Privacy Policy

1. Introduction

FlavorGPT, developed by FlavorAI and operated by YBX Labs ("we", "our", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FlavorGPT platform, including our website, applications, and related services (collectively, the "Service").

2. Information We Collect

We collect information in the following ways:

• Account Information: When you create an account, we may collect your username, fingerprint identifier, and optionally your email address or GitHub profile information if you choose those authentication methods.
• Usage Data: We collect information about how you interact with the Service, including chat sessions, model selections, and feature usage patterns. This data is used solely to improve the product.
• Payment Information: When you subscribe to a paid plan, payment details are processed by our third-party payment processors (Stripe, PayPal, or NOWPayments). We do not store your full card numbers or crypto wallet keys.
• Uploaded Content: Files, documents, and data you upload to the knowledge base are stored securely and scoped to your account.

3. Fingerprint-First Authentication

FlavorGPT supports anonymous usage via fingerprint-first authentication. If you choose this method, no email address is required. Your 32-character fingerprint serves as your credential. We store a hashed version of this fingerprint and cannot recover the original string. You are solely responsible for keeping your fingerprint safe.

4. How We Use Your Information

• To provide, maintain, and improve the Service.
• To process transactions and send related information.
• To detect, prevent, and address technical issues and abuse.
• To communicate with you about updates, security alerts, and support.

5. Data Sharing

We do not sell your personal information. We may share data with third-party service providers who assist in operating the Service (hosting, analytics, payment processing), but only to the extent necessary for them to perform their functions. All third-party providers are contractually obligated to protect your data.

6. AI Model Training

Your conversations, uploaded documents, and generated outputs are never used to train AI models. Your data stays scoped to your account and is not shared with any model provider for training purposes.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. You may also have the right to restrict or object to certain processing. To exercise these rights, contact us at the address below.

9. Contact

For privacy-related inquiries, contact us at [email protected].