This Privacy Policy describes how arliai.com ("Arli AI", "We", "Us", or "Our") collects, uses, and discloses information about you when you access or use our website, products and services.
We collect and store the following personal information to provide and operate the Services: Account Information. When you create an account, we collect your email address, your name, and a unique account identifier. Your password is stored only in hashed form and is never stored or transmitted in plaintext. Technical Data. When you access the Services, we automatically collect certain technical data, including your IP address. This data is collected for security, abuse prevention, and the proper operation of the Services. We do not collect or store the content of your prompts or the outputs generated by the models (see Usage Tracking and Data Retention and Deletion).
We do not log, store, or have access to the content of your prompts or the outputs generated by the models (see Data Retention and Deletion). We do collect and log usage metadata only, including the number of requests sent, the models used, and the parameters of those requests, for the purpose of rate limiting and usage tracking. This metadata does not include prompt content, input text, or generated outputs. Usage metadata is retained for up to 60 days from the date it was collected, after which it is automatically deleted.
We retain your personal information only for as long as necessary to provide the Services to you and for the purposes described in this Privacy Policy. Prompts and Outputs. Consistent with our zero-log approach, we do not store, retain, or have access to your prompts, inputs, or generated outputs at any time. This data is processed only transiently to return a response to you and is immediately discarded. Account Data. We retain your account information (such as your email address and name) for as long as your account is active. When you close your account using the account deletion feature in the Services, we will delete your account data immediately. Certain information may be retained where required by applicable law, but only to the extent and for the duration strictly necessary. Usage Metadata. We retain usage metadata (such as request counts and the models used) for up to 60 days from the date it was collected, after which it is automatically deleted. Deleting Your Data. You may request deletion of your personal information at any time by closing your account through the account deletion feature available within the Services. If you have any questions about deletion, please contact us.
Depending on your jurisdiction, you may have certain rights regarding your personal information. Subject to applicable law, these rights may include: Access. You may request information about the personal information we hold about you. Correction. You may request that we correct any inaccurate or incomplete personal information we hold about you. Deletion. You may request that we delete your personal information. You can do this at any time by closing your account through the account deletion feature available within the Services. Data Portability. You may request a copy of your personal information in a structured, machine-readable format, to the extent required by applicable law. Withdrawing Consent. Where we rely on your consent to process your personal information (for example, for newsletters and marketing communications), you may withdraw that consent at any time by following the unsubscribe instructions provided or by contacting us. To exercise any of these rights, please contact us. We will respond to your request within a reasonable timeframe and in accordance with applicable law. To protect your privacy, we may need to verify your identity before acting on your request.
We do not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes. Service Providers. We use third-party service providers only for the limited purposes of payment processing and sending emails (such as transactional and newsletter emails) on our behalf. We share your personal information with these providers only to the extent necessary for them to perform these specific functions, and they are bound by confidentiality obligations and permitted to use your personal information only as needed to perform their services for us. Other than these payment and email providers, we do not use any third-party service providers, and all AI inference is performed in-house on our own servers. Payment Processing. We do not collect, store, or process your payment card or other payment details directly. When you make a payment, you will be redirected to a third-party payment processor's website to complete the transaction. Your payment information is collected and processed solely by that payment processor, in accordance with its own terms and privacy policy, and is never transmitted to or stored by us. Following a completed transaction, we may receive a confirmation of payment status from the processor (such as whether the transaction succeeded and the amount paid), which we use solely to activate and administer your subscription or one-time payment. We run all our AI models on-premises in our own servers. Your personal information and usage data will be used solely for the purpose of providing the Services to you and for newsletters and other communications where you have opted in.
We take measures to protect your personal information. These measures include encrypting data in transit using HTTPS/TLS, storing passwords only in hashed form (never in plaintext), and restricting access to personal information to authorized personnel who need it to operate the Services. We also run all AI inference on our own servers and do not transmit your prompts or outputs to third parties. While we take these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, but we strive to use commercially acceptable means to protect your personal information.
Your personal information is stored on our own servers. We do not transfer your personal information to third parties, except to the payment and email service providers described in this Privacy Policy, and only to the extent necessary to provide the Services to you. Your prompts, inputs, and generated outputs are not stored on our servers at all; they are processed transiently and immediately discarded, and any locally stored content remains on your device (see Local Storage on Your Device). Because we do not store or transfer this content, it is not subject to international data transfers.
We use two categories of cookies: essential cookies, which are necessary for the Services to function, and analytics cookies, which help us understand how the Services are used. We do not use advertising cookies. Essential Cookies. These cookies are required for the Services to operate and cannot be disabled in our systems. They include: • Authentication Cookie ("token"): A session cookie that keeps you logged in and authenticates your API requests. This cookie is set when you log in and expires after 30 days, or when you log out. • Preference Cookies: Cookies that remember your selected model (such as your last-used text or image model) so you do not have to reselect it each time. These persist until you clear them or change your selection. Analytics Cookies. We use Google Analytics to collect aggregated, anonymized information about how visitors use our website (such as pages visited, session duration, and general location). These cookies help us improve the Services. Analytics cookies are non-essential and are only set after you have given your consent. Consent and Control. When you first visit our website, we will display a consent banner asking whether you agree to the use of analytics cookies. Analytics cookies will not be set unless you accept. Because we use Google's Consent Mode, analytics data collection is blocked by default until you consent. Your choice is stored in your browser, and you can change your mind at any time by clearing your browser's storage or cookies, which will cause the banner to be shown again. You can also manage or delete all cookies at any time through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that if you disable essential cookies (such as the authentication cookie), you will not be able to log in or use the Services. See your browser's help documentation for instructions on managing cookies.
Some features of the Services store data directly in your browser's local storage and IndexedDB on your device. This includes your chat sessions, chat and generation settings, and your history of generated images. This data is stored entirely on your own device and is never transmitted to or accessed by us. Consistent with our zero-log approach, your prompts, generated outputs, and generated images are stored only on your device and are not sent to or retained by our servers. Because this data is stored locally, you have full control over it and can delete it at any time by clearing your browser's storage or site data through your browser settings. Clearing this data will remove your chat history and generated image history, and will not affect your account.
We may modify this Privacy Policy at any time. If we make material changes, we will notify users with active paid subscriptions by email or through the Services and will update the "Last updated" date below. Your continued use of the Services following the posting of changes will mean that you accept and agree to the changes.
Last updated: July 28, 2026
The Services are not intended for, or directed at, anyone under the age of 18 (or the age of majority in their jurisdiction). We do not knowingly collect personal information from anyone under that age. If you believe we have collected personal information from a minor, please contact us so we can delete it.
This Privacy Policy is incorporated into, and forms part of, our Terms and Conditions, which govern your use of the Services. In the event of any conflict between this Privacy Policy and the Terms regarding the handling of personal information, this Privacy Policy will prevail.
If you have any questions or concerns about this Privacy Policy or our practices, please contact us.
Contact Us