Privacy Policy

1. Who we are

Wiktor AI(“we”, “us”) operates the multi-model AI workspace at wiktor.app. This Privacy Policy explains what personal data we process, why, and your rights. By using the service you acknowledge this policy together with our Terms of Service.

2. Information we collect

• Account data — name, email, password hash, plan, language/theme preferences, and related profile fields.
• Billing & credits — plan key redemptions, credit balances, and credit history (amounts, request types, model identifiers). Payment card details, when used, are typically processed by third-party processors or app stores; we do not store full card numbers on our application servers.
• Usage content — chat history, prompts, attachments you upload, and generated outputs needed to provide the workspace.
• Technical data — IP address, device/browser signals, cookies/session identifiers, rate-limit and security logs. See our Cookie Policy.

3. How we use your information

We use personal data to: create and secure accounts; deliver AI features; meter and bill credits; prevent abuse and fraud; send service communications; improve reliability and product quality; and comply with legal obligations. We do not sell your personal data to third-party advertisers.

4. AI providers & data sharing

To fulfill your requests we send prompts, files, and related parameters to upstream AI providers (for example via our configured OpenAI-compatible gateway). Those providers process data under their own terms and privacy policies. We share only what is needed to complete the request. We may also share data with infrastructure hosts, payment processors, and professional advisors when required to operate or defend the service, or when required by law.

5. Legal bases (where applicable)

Where GDPR or similar laws apply, we rely on: performance of a contract (providing the service you signed up for); legitimate interests (security, product improvement, preventing abuse); consent (where required for optional cookies or marketing); and legal obligation.

6. Retention

We retain account data while your account is active and as needed for billing, security, and legal compliance. Chat history and generated content are stored to power the product until you delete them or request account deletion, subject to backup and legal hold periods.

7. Security

We implement industry-standard measures including HTTPS, hashed passwords, CSRF protection on mutating APIs, and rate limiting. No method of transmission or storage is 100% secure.

8. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. You can manage many settings in-product. Account export and deletion tools may be available under Settings or related account APIs. For additional requests, contact us via wiktor.app.

9. Children

The service is not directed to children under 13 (or the minimum age required in your country). If you believe a child has provided personal data, contact us so we can delete it.

10. International transfers

Data may be processed in countries where we or our providers operate. We take steps appropriate to the risk and applicable law when transferring data internationally.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may be highlighted in-product when appropriate.

12. Contact

Privacy inquiries: account dashboard or wiktor.app. Related: Cookie Policy, Billing Terms, Refund Policy.