Introduction

S.R.L. "Mega Promoting" ("we," "aichat.md," "the Company"), as the operator of the aichat.md platform, respects the confidentiality of your data and is committed to protecting the personal information you entrust to us. This Privacy Policy explains how we collect, use, disclose, and protect your data when you use our services ("Services"), including the aichat.md website, mobile applications (if any), and any other interfaces through which you interact with the aichat.md platform. This policy applies to:

• Users of aichat.md (individuals or legal entities who create accounts and configure AI assistants on the platform).
• Visitors to the aichat.md website.
• End users (individuals who interact with AI assistants created by aichat.md users). In this case, aichat.md acts as a data processor on behalf of the aichat.md user (who is the data controller).

Please read this Privacy Policy carefully. By accessing or using our Services, you confirm that you have read, understood, and agree to this policy. If you do not agree with this policy, please do not use our Services.

1. Information We Collect

We collect various types of information, depending on how you interact with us:

1.1. Information You Provide Directly

• Registration Data: When you create an account on aichat.md, we ask for information such as: name, surname, email address, phone number, company name (if applicable), company address (if applicable), billing details (credit card details – processed by a third-party payment processor, not stored by aichat.md).
• AI Assistant Configuration Data: Information you provide to configure the AI assistant (instructions, scenarios, predefined responses, login details for third-party platforms – Facebook, Instagram, Telegram, 999.md, etc.).
• Uploaded Content: Any files (text, documents, images, etc.) you upload to the platform to train the AI assistant.
• Communications: The content of messages you send us (e.g., support requests, feedback, questions).
• Marketing Data: If you subscribe to our newsletter or participate in promotions, we will collect your email address and other relevant information.

1.2. Information Collected Automatically

• Usage Data: We collect information about how you use our Services, including:
• Browser type and operating system.
• IP address.
• Pages visited on the aichat.md website.
• Time spent on the site.
• Links clicked.
• Actions performed on the platform (e.g., creating an AI assistant, configuring an integration).
• AI assistant performance data (e.g., number of messages processed, success rate, lead scores).
• Cookies and Similar Technologies: We use cookies and similar technologies (e.g., pixels, web beacons) to recognize you, personalize your experience, analyze traffic, and provide relevant ads. (See the separate section on Cookies).
• Data from Third Parties: We may receive information about you from third parties, such as:
• Social media platforms: If you log in to aichat.md using your Facebook, Instagram, or Telegram account, we will receive basic information from your profile (in accordance with your privacy settings and the policies of the respective platforms).
• Payment processors: If you make payments through our platform, we will receive payment confirmation from the payment processor.
• AI service providers: To provide AI functionalities, we use APIs from third-party companies (e.g., OpenAI, Google AI, Anthropic, Meta AI, ElevenLabs, Flux.1, Google ImageFX). These companies may have access to the data necessary to provide the services (e.g., text of messages sent by users, uploaded images). We ensure that these providers adhere to high standards of security and privacy.

1.3. Information Processed on Behalf of aichat.md Users (End User Data)

When you use aichat.md to create AI assistants that interact with your customers, aichat.md acts as a data processor on your behalf for processing end user data..

The types of data processed may include:

• Conversation content: Text messages, voice messages, images sent by end users to the AI assistant.
• Contact data: Name, surname, email address, phone number (if provided by the end user).
• Identification data: User ID on the respective platform (e.g., Facebook ID, Instagram ID).
• Other data: Any other data you configure the AI assistant to collect (e.g., preferences, interests, demographic data).
• Obtaining consent: You must ensure that you have legal consent to collect and process end user data.
• Informing users: Inform end users about how their data is processed.
• Compliance with laws: Ensure that you comply with all applicable data protection laws.

2. How We Use Information

We use the collected information for the following purposes:

• Providing Services:
• To create and manage your aichat.md account.
• To allow you to create and configure AI assistants.
• To process payments.
• To provide technical support.
• To send you important notifications about our Services (e.g., updates, changes to terms and conditions).
• Improving Services:
• To analyze how users use the platform.
• To develop new features.
• To improve the performance and reliability of our Services.
• To personalize user experience.
• Marketing and Communication:
• To send you newsletters, special offers, and other information about aichat.md (if you have given your consent).
• To display relevant ads (based on data collected through cookies and similar technologies – see the Cookies section).
• Research and Development:
• To conduct research in the field of AI and communication automation.
• To develop new AI models and algorithms.
• Legal Compliance:
• To comply with applicable laws and regulations.
• To protect our legal rights and interests.
• Processing on Behalf of Users:
• To allow virtual assistants created by you to communicate with end users, according to your instructions.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Performance of a contract: Processing is necessary to provide you with our Services, in accordance with the Terms and Conditions.
• Consent: We will ask for your consent for certain processing activities (e.g., sending newsletters, using certain cookies). You can withdraw your consent at any time.
• Legitimate interest: We process your personal data for legitimate purposes, such as improving our Services, preventing fraud, ensuring security, research and development. We will always balance our legitimate interests with your privacy rights.
• Legal obligation: We process your personal data when necessary to comply with a legal obligation (e.g., keeping accounting records, responding to requests from authorities).

4. Disclosure of Information

We do not sell or rent your personal data to third parties. We may disclose your information in the following situations:

• Service Providers: We collaborate with third-party service providers who help us operate and improve our Services. They may have access to your personal data, but only to the extent necessary to perform their tasks. Examples of service providers:
• Web and cloud hosting providers (e.g., Google Cloud, Amazon Web Services).
• Payment processors (e.g., Stripe, PayPal).
• Email marketing service providers.
• Analytics service providers (e.g., Google Analytics).
• AI service providers (e.g., OpenAI, Google AI, Anthropic, Meta AI, ElevenLabs, Flux.1, Google ImageFX – for text, voice, and image processing and generation functionalities). These providers have their own privacy policies, which we encourage you to review.
• Third-Party Platforms: If you choose to integrate aichat.md with third-party platforms (e.g., Facebook, Instagram, Telegram, 999.md), your data will be shared with these platforms, in accordance with your privacy settings and the policies of the respective platforms. We are not responsible for the privacy practices of these third-party platforms.
• Public Authorities: We may disclose your personal data to public authorities if we are required by law or if we believe, in good faith, that it is necessary to protect our rights, property, or safety, or that of our users or the public.
• Business Transactions: In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the new entity.
• With Your Consent: We may disclose your personal data to other third parties with your explicit consent.

5. Data Security

We take reasonable technical and organizational security measures to protect your personal data against unauthorized access, use, disclosure, alteration, or destruction. These measures include:

• Data encryption: Sensitive data (e.g., passwords, card data – although these are not stored by us) is encrypted.
• Network security: We use firewalls and other security technologies to protect our infrastructure.
• Access control: Access to personal data is strictly limited to authorized employees and service providers who need access to perform their tasks and who are subject to strict confidentiality obligations.
• Monitoring and auditing: We constantly monitor our systems to detect and prevent potential vulnerabilities or security incidents.
• Compliance with security standards: We strive to comply with recognized industry security standards.

However, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your password and the security of your own device.

6. Your Rights

Depending on applicable legislation (particularly GDPR for EEA residents and Law No. 133/2011 for the Republic of Moldova), you have certain rights regarding your personal data:

• Right of access: You have the right to request a copy of the personal data we hold about you and information about how we process it.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data.
• Right to erasure ('right to be forgotten'): You have the right to request the deletion of your personal data, under certain conditions (e.g., the data is no longer necessary, you have withdrawn your consent, the processing is unlawful). We will comply with this request, except where we have a legal obligation to retain the data.
• Right to restrict processing: You have the right to request the restriction of processing of your personal data, under certain conditions (e.g., you contest the accuracy of the data, the processing is unlawful).
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller (if technically feasible).
• Right to object to processing: You have the right to object to the processing of your personal data, under certain conditions (e.g., processing for direct marketing purposes).
• Right not to be subject to a decision based solely on automated processing, including profiling: You have the right not to be subject to a decision that produces legal effects concerning you or similarly significantly affects you, based solely on automated processing, including profiling (except where necessary for entering into or performing a contract, authorized by law, or based on your explicit consent).
• Right to lodge a complaint: You have the right to lodge a complaint with the data protection supervisory authority (in the Republic of Moldova: the National Center for Personal Data Protection; in the EU: the authority in your country of residence), if you believe that the processing of your personal data violates applicable law.

To exercise these rights, please contact us at: contact@aichat.md. We will respond to your request within the time required by law (usually within one month). We may ask for additional information to verify your identity before processing your request.

7. International Data Transfers

aichat.md may transfer your personal data outside the Republic of Moldova and the European Economic Area (EEA), including to countries that do not provide the same level of data protection as your country of residence (e.g., the United States, where some of our service providers are located). When we transfer data outside the EEA, we will ensure that there are adequate safeguards in place to protect your data, such as:

• Standard Contractual Clauses (SCCs): We will enter into standard contractual clauses approved by the European Commission with data recipients, which impose contractual obligations to protect data.
• Adequacy Decisions: We will transfer data only to countries that have been recognized by the European Commission as providing an adequate level of data protection (if applicable).
• Other legal mechanisms: We will use other legal mechanisms permitted by GDPR (e.g., binding corporate rules, explicit user consent).
• Data Privacy Framework

8. Cookies and Similar Technologies

We use cookies and similar technologies (e.g., pixels, web beacons) to:

• Ensure basic site functionality: (e.g., authentication, language settings).
• Enhance user experience: (e.g., remembering preferences, personalizing content).
• Analyze traffic and user behavior: (e.g., Google Analytics – to understand how our site is used and to improve it).
• Display relevant ads: (e.g., remarketing – to show you personalized ads on other sites based on your previous visits to aichat.md). You can opt out of personalized advertising.

Please refer to our Cookie Policy [link to cookies page] for more details about the types of cookies we use, their purposes, and how you can manage them.

9. Updates to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our practices. We will notify you of significant changes by email (if you have provided us with your email address and consented to communications) or through a prominent notice on our site. We encourage you to review this policy periodically to stay informed about how we protect your data. The date of the last update is indicated at the top of the document.

10. GDPR-Specific Information (for EEA Users)

In addition to the rights mentioned above, if you are in the EEA, you also have the following rights:

• Right to withdraw consent: If we process your personal data based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to object to processing based on legitimate interest: You can object to the processing of your personal data based on our legitimate interest, and we will stop processing, unless we have compelling legitimate grounds that override your rights or if the processing is necessary for the establishment, exercise, or defense of legal claims.

11. CCPA/CPRA-Specific Information (for California Residents)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request information about the categories and sources of personal data we collect about you, the purposes for which we collect it, and the categories of third parties to whom we disclose your data.
• Right to Request Deletion: You have the right to request the deletion of your personal data, subject to certain exceptions.
• Right to Opt Out of the “Sale” of Personal Data: aichat.md does not sell your personal data in the traditional sense of the word (i.e., we do not provide it to third parties for a fee). However, certain activities (e.g., using cookies for targeted advertising) may be considered “sale” under the CCPA/CPRA. You have the right to opt out of these activities. You can do this by managing your cookie settings (see Cookie Policy).
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights under the CCPA/CPRA.

12. Contact

If you have any questions, concerns or requests regarding this Privacy Policy or the way we process your personal data, please contact us at:

• E-mail: contact@aichat.md
• Postal address: S.R.L. 'Mega Promoting', str. Vasile Coroban 36, Chisinau, Moldova, MD-2051