Privacy Policy

1. Controller

The controller of your personal data under the GDPR is AI Marcus, registered in Estonia. Contact: privacy@aimarcus.eu.

2. What we collect

• Account data — email, hashed password (bcrypt), display name, referral code, signup IP, signup user-agent.
• Usage data — per-call: model slug, endpoint, timestamps, latency, credits spent. Prompt and response payloads are stored only when needed for abuse review or billing reconciliation, and purged on a 30-day rolling window unless a longer retention is required by law.
• Billing data — credit transactions, payment metadata returned by Stripe (last-four digits, country, status). Card numbers and CVC are never stored on our servers.
• Cookies & analytics — a session cookie (aigen.sid), a language preference cookie (aig_lang), an HttpOnly client-id cookie (aig_cid) used only for first-party analytics, and Google Analytics (_ga) for aggregated site traffic. No advertising identifiers; no cross-site tracking.
• Email — the address you give us is used for verification, billing notices, low-balance alerts, and operational announcements. We do not sell or rent it.

3. Legal basis & purposes

• Contract performance — account, billing, API access, support.
• Legitimate interests — abuse prevention (signup IP / UA logging, rate limits), security, internal analytics on aggregated traffic.
• Consent — optional product newsletter (you can opt out with one click).
• Legal obligation — Estonian and EU tax / accounting retention, court orders.

4. Recipients & transfers

To deliver the Service we share specific data with the following processors. Each is bound by a Data Processing Agreement and processes data only on our instructions.

• AI providers (OpenAI, Anthropic, Google, OpenRouter, Replicate, Black Forest Labs, ByteDance / fal-style, Suno, ElevenLabs and similar, depending on which model your call targets) — receive the request body needed to fulfil the call. Providers have their own privacy terms.
• Stripe (Ireland / U.S.) — payment processing.
• Google Analytics 4 — aggregated site analytics. IP anonymisation is enabled where supported.
• Cloud infrastructure & mail — our hosting partner in the EU and our SMTP relay for transactional email.

Where data is transferred outside the EU/EEA, we rely on the European Commission’s standard contractual clauses or an equivalent safeguard.

5. Retention

• Account data: while your account is active and up to 12 months after deletion for billing reconciliation.
• Usage logs (timestamps, credits, model slug): up to 24 months.
• Prompt / response payloads: 30 days, unless a longer retention is required for an abuse investigation.
• Billing records: 7 years (Estonian tax law).

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.

To exercise any of these rights, write to privacy@aimarcus.eu. We respond within 30 days.

7. Security

We use TLS for all traffic, bcrypt for password hashing, SHA-256 hashes for verification tokens (raw values are never stored), per-IP rate limiting on signup and API key creation, and an audit log for blocked signups. API keys are only displayed once on creation; we store SHA-256 hashes thereafter.

8. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from anyone under that age.

9. Changes

We may update this policy; material changes are announced on the dashboard and by email at least 14 days before they take effect.