Privacy Policy

1. Introduction

Eddy Woods LLC, doing business as AICompanion.lol ("we", "us", "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Business Address: 3700 West Division Street, Saint Cloud, MN

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, login credentials
• Profile Data: User preferences, settings, profile information
• Conversation Data: Text messages, voice recordings, uploaded files (photos, documents)
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking: Session cookies, authentication tokens, analytics data

2.3 Third-Party Data

• Limitless Pendant Integration: Real-world memories and lifelogs (with your explicit consent)
• OAuth Providers: Basic profile information from Google, GitHub, etc.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Service
• Process your conversations and generate AI responses
• Remember your preferences and conversation history
• Improve AI model accuracy and Service functionality
• Process payments and manage subscriptions
• Send service updates, security alerts, and support messages
• Analyze usage patterns and generate insights
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

• Consent: You have given explicit consent for specific processing activities
• Contract Performance: Processing is necessary to provide the Service
• Legitimate Interests: Improving our Service, fraud prevention, security
• Legal Obligation: Compliance with applicable laws

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share data with trusted service providers who assist us in operating the Service:

• OpenAI: AI model inference and conversation generation
• ElevenLabs: Voice synthesis and text-to-speech
• Stripe: Payment processing
• AWS S3: File storage (images, audio recordings)
• Limitless: Memory and lifelog integration (with your consent)

5.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, safety, or property.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time. After deletion:

• Conversation history and uploaded files are permanently deleted within 30 days
• Anonymized usage data may be retained for analytics
• Legal or security-related data may be retained as required by law

7. Your Privacy Rights

7.1 All Users

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your conversation history and data

7.2 GDPR Rights (EEA Users)

• Right to Object: Object to processing based on legitimate interests
• Right to Restrict: Limit how we use your data
• Right to Portability: Receive your data in a machine-readable format
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

7.3 CCPA Rights (California Users)

• Right to Know: Request disclosure of data collected and shared
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of data sales (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise your rights, contact us at [email protected]

8. Data Security

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure authentication with hashed passwords
• Regular security audits and vulnerability assessments
• Access controls and employee training
• Secure cloud infrastructure (AWS, Stripe-compliant)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for users under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If we discover that a child has provided personal data, we will delete it immediately. Parents or guardians who believe their child has provided information should contact us at [email protected].

10. International Data Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for GDPR compliance
• Data Processing Agreements with third-party providers
• Compliance with applicable data protection laws

11. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Required for authentication and Service functionality
• Analytics Cookies: Understand usage patterns and improve the Service
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

12. AI Training and Model Improvement

We may use anonymized conversation data to improve our AI models and Service features. This includes:

• Training AI models to generate better responses
• Identifying common user needs and preferences
• Improving emotion detection and memory systems

All data used for training is anonymized and cannot be traced back to individual users. You may opt-out of AI training by contacting us.

13. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or Service notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us at:

16. Data Protection Officer (GDPR)

For EEA users, you may contact our Data Protection Officer at: