Privacy Policy

1. Introduction

chatGTS is a service operated by [Legal Entity, LLC] (“we,” “us,” or “our”). We are committed to protecting the privacy of individuals who access and use our Services. This Privacy Policy describes how we collect, use, share, and safeguard personal information through our website at chatgts.com, applications, and any associated services, tools, or communications (collectively, the “Services”). It also explains the rights and choices available to users regarding their personal data.

By accessing or using the Services, you agree to the practices described in this Privacy Policy and consent to the collection, use, and disclosure of your information as outlined herein. This Policy is incorporated into and forms part of our Terms & Conditions. If you do not agree with our practices, please do not use the Services.

We recognize the importance of privacy and data protection in today’s digital environment, and we strive to handle your personal information in accordance with applicable data protection laws, including but not limited to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other relevant U.S. state privacy laws.

This Privacy Policy applies to all users of the Services, regardless of location, and governs how we handle personal information provided to or collected by us. If you have any questions or concerns about this Privacy Policy or our data practices, please contact us using the details provided in the “Contact Us” section below.

2. Information We Collect

In the course of providing access to and use of our Services, we collect a range of personal and non-personal information. The information we collect depends on your interactions with us and the Services and may include information that you voluntarily provide, information we collect automatically, and information we obtain from third-party sources. We strive to collect only what is necessary, relevant, and proportionate to the purposes described in this Privacy Policy.

Information you provide to us directly:

• Account and profile information: when you create an account or update your profile, we collect identifiers such as your name, email address, and other registration details.
• Billing and payment information: if you purchase a subscription or pay for Services, we collect certain billing details, including transaction records and payment method (processed through third-party payment providers; we do not store full credit card numbers on our servers).
• User submissions and chat inputs: we collect the content of the prompts, questions, messages, files, or other data you enter into the platform, including associated metadata such as timestamps or session identifiers. This may include personal or sensitive information if you voluntarily include it in your input.
• Support and communication records: if you contact us for support, feedback, or other inquiries, we collect your contact details and the content of your communications with us, including attachments and correspondence history.

Information we collect automatically:

• Device and technical information: such as your IP address, browser type and version, operating system, device type and identifiers, screen resolution, and language settings.
• Usage and interaction data: information about your interactions with our platform, including access times, features used, pages viewed, session duration, navigation paths, and error logs.
• Log and diagnostic data: system-generated logs that support debugging, performance monitoring, fraud detection, and system administration.
• General geolocation data: approximate location information inferred from your IP address to support localization and security features.

Information collected via cookies and tracking technologies: we use cookies, pixels, local storage, scripts, and similar technologies to collect information about your browsing behavior, device settings, and engagement with the Services. This may include analytics data and information necessary for user authentication or session management. For more information, please refer to the Cookies and Tracking section of this Policy.

Information from third parties: we may receive information about you from third-party sources, including analytics providers and data processors that provide aggregated or pseudonymized usage data; payment processors and subscription platforms that notify us of completed transactions, billing disputes, account status, or failed payments; and sign-in providers (such as Google or Apple) that share basic profile information when you choose to authenticate with them.

We may also collect, use, and disclose aggregated, anonymized, or de-identified data that does not identify any individual user and is not considered personal information under applicable privacy laws. We maintain appropriate technical and organizational safeguards to ensure the confidentiality and integrity of the data we collect. We do not sell your personal information.

3. How We Use Your Information

We use the information we collect for a variety of business, operational, and legal purposes in connection with the delivery, improvement, and protection of our Services, including:

• To provide and operate the Services: delivering, maintaining, and administering the platform, processing transactions, providing requested features, and generating responses to your inputs.
• To improve and optimize the Services: analyzing usage patterns, session behavior, error logs, and aggregated data to troubleshoot issues, enhance stability and performance, develop new features, and refine the user experience.
• To process payments and manage subscriptions: facilitating one-time purchases and recurring subscriptions, confirming transactions, sending invoices or receipts, handling failed payments, and managing subscription status.
• To communicate with you: administrative, transactional, or support communications such as account confirmations, activity notices, responses to inquiries, and notices about changes to our Services or policies. Where permitted, we may also send service-related or promotional communications, subject to your preferences.
• To provide customer support: responding to questions, requests, or technical issues, and investigating and resolving bugs, complaints, or disputes.
• To secure the platform and enforce policies: monitoring for suspicious activity, detecting fraud or abuse, authenticating user accounts, enforcing our Terms & Conditions, and preventing unauthorized or illegal activity.
• To comply with legal and regulatory obligations, and to enforce our rights and defend against legal claims.
• With your consent, where required by law — which you may withdraw at any time without affecting the lawfulness of prior processing.

We do not train our own generalized AI models on your identifiable inputs. Responses on the platform are generated by third-party AI model providers accessed through their official APIs (see the “Use of AI Technologies” section below). We do not use data obtained from third-party sign-in providers (such as Google) for any purpose beyond authentication and the basic account profile, and we never use such data to develop, improve, or train AI or machine-learning models.

We do not use your personal information to make automated decisions that have a legal or similarly significant impact on you without human involvement. We do not sell or license your personal information to third parties.

4. Purpose of Processing

We process personal information to fulfill specific, legitimate, and proportionate purposes necessary for the operation, maintenance, and continuous improvement of our Services. Primarily, we process your information to enable access to our chat-based AI platform and ensure that its core functionality — including real-time conversation and delivery of AI-generated responses — operates as intended. This includes facilitating account management, responding to inquiries, delivering requested content, and maintaining overall service availability and performance.

We also process information to improve our Services over time. By analyzing aggregated or anonymized data from user interactions, we monitor platform usage, optimize system performance, detect and correct technical issues, and develop new features. Processing may also be necessary to fulfill contractual obligations (such as managing subscriptions and processing payments), to comply with legal obligations, to maintain platform security, to prevent abuse or fraudulent behavior, and to enforce our Terms & Conditions.

In certain cases we rely on your consent — for example, when you opt in to receiving promotional emails. You may withdraw your consent at any time, subject to applicable legal limitations. Each purpose of processing is guided by the principle of data minimization: we only collect and use information that is reasonably necessary and directly relevant to fulfilling that purpose, and we do not use personal data in a manner incompatible with the original purpose unless we obtain your consent or are otherwise permitted by law.

5. How We Share Your Information

We do not sell or rent your personal information. In the course of operating our Services, there are limited circumstances under which we may share your information with third parties, always with appropriate safeguards in place:

• AI model providers: the content of your prompts and conversations is transmitted to the third-party AI provider whose model you are using (for example OpenAI, Anthropic, or Google) through their official APIs, solely to generate responses. These transmissions occur under API terms that restrict the provider’s use of the content to providing the service.
• Service providers: vendors that perform essential business functions on our behalf — hosting infrastructure, payment processing, customer support tooling, security monitoring, and email delivery. These providers are contractually bound to process your information only as necessary to fulfill their specific functions.
• Analytics providers: tools that help us understand how users interact with the platform, typically receiving pseudonymized or aggregated behavioral data such as session duration, feature usage, and device type.
• Third-party integrations you choose to use: where you voluntarily engage with third-party tools or content through our platform, relevant information may be shared to facilitate that functionality, governed by the third party’s own privacy policy.
• Legal requirements: we may disclose personal information where required by law or where we reasonably believe disclosure is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud or misuse of the Services, or protect the personal safety or rights of users, employees, or the public.
• Business transactions: in the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction, with notice provided as required by applicable law.

We may share aggregated or de-identified data that does not identify you personally for statistical analysis, research, product development, or marketing purposes. We do not permit third parties to access your personal information for their own independent marketing purposes.

6. Use of AI Technologies

Our Services provide access to artificial intelligence (“AI”) models that generate text and image responses to user inputs. chatGTS is an independent platform: the models available through the Services are developed and operated by third-party providers and are accessed through their official APIs. We are not affiliated with, endorsed by, or sponsored by those providers.

When you engage with the Services, the content you input — such as prompts, queries, messages, or uploaded files — is processed by our systems and transmitted to the selected third-party model provider to generate a response. This processing occurs in accordance with strict security protocols and under API terms designed to limit the provider’s use of the content to delivering the service.

We do not use your identifiable inputs to train AI models. We may use de-identified and anonymized data derived from user interactions to evaluate platform performance and improve our Services; such data is stripped of personal identifiers and handled in compliance with applicable data protection laws. We do not use your personal information — including your name, contact information, payment details, or account identifiers — for training or fine-tuning any public or third-party AI models.

By using the Services, you understand and acknowledge that your interactions are powered by AI systems that may generate responses that are probabilistic, approximate, or imperfect in nature. You agree to use the Services responsibly and not to rely solely on AI-generated output for legal, medical, financial, or other critical decisions without independent human review or verification.

7. Legal Basis for Processing

We process your personal information only when we have a valid legal basis to do so under applicable data protection laws, including the GDPR and CCPA where applicable. In most cases, we rely on one or more of the following legal bases:

• Performance of a contract: processing necessary to provide access to our Services, deliver functionality, manage subscriptions or purchases, respond to inquiries, and maintain your account.
• Legitimate interests: activities such as improving our Services, preventing fraud, ensuring the security of our systems, understanding user behavior, and marketing our offerings to existing users — balanced against your rights and freedoms.
• Consent: for example, when you sign up to receive promotional communications. You have the right to withdraw consent at any time.
• Compliance with legal obligations: responding to lawful requests from public authorities, maintaining business records, or fulfilling tax or accounting requirements.
• Protection of vital interests: in rare cases, such as a security incident posing a threat to safety.

If you have questions about the legal bases relied upon for a specific processing activity, you may contact us for further clarification.

8. Cookies and Tracking

We use cookies and similar technologies to enhance the functionality and performance of our Services, personalize user experiences, analyze usage, and support marketing efforts. Cookies are small data files stored on your browser or device that help remember your activity and preferences over time, enabling features such as login continuity, session authentication, and retained settings. We employ strictly necessary cookies essential to the operation of the Services, performance cookies that measure and enhance system efficiency, functional cookies that allow personalization, and — where applicable — marketing cookies, subject to your preferences.

We may also use pixel tags, embedded scripts, and local storage to capture user activity, diagnose system issues, and understand engagement. Third-party providers — such as analytics services and our live-chat support vendor — may set their own cookies or scripts through the Services, collecting data in accordance with their own privacy policies. Where legally required, we will obtain your consent before deploying non-essential cookies, and you may control or disable cookies through your browser or device settings (which may impact certain features).

At present, our Services do not respond to “Do Not Track” signals transmitted by web browsers, as no uniform industry standard for interpreting such signals has been established. Tracking data is retained only as long as necessary to fulfill the purpose for which it was collected.

9. Your Rights and Choices

Depending on your location, applicable data protection laws may provide you with specific rights regarding your personal data. These rights are not absolute and may be subject to legal limitations, including our need to retain certain data for legitimate business or legal purposes. Subject to applicable law, you may have the right to:

• Access the personal information we hold about you, receive a copy, and understand how it is used and shared.
• Request correction of inaccurate or outdated information.
• Request deletion of your information, especially when it is no longer necessary for the purposes for which it was collected or when you withdraw previously granted consent.
• Restrict or object to processing in certain contexts, such as direct marketing or processing based on legitimate interests.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Request transfer of your personal data to another organization (data portability), where technically feasible.
• Lodge a complaint with a supervisory authority or regulator if you believe your rights have been violated (EEA, UK, California, and certain other jurisdictions).

If you no longer wish to receive promotional communications, you may opt out at any time by following the unsubscribe instructions in those messages or by contacting us directly. Even if you opt out of marketing emails, we may still send you non-promotional communications related to your account or transactions. To exercise any of your rights, contact us using the information in the “Contact Us” section; we may need to verify your identity before fulfilling certain requests.

10. Account Deletion

You may request the deletion of your account and associated personal information at any time from the Help Center or by contacting us through the channels listed in the “Contact Us” section. Upon receiving your request, we will take reasonable steps to verify your identity before proceeding. Once verified, we will permanently delete or de-identify your account data from our active systems, subject to the limitations below.

Account deletion is irreversible. Once your account is deleted, you will lose access to all associated data, conversations, content, and purchase history, and we are unable to recover deleted data. We encourage you to download any information you wish to retain before initiating a deletion request.

Certain information may be retained for a limited period in backup archives for business continuity, or as necessary to comply with legal obligations, resolve disputes, enforce our Terms, detect or prevent fraud, and protect the integrity of our platform. If your account was created through a third-party sign-in provider (e.g., Google or Apple), you may also wish to revoke the connection through that provider. Ceasing use of the Services does not by itself constitute an account deletion request.

11. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including providing the Services, maintaining and improving platform performance, complying with legal obligations, resolving disputes, and enforcing our agreements. Retention periods vary depending on the nature of the information and applicable legal or regulatory requirements — account data, transaction history, and usage logs may be retained for as long as your account remains active and for a reasonable period thereafter.

When we no longer have a legitimate need to retain personal information, we will delete, anonymize, or aggregate it so that it no longer identifies you. Where immediate deletion is not feasible (for example, in backup systems), we securely store the information and isolate it from further processing until deletion becomes possible. We may retain de-identified or aggregated data, which no longer constitutes personal information, for research, analytics, benchmarking, or product development purposes.

12. Data Security

We are committed to protecting the integrity, availability, and confidentiality of your personal information through comprehensive administrative, technical, and physical security measures. Data transmitted between your device and our systems is encrypted using industry-standard protocols such as Transport Layer Security (TLS). We use encryption at rest for sensitive stored data and secure credential management techniques to protect account information. Our systems are hosted with leading cloud infrastructure providers that maintain strict physical and operational security controls.

Internally, we follow the principle of least privilege: only authorized personnel with a clear business need have access to user data, and such access is reviewed and monitored. We employ access logging, monitoring, and vulnerability management to detect and respond to unauthorized access or unusual activity, and we maintain an incident response protocol for potential threats or breaches.

While we take extensive precautions, no system can be guaranteed to be 100% secure, and transmission of data over the internet inherently involves certain risks. In the event of a data breach that poses a significant risk to your rights or freedoms, we will notify you and any applicable regulatory authorities in accordance with legal requirements.

13. Children’s Privacy

Our Services are not directed to, intended for, or designed to attract individuals under the age of 18 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect or solicit personal information from children under this age. If you are under 18, you are not permitted to access or use the Services, and you should not provide any personal information through our website, application, or other communication channels.

If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold, we will take prompt steps to delete that information from our records. Parents and legal guardians who become aware that their child has accessed the Services or submitted personal information may request removal of the data by contacting us using the information in the “Contact Us” section.

14. International Users

Our Services are operated from the United States and are primarily intended for users located within the United States. If you access the Services from outside the United States, you acknowledge and agree that your personal information will be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate, which may not offer the same level of data protection as your home country.

We take appropriate measures to ensure that international data transfers comply with applicable laws, including the GDPR. Where required, we implement safeguards such as Standard Contractual Clauses approved by the European Commission or rely on other lawful bases to support cross-border transfers. If you are a resident of the EEA, UK, Switzerland, or another jurisdiction with specific data protection laws, you may have additional rights as described in the “Your Rights and Choices” section, and we will respond to requests in accordance with applicable local laws.

15. California Residents

If you are a resident of California, you are entitled to certain rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Over the past twelve (12) months, we may have collected identifiers (such as name, email address, and IP address), internet or other electronic network activity information (such as browsing behavior and usage metrics), general geolocation data, commercial information (such as transaction or subscription history), and inferences drawn from such information. We do not collect sensitive personal information as defined by the CPRA, such as Social Security numbers or precise geolocation.

We do not sell or share your personal information with third parties for monetary consideration or for cross-context behavioral advertising, as those terms are defined under California law. As a California resident, you may exercise the rights to know, delete, and correct your personal information; to opt out of sale or sharing (not applicable, as we do not sell or share); to limit the use of sensitive personal information (not applicable, as we do not collect it); and to be free from discriminatory treatment for exercising any of these rights.

To exercise any of your rights under California law, please contact us using the details in the “Contact Us” section. We may request verification of your identity before processing your request, and you may authorize an agent to make a request on your behalf with signed permission.

16. Third-Party Links

Our Services may contain links to websites, applications, or services operated by third parties. Any such links are provided for your convenience only. We do not endorse, monitor, or make any representations regarding the content, accuracy, privacy practices, or security of third-party websites or services, and your interactions with them are governed by their own privacy policies and terms. We disclaim all liability arising from your access to or use of any third-party links, and your use of third-party services is entirely at your own risk.

17. Changes to This Policy

We reserve the right to update, revise, or otherwise modify this Privacy Policy at any time to reflect changes in our practices, legal obligations, or enhancements to our Services. Changes are effective immediately upon posting the revised Policy, unless otherwise required by applicable law. When we update the Policy, we will revise the “Last updated” date at the top of this page; in the event of material changes, we will provide additional notice, which may include email or a prominent notice within the Services.

Your continued use of the Services after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you should discontinue use of the Services and, where applicable, request deletion of your account.

18. Third-Party Sign-In (Google and Apple)

You may choose to create an account or sign in using a third-party identity provider such as Google or Apple. When you do, we receive only the basic profile information needed to authenticate you and operate your account — such as your name, email address, and profile picture — limited to the scopes you have authorized. We do not request or access any other data from these providers (for example, we do not access Gmail, Google Calendar, or any Google Workspace content).

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use sign-in data solely to provide and improve user-facing features of the Services. We do not use it to train AI or machine-learning models, to serve advertising, or for sale or transfer to data brokers, and we do not use it to build profiles unrelated to the Services.

You may revoke our access at any time via your provider’s account permissions page (for Google, myaccount.google.com/permissions). You may also request deletion of associated data by contacting us at support@chatgts.com.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our data practices, or your personal information, you may contact us via email:

• Privacy inquiries: privacy@chatgts.com
• General support: support@chatgts.com

When reaching out, please include sufficient detail to help us understand and respond to your inquiry. Depending on the nature of your request, we may need to verify your identity before responding in order to protect your personal information. We strive to respond to all privacy-related inquiries in a timely and appropriate manner.