Privacy Policy
Last Updated: July 16, 2026
1. Introduction
Welcome to AIEasy, an AI chat service provided by AIEasy. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use AIEasy. By accessing or using AIEasy, you agree to the terms of this Privacy Policy.
If you do not agree with any part of this Privacy Policy, you must not access or use AIEasy.
2. Information We Collect
2.1. Information You Provide
- Account Information: If you create an account or register with AIEasy (when applicable), we may collect details such as your name, email address, username, or other identifying information.
- User Content: We collect the questions, messages, and other content ("User Content") that you submit while interacting with AIEasy.
- Preference memories (optional): If you enable Memories, we may extract and store in Supermemory stable preferences about tone, level of detail, formatting, accessibility, and ways of working, together with applicability, origin, and confidence. Supermemory receives the extracted preference and a relevance query, not the raw conversation, your email, or your internal account id. Text-free message/revision identifiers remain in Supabase for deduplication. Language, biographical facts, projects, people, and events are outside this memory feature.
- Dictation audio (microphone): When you use the microphone button in chat, we collect the recorded audio solely to generate a text transcript. Raw audio is not retained after transcription; the resulting text persists only if you send it in chat.
2.2. Information Collected Automatically
- Usage Data: We may collect information about how you interact with AIEasy, such as the features you use, the date and time of your visits, and similar details.
- Device and Connection Information: We may collect information about the device you use to access AIEasy (for example, IP address, operating system, browser type, and device identifiers).
- Cookies and Similar Technologies: We use essential cookies (session, locale, and workspace preferences). Analytics, marketing, and support cookies are enabled only after you consent in cookie preferences.
2.3. Third-Party Information
We may receive information about you from third parties, such as service providers, analytics companies, or other business partners, and combine it with information we collect directly from you.
2.4. Data Protection Officer (DPO)
For privacy questions and data subject requests, contact our DPO at: hello@aieasy.chat.
3.1. Legal Bases (LGPD and GDPR)
We process personal data based on:
- Contract (LGPD Art. 7(V); GDPR Art. 6(1)(b)): account creation, authentication, chat processing, Stripe billing, and features you request.
- Legitimate interest (LGPD Art. 7(IX); GDPR Art. 6(1)(f)): security, fraud prevention, service improvement, and essential error telemetry—with safeguards and minimization.
- Legal obligation (LGPD Art. 7(II); GDPR Art. 6(1)(c)): tax and billing records required by law.
- Consent (LGPD Art. 7(I); GDPR Art. 6(1)(a)): optional preference Memories and non-essential cookies/scripts (usage analytics, Meta marketing pixel, Crisp support widget when applicable). You may disable Memories or withdraw cookie consent in the corresponding settings.
3.2. Processors and Subprocessors
We share data only to operate the service, with appropriate contracts and security:
| Category | Operators (examples) | Purpose |
|---|---|---|
| Infrastructure | Supabase, Vercel | Hosting, Postgres, Auth, Storage |
| Payments | Stripe | Subscriptions and billing |
| AI models | Providers via Vercel AI Gateway, OpenRouter, OpenAI, Anthropic, Google, xAI, and others per selected model | Process prompts, responses, and speech-to-text (Grok STT) |
| Preference memory | Supermemory | Store/version extracted preferences and select relevant ones; raw chat transcripts are not sent |
| Brevo | Transactional email; marketing only with consent | |
| Analytics | Vercel Analytics, Speed Insights | Usage metrics (with consent) |
| Marketing | Meta (Pixel / Conversions API) | Campaign measurement (with consent) |
| Support | Crisp | Support chat (with support consent when active) |
| Observability | Sentry | Errors and performance (minimized/sanitized) |
| Integrations | Google (login, Docs/Drive), Composio/MCP | Connections you authorize |
We do not sell your personal data.
3.3. Chat Content and Files
Messages, attachments, canvas content, and uploads may contain sensitive personal data you choose to submit. Only submit what is necessary. Content is stored in our infrastructure (Supabase) and may be sent to AI providers based on the model you select. Dictation audio is sent to xAI via Vercel AI Gateway solely to generate a transcript and is not retained as an audio file after processing.
5.1. Retention (summary)
| Data | Typical period |
|---|---|
| Account and profile | While the account exists |
| Active or archived chats | While they remain in the product; archiving does not start the retention clock |
| Chats submitted for deletion | Removed from the product immediately; encrypted package retained for the minimum configured when deletion is requested, currently 30 days and never less than 30 days |
| Files linked to deleted chats | Included in the same encrypted package and chat deadline |
| Unlinked files | While linked to the account; removed by you or on account deletion |
| Preference memories | Until individual/all-memory deletion or account deletion; chat deletion only removes source identifiers |
| Billing | As required by law |
| Insights events | Removed on account deletion |
| Error logs (Sentry) | Per provider policy and internal configuration |
| Non-essential cookies | Until consent is withdrawn |
The applicable deadline is snapshotted when each deletion is requested; later policy changes apply only to future deletions and never shorten existing packages. An applicable obligation or legal hold may extend retention until explicit release. Once purged, data cannot be recovered. We do not claim every jurisdiction requires 30 days: this is AIEasy's operational minimum, subject to legal validation and the principles of necessity and storage limitation.
When an account is deleted, access and sessions for the old identifier are revoked. Personal conversations leave the product and follow the process above. Organization content remains under workspace control with authorship detached and displayed as “Deleted user.” The same email may create a new account with a different identifier and no access to the old account, chats, or packages.
9.1. Exercising Your Rights In the Product
- Access and portability: export your data under Settings → Data controls or email us.
- Correction: update profile and preferences in settings.
- Memories: review, edit, disable, or delete under Settings → Memories. Accepted interaction preferences are saved without a separate approval step.
- Erasure: use Delete account in the danger zone (Settings → Account).
- Cookies: manage preferences in the banner or Settings → Data controls.
- Timelines: we respond within 15 days (LGPD) or 1 month (GDPR), extendable where permitted by law.
For email requests: hello@aieasy.chat (identify yourself and describe your request).
The ordinary account export excludes the private retention vault. A formal, verified request may consider retained data where legally permitted; legal restrictions, third-party rights, and legal holds may limit or delay erasure or disclosure.
3. How We Use Your Information
We use the personal information we collect for various purposes, including:
- Providing and Improving the Service
- To process your requests, provide chatbot responses, maintain and improve AIEasy's functionality, and develop new features.
- Personalization
- To personalize your experience and, when you enable Memories, apply relevant stable preferences in later interactions. You can review, edit, delete, or disable Memories in Settings.
- Analytics and Performance
- To analyze usage patterns, diagnose technical issues, and improve the overall performance and security of AIEasy.
- Communication
- To send updates, respond to your inquiries, and provide customer support.
- Legal and Compliance
- To comply with applicable laws, regulations, or legal obligations and enforce our Terms of Service or other agreements.
- AI Observability
- To debug, secure, and improve AI agents, we may process prompts, responses, tool inputs/outputs, and operational AI context in Langfuse. Sentry is used for errors and performance with sanitization of raw AI payloads.
4. Disclosure of Your Information
We do not sell or rent your personal information. However, we may share your information in the following circumstances:
- Service Providers: We may share your information with third-party service providers that perform services on our behalf (for example, hosting, analytics, or customer support). These service providers are only authorized to use your information as necessary to provide services to us.
- Business Transfers: In the event of a merger, acquisition, financing, or sale of assets involving AIEasy, your personal information may be transferred or disclosed as part of the transaction, subject to reasonable confidentiality obligations.
- Legal Requirements: We may disclose your information to law enforcement, government authorities, or other third parties when we are legally required to do so, or when we believe it is necessary to comply with legal obligations, protect our rights and property, or respond to an emergency.
- Consent: We may share your information for any other purpose disclosed to you at the time we collect it or with your consent.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. When we no longer need your personal information, we will take reasonable steps to delete it or securely de-identify it.
Our data retention policy includes:
- Storing data only for as long as necessary.
- Periodically reviewing stored data to determine whether it is still needed.
- Implementing secure deletion processes when data is no longer necessary.
- Maintaining records as required by legal obligations.
- Preference memories remain until you delete one, delete all, or delete your account. Deleting a chat removes source identifiers but does not automatically delete a preference that was already consolidated.
6. Security
We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, use, alteration, or destruction. However, no method of data transmission or storage is 100% secure, and we cannot guarantee absolute security.
Our security measures include:
- Encryption of sensitive data.
- Restricted access to personal data on a need-to-know basis.
- Monitoring systems to detect suspicious activity.
- Training personnel in data security practices.
- Regular updates to systems and security software.
7. International Data Transfers
AIEasy is based in Brazil. Your personal information may be transferred to and processed in countries other than your own, where data protection laws may differ from those in your local jurisdiction. In such cases, we will take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable laws.
8. Children's Privacy
AIEasy is not intended for use by individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe that we have inadvertently collected personal information from a child, please contact us, and we will take steps to delete the information as quickly as possible.
9. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information, such as:
- Access: Request access to or obtain a copy of the personal information we hold about you.
- Correction: Request correction or updating of inaccurate or incomplete personal information.
- Deletion: Request deletion of your personal information.
- Restriction: Request restriction of the processing of your personal information.
- Objection: Object to certain processing activities or withdraw your consent, where applicable.
- Portability: Request a copy of your personal information in a structured, commonly used, machine-readable format.
How to exercise your rights:
- Contact us using the contact email provided below.
- Clearly specify which right you want to exercise.
- Provide enough information for us to verify your identity.
- Wait for our response within the applicable legal timeframe.
To exercise any of these rights or make another privacy-related request, contact us using the information below. We will respond within a reasonable period in accordance with applicable laws.
10. Third-Party Links and Services
AIEasy may contain links to, or integrations with, third-party websites or services. We are not responsible for those third parties' privacy practices, and this Privacy Policy does not apply to any information you provide to them. We encourage you to review the privacy policies of those third-party sites or services before providing any personal information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will provide more prominent notice (for example, by email or through a notice within the Service). Your continued use of AIEasy after those changes means that you accept the revised Privacy Policy.
12. Contact
If you have any questions, concerns, or comments about this Privacy Policy or our privacy practices, please contact us at: hello@aieasy.chat