Privacy Policy

Last Updated: January 15, 2026

Data Collection

We collect account information, persona configurations, conversation content, and usage analytics to provide and improve the service.

PII Detection & Masking

Automatic PII detection with tokenization protects sensitive information in conversations.

Sub-Processors

We use the following sub-processors: OpenAI, Anthropic, Groq, Mistral, Ollama (AI providers), Render (hosting), and Stripe (payments).

Data Retention

• Chat messages: Until deleted or account closure
• Persona configurations: Until deleted or account closure
• Usage analytics: 90 days, then aggregated
• Audit logs: 1 year
• PII mask maps: 30 days, auto-deleted

Your Rights (GDPR/CCPA)

You have the right to access, rectify, erase, port, restrict, and object to the processing of your data.

Security

We use HTTPS/TLS encryption in transit, AES-256 encryption at rest, rate limiting, and DDoS protection.

Contact

Privacy inquiries: privacy@personalabai.com. DPO: dpo@personalabai.com.