Privacy Policy

This Privacy Policy explains how Delphi AI collects, uses, and protects your information. By using the Service, you consent to the practices described here.

1. Information we collect

You provide:

• Account info: name, email, hashed password.
• Billing info: handled by Stripe; we receive the last 4 digits, card brand, and billing country only.
• Content you upload: portraits, reference media, prompts, voice samples.

Collected automatically:

• Device, browser, IP (hashed), and usage telemetry (page views, generation events).
• Cookies and similar technologies (see our Cookie Policy).

2. How we use your data

• To operate, secure, and improve the Service.
• To dispatch your content to partner AI models (Sora 2, Nano Banana, HeyGen, ElevenLabs, Suno) so they can render it.
• To process payments via Stripe.
• To send transactional email (welcome, trial warnings, receipts, content-ready notifications).
• To detect fraud, abuse, and violations of our Terms.

3. AI model partners

Generated content is processed through third-party AI APIs. Each partner has its own privacy posture. Inputs you submit may transit through their infrastructure. We never sell your content. We work only with partners who contractually commit to not training on our customers' inputs by default.

4. Data sharing

We do not sell your personal information. We share data only with:

• Service providers (hosting, email delivery, payment processing) under data-processing agreements.
• AI model partners required to fulfill your generation request.
• Law enforcement when legally compelled.

5. Retention

We retain account data while your account is active. Generated content is retained per your tier's storage policy. You may request deletion at any time by emailing support@delphiai.ca; deletion will be completed within 30 days.

6. Your rights

Depending on your jurisdiction (including GDPR, CCPA), you may have rights to access, correct, export, or delete your data. Send requests to support@delphiai.ca.

7. Security

We use industry-standard practices: encryption in transit (TLS), encryption at rest, hashed passwords (bcrypt), and least-privilege access controls. No system is perfectly secure; report concerns to security@delphiai.ca.

8. Children

The Service is not intended for users under 18. We do not knowingly collect data from minors.

9. International transfers

Data may be processed in the United States, Canada, the EU, and partner-provider regions. We rely on Standard Contractual Clauses where required.

10. Updates

Material changes will be communicated by email or in-product. The "last updated" date above reflects the current version.

11. Contact

Privacy questions: privacy@delphiai.ca.