Command Palette
Search for a command to run

Privacy Policy

Last Updated: 24 July 2025

1. Introduction

Welcome to boreal.chat (the "Service"), a service provided by the boreal.chat team ("we", "us", or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosted service at boreal.chat.

This policy applies specifically to the official hosted version of boreal.chat. If you are running a self-hosted instance, you are responsible for your own privacy practices and compliance with local regulations.

Our services and data are hosted within the European Union, and we design our policies to comply with the General Data Protection Regulation (GDPR) and other EU privacy rules.

2. Information We Collect

We collect information that you provide to us, that we collect automatically, and that we receive from third parties.

2.1. Information You Provide

  • Account Information: When you register for an account, we collect your email address and a hashed password.
  • User Content: We collect the prompts, conversations, and other content you generate while using our Service, which may include text and voice data if you use voice features ("User Content").
  • Payment Information: When you subscribe to a paid plan, your payment information is processed by our third-party payment processor (Stripe). We do not store or have direct access to your full credit card details.
  • Communications: If you contact us directly, we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.

2.2. Information We Collect Automatically

  • Usage Data: We automatically collect information about your interactions with the Service, such as your IP address, browser type, operating system, pages viewed, and the dates/times of your visits.
  • Cookies and Similar Technologies: We use cookies to operate and administer our Service, and to improve your experience. We use them for session management and to remember your settings. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of our Service.

3. How We Use Your Information

We use the information we collect for various purposes, including:

  • To provide, operate, and maintain our Service.
  • To process your User Content through third-party AI models (like those accessed via OpenRouter) to generate responses.
  • To process transactions and manage your subscription.
  • To improve, personalize, and expand our Service.
  • To communicate with you, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes.
  • For security purposes, such as to find and prevent fraud.
  • For compliance with legal obligations.

4. How We Share Your Information

We do not sell your personal data. We may share your information in the following situations:

  • With AI Providers: We send your User Content (such as prompts and conversation history) to third-party AI providers to generate the AI responses. These providers do not receive your personal account information from us. Their use of your data is governed by their own privacy policies.
  • With Service Providers: We may share information with third-party vendors and service providers that perform services for us, such as hosting (in the EU), payment processing (Stripe), and analytics.
  • For Legal Reasons: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

5. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

  • The right to access, update or delete the information we have on you.
  • The right of rectification.
  • The right to object.
  • The right of restriction.
  • The right to data portability.
  • The right to withdraw consent.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable law.

6. Data Retention

We retain your personal data for as long as you have an active account with us. You can delete your chats and your account at any time. When you delete your account, we will delete your information, unless we are required to keep it for legal reasons.

7. Data Security

We use a variety of security measures to protect your information, including encryption in transit (TLS) and hashing of passwords. However, no electronic transmission or storage is 100% secure, and we cannot guarantee its absolute security.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]