
• Optional sign-in providers (e.g., Google, Apple) — subject to your chosen account permissions.

For Telegram-based interactions, user identity data is received directly through Telegram's secure API and is not supplemented or combined with external sources.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service.
• Authenticate users and secure accounts.
• Process transactions and deliver purchased credits or subscriptions.
• Generate, display, and store AI-produced images and videos according to your inputs.
• Respond to support requests and technical inquiries.
• Enforce our User Agreement and prevent misuse or illegal activity.
• Analyze aggregated usage patterns to enhance system performance and stability.
• Comply with applicable legal obligations.

We process personal data only where there is a lawful basis (e.g., consent, contractual necessity, legitimate interest, or legal requirement).

3. Cookies and Tracking Technologies

Our Telegram bot does not use cookies, web beacons, or similar tracking technologies.

If you access the Service via a website or mobile application, such platforms may use cookies or local storage solely for session management or preference saving. You will be notified of and may control such use through your browser or app settings.

4. Disclosure of Information

We do not sell or rent personal data.

We may share limited data with:

• Service providers (hosting, analytics, payment processing, security, email delivery).
• Legal authorities where required by law, subpoena, or valid court order.
• Successors or affiliates in the event of a merger, acquisition, or reorganization, subject to equivalent privacy protections.

Each recipient is bound by contractual or legal obligations to handle data securely and only for authorized purposes.

5. Data Retention

We retain personal data only as long as necessary to operate the Service, comply with legal obligations, or resolve disputes. Input data (text prompts, reference images, and related files) are processed only during the active session and deleted automatically once processing is complete. Any generated content transmitted through our Telegram bot is deleted within 24 hours of generation. We do not use user prompts or generated images to train our models or for any secondary purpose.

We retain personal information only as long as reasonably necessary for:

• Account maintenance and transaction records;
• Compliance with legal obligations; and
• Resolution of disputes or enforcement of agreements.

Telegram-related data (such as user ID and chat messages) is retained only as long as necessary to fulfill requests and is deleted automatically within Telegram or by user request, in accordance with Telegram's data retention practices.

6. Data Security

We implement appropriate technical and organizational measures to protect data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure. However, no online service is completely secure; users acknowledge that transmission of information over the Internet involves some inherent risk.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction or deletion of inaccurate or unnecessary data.
• Withdraw consent for processing where consent was the legal basis.
• Object to or restrict certain processing activities.
• Request data portability.

Requests may be submitted to a dedicated email address indicated in section 11 of this Privacy Policy.

8. Protection of Minors

Our Service is not designed or intended for use by individuals under the age of majority in their jurisdiction (normally 18 or 21 years). We do not knowingly collect, process, or store any personal data, photos, or content relating to minors. We employ automated tools to identify and restrict processing of images that may depict minors and promptly delete such data. Users are encouraged to report suspected violations via the dedicated email address indicated in section 11 of this Privacy Policy.

9. Third-Party Tools and Integrations

We may integrate third-party tools, APIs, or external services to enhance functionality. Your use of such tools is governed by the respective providers' terms and privacy policies. Each third-party provider processes data in accordance with its own privacy policy and applicable data-protection laws.

We are not responsible for the privacy practices or policies of external services that operate independently of our control. You are encouraged to review the privacy policies of any third-party services you interact with through the Service.

For users accessing the Service through the Telegram bot, we rely on Telegram's infrastructure to transmit and temporarily store messages and media. Telegram operates as an independent data controller for such processing and applies its own privacy policy.

10. Governing Law

This Privacy Policy is governed by the laws of the Dominican Republic.

11. Contact Information

For privacy-related questions, concerns, or to exercise your rights, please contact us via dedicated email address: abuse@erosai.at