Privacy Policy

To provide the service, we collect:

• Account info: email address, username, display name, and avatar.
• Date of birth: collected at signup solely to verify that you are 18 or older. It is not used for marketing, profiling, or shared with anyone. We do not verify identity documents.
• Content you create: characters, personas, and chat messages.
• Billing info: payment details are collected and stored by Stripe; we receive only your subscription status, plan, billing country, and customer ID.
• Usage data: first-party events such as page views and feature usage, stored directly by us.
• Technical data: IP address (used for rate limiting and abuse prevention) and browser info.

• To provide and operate the service, including chat and character features.
• To generate AI responses — your chat messages and character context are sent to AI models.
• To verify age eligibility and keep the platform adults-only.
• To process payments, apply VAT/GST where required, and manage subscriptions (via Stripe).
• To analyze usage and improve features, performance, and safety.
• To communicate with you about your account and important changes.
• To enforce the Community Guidelines and prevent abuse (rate limits, disposable-email checks).

We use the following services that may process your data:

• Supabase — authentication, database, and file storage hosting.
• Stripe — payment processing, subscription management, and tax calculation (Stripe Tax). Stripe stores your payment method and billing address; see Stripe's Privacy Policy for details.
• Lovable AI Gateway and AI model providers — AI model access for generating character replies and images. Chat content is transmitted to generate responses.
• Google and Discord OAuth — optional sign-in with those accounts.
• First-party analytics — aggregated usage metrics collected directly by us. We use no third-party analytics or advertising trackers.

Each provider has its own privacy policy governing how it handles data.

We keep your account and content for as long as your account is active. Chat messages are retained to provide conversation history. Free accounts see only the most recent stretch of each chat; Pro accounts see full history. Daily usage counters (rate limiting) are kept for at most a few days. When you delete your account, your auth record, profile, characters, chats, and messages are removed immediately, and your payment records are anonymized — retained only as long as tax and accounting law requires.

If you are in the EU/EEA or UK, you have the right to:

• Access and export: download a machine-readable copy of your data.
• Rectification: correct inaccurate profile information.
• Erasure: delete your account and personal data at any time.
• Restriction and objection: restrict or object to certain processing.
• Data portability: receive your data in a structured, commonly used format (the export covers this).

You can exercise export and erasure directly in-app on your profile page ("Download my data" and "Delete account"), or contact us for anything else. You also have the right to lodge a complaint with your local data protection authority.

We keep cookies to a minimum. We use no third-party advertising or tracking cookies. Specifically:

• Authentication: your session tokens are stored in your browser's local storage by Supabase Auth — not in cookies — and are sent only to our own backend.
• Preferences: interface settings are stored locally in your browser and never leave your device.
• Stripe Checkout: during payment, Stripe may set a short-lived functional cookie for fraud prevention and checkout continuity. Stripe's own privacy policy covers this.

Because we don't use tracking cookies, we don't show a cookie consent banner; if this ever changes, we'll ask for consent first.

omni-verse.chat is strictly for adults 18+. We collect a date of birth at signup and block registrations under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, please contact us and we will remove the account.

Our hosting and processors (Supabase, Stripe, AI model providers) operate globally, which may involve transfers of personal data to countries outside the EU/EEA and UK. Where that happens, we rely on the safeguards those providers offer (such as Standard Contractual Clauses) to protect your data.

Questions about this policy? Email hey@omni-verse.chat or use the contact page.