Privacy Policy

What we collect

When you create an account we collect your email address and a hashed password. When you chat with Rotten AI we store your messages and the AI's replies so you can see them in your history. If you subscribe we store your subscription status; payment card details are handled directly by Stripe and never touch our servers.

Google connectors

If you connect a Google service (Calendar, Gmail read, Drive read), we store the OAuth tokens Google issues, encrypted at rest, so the AI can read the data you asked it to read. We never write to your Google account, we never sell this data, and you can disconnect at any time from the sidebar — which deletes the tokens.

Long-term memory

Premium users get long-term memory: short facts the AI extracts from your chats so it can personalize future responses. You can view and delete individual memories at any time from the sidebar.

How we use your data

• To operate the Service — send prompts to the AI provider and return responses to you.
• To enforce usage limits (five free chats per day, etc.).
• To process subscriptions and single-chat credits through Stripe.
• To reply when you contact support.

Who we share data with

We share the minimum data needed with the AI providers processing your prompts (Groq for the free tier; OpenAI via Lovable AI Gateway for premium and image-vision requests), Stripe for payments, Supabase for storage, and Google for connectors you enable. We do not sell your data.

Retention

We keep your account and chat history until you ask us to delete it. Contact us and we'll delete your account and associated data within 30 days.

Cookies and ads

We use a session cookie to keep you signed in. Free-tier users see ads served by Google AdSense, which may set its own cookies for ad personalization; see Google's ad settings to control this. Premium users see no ads.

Children

Rotten AI is not intended for children under 13 and we do not knowingly collect data from them.

Your rights

Depending on where you live you may have rights to access, correct, export, or delete your personal data. Email us to exercise any of them.

Contact

Privacy questions? See our contact page.