Privacy Policy

Last Updated: October 20, 2024

Introduction

Welcome to FFOMU AI ("we," "our," or "the platform"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our platform.

Information We Collect

Personal Information

When you create an account, we collect:

• Email address
• Username and display name
• Avatar (optional)
• Password (encrypted and hashed)

Usage Data

When you use our services, we automatically collect:

• Device information (browser type, operating system)
• IP address and general location
• Usage patterns (pages visited, time spent, interactions)
• Conversation history with AI characters
• Characters you create and their configurations
• User preferences and settings

Content You Create

• AI character descriptions and configurations
• Public posts and comments
• Shared conversations (if you choose to share)

How We Use Your Information

We use your data to:

• Provide Services: Enable core platform functionality
• Improve AI: Train and improve our AI models
• Personalization: Customize your experience
• Communication: Send updates and notifications
• Safety: Detect and prevent abuse
• Analytics: Understand usage patterns and improve our service
• Legal Compliance: Comply with applicable laws and regulations

Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and penetration testing
• Access controls and authentication
• Secure data centers with physical security
• Employee training on data protection
• Incident response procedures

Data Retention

• Active Accounts: Data retained while your account is active
• Inactive Accounts: Data may be anonymized after 12 months of inactivity
• Deleted Accounts: Most data deleted within 30 days, some retained for legal purposes
• Conversation History: Retained for AI improvement unless you delete it
• Backups: May persist in backups for up to 90 days

Your Rights

Depending on your location, you may have rights including:

Access and Portability

Request a copy of your data in a portable format

Correction

Update or correct inaccurate information

Deletion

Request deletion of your personal data ("right to be forgotten")

Objection

Object to certain processing of your data

Restriction

Request restriction of processing in certain circumstances

Withdrawal

Withdraw consent where we rely on it

To exercise these rights, contact us at [email protected]

Cookies and Tracking

We use cookies and similar technologies. See our Cookie Policy for details.

Third-Party Services

We use third-party services that may collect data:

• Analytics: Google Analytics (anonymized)
• Infrastructure: Cloud service providers (AWS, Cloudflare)
• Payment: Stripe, PayPal
• Authentication: OAuth providers (Google, GitHub)
• CDN: Content delivery networks for performance

These services have their own privacy policies.

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place through:

• Standard contractual clauses
• Privacy Shield certification (where applicable)
• Adequacy decisions by regulatory authorities

Children's Privacy

Our service is not intended for users under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children. If we discover we have collected data from a child, we will delete it promptly.

For users aged 13-18, parental guidance is recommended, especially for mature content.

Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovery
• Notify relevant authorities as required
• Provide details on the nature of the breach
• Offer guidance on protective measures

GDPR Rights (EU Users)

If you are in the European Union, you have additional rights under GDPR:

• Right to lodge a complaint with a supervisory authority
• Right to data portability in machine-readable format
• Right to object to automated decision-making
• Right to withdraw consent at any time

EU Representative: [Your EU Representative Contact]

CCPA Rights (California Users)

California residents have specific rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell your personal information.

PIPL Compliance (China Users)

For users in China, we comply with the Personal Information Protection Law (PIPL):

• Separate consent for sensitive personal information
• Data localization requirements where applicable
• Cross-border data transfer assessments
• Local data protection officer contact

AI and Automated Decision-Making

We use AI for:

• Content moderation (automated + human review)
• Personalized recommendations
• Character response generation

You can opt-out of personalized recommendations in your settings.

Changes to This Policy

We may update this policy periodically. We will:

• Notify users of material changes via email
• Update the "Last Updated" date
• Provide 30 days notice before changes take effect
• Require acceptance of major changes

Contact Us

For privacy questions or to exercise your rights:

• Email: [email protected]
• Data Protection Officer: [email protected]
• Address: FFOMU LTD, [Your Address]
• Phone: [Your Phone Number]

---

Your privacy matters to us. We are committed to transparency and protecting your data.