Privacy Policy

Who is the data controller

The Service is operated under the unregistered trading name Gizo AIby its sole proprietor as an early-stage venture that has not yet been incorporated as a company or LLP. The proprietor's place of business is Bandipora, Jammu & Kashmir, India. The data controller for personal data processed through the Service is the operator of Gizo AI, reachable at privacy@gizoai.com. Users in the EU/UK may also contact us at the same address; we will designate a formal representative if and when required by applicable law.

What we collect

• Account data — email, name, authentication identifiers.
• Content you submit — prompts, uploads, chats, memories, generated images/videos/sites.
• Usage & device — IP address, user agent, timestamps, feature usage, credit consumption.
• Payments — processed by Cashfree; we store order metadata, not full card details.

How we use it

To operate the service, deliver AI features, prevent abuse, meet legal obligations, bill you, and improve the product. We do not sell your personal data. We do not use your private prompts to train public models.

Third-party processors

To deliver AI features we send request-scoped content to model providers including OpenAI, Google AI, Anthropic, Replicate, ElevenLabs, and Deepgram. Infrastructure providers include Supabase (database, auth, storage), Cloudflare (hosting, CDN), Resend (email), and Cashfree (payments). Each processes data under its own terms.

Retention

Account data is retained while your account is active. Generated content is retained until you delete it or your account. Server logs are retained for up to 90 days for security and debugging. Billing records are retained as required by law.

Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, India DPDP, etc.) you may have rights to access, correct, delete, port, or restrict processing of your data, and to object or withdraw consent. Exercise rights by emailing privacy@gizoai.com. You can delete individual memories from the Memory page and remove generated sites, images, and videos from their respective libraries. To delete your account and all associated data, email us and we will action the request.

Children

Gizo AI is not directed to children under 13 (or the minimum digital-consent age in your region). We do not knowingly collect their data.

Security

Encryption in transit (TLS) and at rest, RLS-scoped database access, and encrypted secrets for user-provided API keys. No system is perfectly secure — you use the service at your own risk.

International transfers

Data may be processed in the United States, the European Union, India, and other countries where our providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

Changes

We may update this policy; material changes will be notified in-app or by email.

Contact: privacy@gizoai.com.