Privacy Policy

Last updated: November 2025

1. Introduction

AI Collective ("we", "us", "our", or "Company") operates the halai.online website and the AI Collective API service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Information Collection and Use

2.1 Types of Data Collected

• Personal Data: Email address, name, company name, billing information
• Usage Data: API requests, response times, error logs, IP addresses
• Device Data: Browser type, operating system, device identifiers
• Cookies: Session tokens, authentication cookies

2.2 Purpose of Collection

We collect and use personal data for the following purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service
• To provide customer support
• To gather analysis or valuable information so we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues and fraud
• To process payments and send related information

3. Security of Data

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

3.1 Data Protection Measures

• SSL/TLS encryption for all data in transit
• Hashed and salted passwords
• API keys are securely stored and never logged
• Regular security audits and penetration testing
• Access controls and authentication requirements

4. API Data and Queries

When you use our API:

• Your queries are processed by our AI specialists
• Query data is retained for 30 days for debugging and analytics purposes
• We do not use your queries to train competing AI models
• You retain all rights to your query content
• Queries containing sensitive data should be marked as private

5. Third-Party Services

We use third-party services for:

• Payment Processing: Stripe (see Stripe Privacy Policy)
• AI Processing: Google Gemini API (see Google Privacy Policy)
• Analytics: Usage analytics stored in our database

6. Data Retention

• Account Data: Retained while account is active, deleted 30 days after account deletion
• API Queries: Retained for 30 days for analytics and debugging
• Billing Data: Retained for 7 years for tax and legal compliance
• Logs: Retained for 90 days for security purposes

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt-out of marketing communications
• Withdraw consent at any time

8. GDPR Compliance

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). We comply with GDPR requirements including:

• Lawful basis for processing
• Data Protection Impact Assessments
• Data Processing Agreements with third parties
• Right to be forgotten
• Data portability

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete such information immediately.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.