Privacy policy

Last updated (indicative): May 2026

1. Data controller

The controller of personal data collected via MGF.AI is the site publisher, whose full contact details appear in the legal notice. For any question about your data: [email protected].

2. Data collected

Depending on your use of the Service, the following may notably be processed:

• Account data: identifier, username, email address, password (hashed), preferences;
• Usage data: technical logs, interactions with the Service (messages, conversation history to the extent necessary for operation and moderation);
• Payment data: processed by a secure payment provider — we do not generally store your bank card on our application servers;
• Generated or uploaded content (images, drafts, UGC characters) depending on enabled features.

3. Purposes and legal bases

Processing pursues notably the following purposes:

• Service provision (contract performance / pre-contractual measures): authentication, conversation display, billing;
• Security and abuse prevention (legitimate interest / legal obligation): fraud prevention, logs, moderation;
• Product improvement (legitimate interest or consent depending on options offered): aggregated usage statistics, testing;
• Communications: transactional emails (e.g. account verification via Resend or equivalent provider); marketing communications only with prior consent where required by law.

4. Retention period

Data is retained for the period necessary for the above purposes, plus statutory retention periods (e.g. accounting). User content may be deleted upon account closure or according to settings / features offered on the site.

5. Recipients and subprocessors

Data may be transmitted to providers strictly necessary for Service operation, for example:

• Hosting: publisher's servers or hosting provider (see legal notice);
• Cloudflare (or equivalent): content delivery network, DDoS protection, web application firewall (WAF), edge TLS encryption — technical metadata (IP, approximate country, security logs) may transit through this provider;
• Payment provider: payment processing;
• Resend (or equivalent): transactional email delivery (address verification, notifications);
• AI model providers: depending on product configuration, requests may be sent to third-party APIs (e.g. OpenAI, OpenRouter) or processed on infrastructure controlled by the publisher; only content necessary for generation is transmitted, respecting the relevant provider's retention settings.

These providers are subject to contractual confidentiality and security obligations. The list may evolve with the product; a material update to this policy may inform you.

6. Transfers outside the European Union

Some providers (hosting, AI, email, delivery network) may be located outside the European Economic Area. Where applicable, appropriate safeguards (European Commission standard contractual clauses, supplementary measures) may be implemented in accordance with the GDPR.

7. Your rights (GDPR)

Subject to legal conditions, you notably have rights of access, rectification, erasure, restriction, objection, portability (where applicable) and the right to define directives regarding the fate of your data after your death. You may exercise your rights via [email protected]. You may also lodge a complaint with the CNIL (www.cnil.fr).

8. Cookies and trackers

The site uses or may use technical cookies or trackers (session, security, preferences) and, where applicable, audience measurement or advertising trackers subject to consent where required by law. Details appear in the cookie policy.

9. Minors

The Service is not intended for minors. For the full framework, see the minors policy and the Reporting and content removal page.

Information document provided for transparency. It may be updated; the last revision date appears at the bottom of each page when we version the content.