Privacy Policy

Effective: January 13, 2025

1. Commitment to Privacy

Example LLC ("we", "us"), located at 1234 Example St, New York, NY 10011, protects user privacy through GDPR and CCPA-compliant practices. This policy governs data handling for Example Chat services.

2. Data Collection

Collected Information

  • Account Data: Email, username, OAuth tokens
  • Payment Data: Last 4 digits of cards, billing country (processed through Stripe)
  • Usage Data: Prompt history, generation metrics, feature interactions
  • Technical Data: IP addresses, device fingerprints, browser metadata

Purpose: Service delivery, security monitoring, and product improvement

3. Analytics & Tracking

Google Analytics

  • Anonymizes IP addresses within EU territories
  • Retains data for 26 months
  • Opt-out available via browser extension

Internal Analytics: We aggregate usage patterns without personal identifiers

4. Data Sharing

Service Providers

  • AWS Cloud Services
  • Stripe Payment Processing
  • Zendesk Support System

Legal Disclosures

  • Court orders/subpoenas
  • DMCA infringement notices
  • Child safety investigations

5. Data Retention

  • Active accounts: Retained until deletion request
  • Inactive accounts: Deleted after 24 months
  • Financial records: Maintained for 7 years

Deletion Process:

  • Requests processed within 30 days
  • Backups purged within 90 days
  • Legal holds may override deletion

6. Youth Protection

Age Verification: All users must confirm 18+ status during registration

Reporting: Suspected underage use? Contact compliance@example.chat

Minor Data Protocol:

  • Immediate account suspension
  • Parental notification requirement
  • Data deletion within 72 hours

7. User Rights

Access & Control

  • Data export requests
  • Correction of inaccuracies
  • Marketing opt-outs

Restrictions

  • Object to processing
  • Limit automated decisions
  • Withdraw consent

8. Security Measures

  • AES-256 encryption at rest
  • TLS 1.3 for data transit
  • Quarterly penetration testing

Breach Notification: We'll alert affected users within 72 hours of confirmation

9. International Transfers

Data may transfer globally under EU Standard Contractual Clauses

  • US hosting with GDPR-compliant partners
  • Canadian storage via PIPEDA-certified providers

10. Policy Updates

  • 30-day notice for material changes
  • Version history available on request
  • Continued use implies acceptance

Contact Information

This policy supplements our Terms of Service. Conflict resolution favors strictest privacy protections.