Privacy Policy

Last updated: May 14, 2026

1. Introduction

SIA TWIN ("we", "us", "our") operates avots.ai, an AI model aggregator platform. This Privacy Policy describes how we collect, use, and protect your personal data when you use our services.

2. Data We Collect

We collect the following types of data:

• Account data: name, email address, password (hashed), referral code
• Authentication data: Google OAuth profile (if used), session tokens
• Usage data: conversations, messages, file uploads, model preferences
• Technical data: IP address, device type, browser, access timestamps
• Payment data: subscription plan, transaction history (payment processing is handled by third-party providers; we do not store credit card numbers)

3. How We Use Your Data

• To provide and maintain the avots.ai service
• To authenticate your identity and manage your account
• To process payments and manage subscriptions
• To route your requests to third-party AI model providers (OpenRouter)
• To send transactional emails (verification, password reset)
• To improve our service and fix issues
• To prevent fraud and abuse

4. Data Sharing

We share your data only when necessary:

• AI providers: your messages are sent to third-party AI model providers (via OpenRouter) to generate responses. We do not control how these providers process data.
• Payment processors: payment data is shared with Stripe for transaction processing.
• Legal requirements: we may disclose data when required by law or to protect our rights.

We do not sell your personal data to third parties.

5. Data Storage and Security

Your data is stored on servers located in the European Union. We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted passwords (bcrypt)
• HTTPS/TLS encryption for all communications
• HttpOnly cookies for authentication tokens
• Access logging and session management

6. Data Retention

• Account data is retained as long as your account is active
• Deleted conversations are permanently removed after 30 days
• Access logs are retained for 90 days
• You can request account deletion at any time through Settings

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Restrict or object to data processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at hello@avots.ai.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Third-party analytics may use their own cookies.

9. Children

avots.ai is not intended for users under 16 years of age. We do not knowingly collect data from children.

10. Changes

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification.

11. Contact

For questions about this Privacy Policy, contact us at hello@avots.ai.