Privacy policy

Last updated: 28 September 2026

1. Data controller

The controller of personal data collected via MGF.AI is the site publisher, whose full contact details appear in the legal notice. For any question about your data: [email protected].

2. Data collected

Depending on your use of the Service, the following may notably be processed:

• Account data: identifier, username, email address, password (hashed) when a password is chosen, preferences. If you sign in with Google, MGF.AI receives the Google account identifier, the email address, and the indication that Google has verified that address. The Google password is neither requested nor stored;
• Usage data: technical logs, interactions with the Service (messages, conversation history to the extent necessary for operation and moderation);
• Payment data: processed by CCBill — card numbers are neither entered nor stored on MGF.AI;
• Generated or uploaded content (images, drafts, UGC characters) depending on enabled features.

3. Purposes and legal bases

Processing pursues notably the following purposes:

• Service provision (contract performance / pre-contractual measures): authentication, conversation display, billing;
• Security and abuse prevention (legitimate interest / legal obligation): fraud prevention, logs, moderation;
• Product improvement (legitimate interest or consent depending on options offered): aggregated usage statistics, testing;
• Communications: transactional emails (e.g. account verification via Resend or equivalent provider); marketing communications only with prior consent where required by law.

4. Retention period

Data is retained for the period necessary for the above purposes, plus statutory retention periods (e.g. accounting). User content may be deleted upon account closure or according to settings / features offered on the site.

5. Recipients and subprocessors

Data may be transmitted to providers strictly necessary for Service operation, for example:

• Hosting: publisher's servers or hosting provider (see legal notice);
• Cloudflare (or equivalent): content delivery network, DDoS protection, web application firewall (WAF), edge TLS encryption — technical metadata (IP, approximate country, security logs) may transit through this provider;
• Payment provider (CCBill): payment processing outside MGF.AI;
• Resend (or equivalent): transactional email delivery (address verification, notifications);
• Google: account sign-in, only if you choose “Continue with Google”. MGF.AI receives the Google identifier, the email address, and that address’s verification status, in order to create the account or find it again. This data is not used for any other purpose;
• AI model providers: depending on product configuration, requests may be sent to third-party APIs (e.g. OpenAI, OpenRouter) or processed on infrastructure controlled by the publisher; only content necessary for generation is transmitted, respecting the relevant provider's retention settings.

These providers are subject to contractual confidentiality and security obligations. The list may evolve with the product; a material update to this policy may inform you.

6. Transfers outside the European Union

Some providers (hosting, AI, email, delivery network, account sign-in) may be located outside the European Economic Area. Where applicable, appropriate safeguards (European Commission standard contractual clauses, supplementary measures) may be implemented in accordance with the GDPR.

7. Your rights (GDPR)

Subject to legal conditions, you notably have rights of access, rectification, erasure, restriction, objection, portability (where applicable) and the right to define directives regarding the fate of your data after your death. You may exercise your rights via [email protected]. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies and trackers

The site uses or may use technical cookies or trackers (session, security, preferences) and, where applicable, audience measurement or advertising trackers subject to consent where required by law. Details appear in the cookie policy.

9. Minors

The Service is not intended for minors. For the full framework, see the minors policy and the Reporting and content removal page.

Information document provided for transparency. It may be updated; the last revision date appears at the bottom of each page when we version the content.