Privacy Policy

Effective Date: January 7, 2026

1. INTRODUCTION

UNSAID ("we," "us") takes your privacy seriously. This Privacy Policy explains how we handle your data under the General Data Protection Regulation (GDPR) and other applicable laws.

Data Controller:
UNSAID
Email: support@unsaid.ink

2. THE DATA WE COLLECT

We collect:

Account Data: Email address, payment history, and login credentials.
User Content: Chat logs, text files, and images you upload for analysis.
Generated Data: Chat history with the AI Persona and Vector Embeddings.

3. HOW WE PROCESS YOUR UPLOADS (SECURITY ARCHITECTURE)

We use a "Privacy by Design" approach to minimize risk:

A. Ephemeral Processing (Raw Files)

When you upload a chat file (TXT, JSON, Image), it is processed in volatile memory (RAM) only long enough to be analyzed.

Action: The raw file is PERMANENTLY DELETED from our systems immediately after the analysis/vectorization is complete. We do not archive your original screenshots.

B. Vector Embeddings (Long-Term Storage)

To allow the AI to "remember" the personality, we store "Vector Embeddings" (mathematical representations of the text). These are stored in a secure database associated with your account.

4. DATA RETENTION

We retain data based on your subscription status:

Raw Input Files: 0 Days (Deleted immediately).
Vector Embeddings & Chat History: Retained while your subscription is active.
Cancelled Subscriptions: If you cancel, we may retain your Vectors for a grace period (e.g., 90 days) to allow for re-activation. After this period, or upon your request, data is permanently deleted.

5. THIRD-PARTY SUB-PROCESSORS

We share encrypted data with trusted partners to operate the service:

AI Providers: (e.g., OpenAI, Anthropic) - We send anonymized context to generate responses. We opt-out of training on user data where available.
Database Providers: (e.g., Supabase) - To store encrypted Vector Embeddings.
Payment Processors: (e.g., Stripe) - To process subscriptions. We do not store your credit card details.

6. YOUR RIGHTS (GDPR & CCPA)

You have the following rights:

Right to Access: Request a copy of your personal data.
Right to Erasure ("Right to be Forgotten"): Request the deletion of your account and all associated Vectors.
Right to Rectification: Update your account information.

To exercise these rights, please contact us at [Insert Support Email].

7. INTERNATIONAL TRANSFERS

Data may be processed on servers in the United States (via our AI providers). We ensure these transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission to ensure GDPR compliance.

8. CHILDREN'S PRIVACY

The Service is strictly for users 18 years and older. We do not knowingly collect data from minors. If we discover a user is under 18, we will immediately delete their account and data.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.