Introduction

This Privacy Policy describes how ELEVIUM SOFTWARE DESIGN L.L.C S.O.C ("Company", "we", "us", or "our") collects, uses, shares and protects personal information when you use ALLAI and related services (the "Service").

By using the Service, you consent to the collection and use of information in accordance with this Privacy Policy. The term "Website" refers to allai.market and all related applications, services, features and content offered by the Company.

Information We Collect

We may collect the following types of personal information:

• Contact details (name, email address, phone number).
• Payment and billing information.
• Uploaded files, prompts and user-generated content.
• IP address, device information, browser data and usage logs.
• Information received from third-party integrations and social logins.
• Cookies and similar tracking technologies data.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide, maintain, support and improve ALLAI and related services.
• Generate AI content based on your prompts and uploads.
• Process payments, manage subscriptions and handle billing.
• Communicate with you about the Service, updates and support.
• Prevent abuse, fraud and unauthorized access.
• Comply with applicable laws, regulations and legal obligations.
• Analyze usage patterns to improve user experience.

Using ALLAI in ChatGPT and Other AI Assistants (MCP Connector)

You can connect ALLAI to ChatGPT and other AI assistants through our MCP connector. When you use ALLAI this way, we process the following:

• The prompts you write, the images or files you attach or reference, the model you select, and the generation options you set.
• Authentication data from OpenAI's OAuth sign-in, which links the connection to your ALLAI account; where you grant it, this includes your email address and a stable account identifier.
• The result: generated images and videos and their originating prompt are stored in your ALLAI gallery so you can find them again, and your coin balance is updated to reflect the cost of each generation.
• We do not use your prompts, uploaded files or generated content to train our own models, and we do not permit our providers to use them to train theirs.

AI Model Providers and Other Recipients

To fulfil a generation, edit, animation or upscale, we transmit your prompt and any input media to the third-party AI model provider you choose. Depending on the selected model, recipients may include:

• AI model providers: OpenAI (GPT Image, Sora), Google (Gemini, Veo), ByteDance (Seedream, Seedance), Black Forest Labs (Flux), Kuaishou (Kling), MiniMax (Hailuo), xAI (Grok), Alibaba (Wan), Runway, Topaz Labs, and our GPU compute providers.
• ChatGPT / OpenAI: when you use ALLAI inside ChatGPT, your request reaches us through OpenAI's platform.
• Payments: Stripe processes coin top-up payments.
• Infrastructure: Google Cloud provides our hosting, storage and content delivery.
• Each recipient processes the data only to deliver the functionality you requested and under its own privacy terms.

Information Sharing

We may share your information with the following parties:

• Service providers: infrastructure, hosting, analytics, payment processing, customer support and data storage providers acting on our behalf.
• Legal authorities: where required by law, regulation or legal process.
• Safety and rights protection: to protect rights, safety and property of the Company, our users and the public.
• Business transfers: in connection with mergers, acquisitions, reorganizations or asset transfers.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure or destruction.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

Data Retention

Account data (such as your email, account identifier and coin balance) and your generation history are retained while your account is active.

Generated images and videos and their prompts remain in your gallery until you delete them or close your account. Input images you upload for a generation are deleted automatically 30 days after upload; our storage provider keeps a deleted object recoverable for a further 7 days before erasing it permanently.

When you close your account, we delete or anonymize your personal data within 30 days, except where longer retention is required by law, or is necessary to resolve disputes, prevent fraud, ensure security or enforce our agreements.

International Data Transfers

Your data may be processed and stored in countries other than your country of residence to the extent necessary for infrastructure, hosting, analytics, support and compliance with legal obligations.

Where required by applicable law, we implement appropriate safeguards for cross-border data transfers.

Your Rights

Depending on your jurisdiction, including the EEA, the United Kingdom, Switzerland and California, you may have the following rights:

• Right to access your personal data.
• Right to correct inaccurate or incomplete data.
• Right to delete your personal data.
• Right to object to or restrict processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with a supervisory authority.

How to Exercise Your Rights and Controls

You can view your generation history and coin balance at any time in the app. To delete specific generations, correct your information, export your data, withdraw consent, or permanently delete your account and the personal data associated with it, contact us using the details at the end of this policy and we will action your request within the timeframe required by applicable law.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage and provide personalized content.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices, content or conduct of third-party websites. We encourage you to review the privacy policies of any third-party services you visit.

Use of Pinterest API

We may use the Pinterest API and related Pinterest developer tools to provide certain integrations and features of the Service. Our website and application are not endorsed by, affiliated with, or otherwise officially connected with Pinterest.

If we receive data, content or metadata from Pinterest, such information is used solely to provide the relevant functionality of the Service at the user's request, as well as for technical support, security, compliance with applicable law and improvement of the Service in accordance with this Privacy Policy and applicable law.

If a user disconnects Pinterest from the Service, we cease further access to Pinterest data through such connection. Previously obtained Pinterest data is deleted or anonymized within a reasonable period, unless longer retention is required by law, for dispute resolution, fraud prevention, security or fulfillment of our legal obligations.

We do not sell, resell, publish, distribute or otherwise transfer to third parties any Pinterest content or data obtained through Pinterest, except where necessary for service providers acting on our behalf under confidentiality obligations, or where such disclosure is required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time by publishing a new version on the Website. Continued use of the Service after the effective date of changes constitutes acceptance of the updated Privacy Policy.

We will notify you of material changes through the Service or by email where required by applicable law.

Pinterest API

We may use the Pinterest API and related Pinterest developer tools to enable certain integrations and features of the Service. Our website and application are not endorsed by, directly affiliated with, or otherwise officially associated with Pinterest.

If we receive data, content or metadata from Pinterest, we use such information only for providing the relevant Service functionality requested by the user, for technical support, security, compliance and improving the Service in accordance with this Privacy Policy and applicable law.

If a user disconnects Pinterest from the Service, we stop further access to Pinterest data through that connection. Pinterest data previously received by us is deleted or anonymized within a reasonable period, unless a longer retention period is required by law, necessary for dispute resolution, fraud prevention, security, or to comply with our legal obligations.

We do not sell, resell, publish, distribute or otherwise disclose Pinterest content or data obtained through Pinterest to third parties except to service providers acting on our behalf under confidentiality obligations, or where disclosure is required by law.