Privacy Policy

This policy explains how GirlLab handles information when you use our website, Chat, voice features, and APIs.

Advertising measurement choices

When advertising measurement is enabled and you allow it in Privacy choices, we use Meta Pixel and server-side conversion events. We process advertising click identifiers, browser cookies, campaign parameters, the landing page, IP address, browser information, a hashed email and account identifier, and verified purchase amounts in USD. We do not include your chat messages in these events. Meta may associate these events with its own account information.

Attribution snapshots have a 30-day validity period; expired snapshots are periodically removed. You can withdraw permission through Privacy choices. This stops future advertising events and removes saved attribution for your signed-in account; it cannot recall events already delivered to Meta. You can continue using Chat and payments without advertising measurement.

Information we process

Account information includes your email address, password hash, account settings, and API key records. We also process credit balances, usage records, and billing adjustments.

Chat information includes messages, AI replies, conversation titles, persona settings, and relevant conversation history. Voice input is sent for transcription; text selected for playback is sent for speech synthesis. Technical logs may include IP addresses, request metadata, errors, and diagnostic information.

Why we use information

We use this information to authenticate accounts, provide AI responses and voice features, maintain conversation history, calculate credits, handle support requests, protect the service, and meet applicable legal obligations.

Where applicable law requires a legal basis, processing depends on providing the service you request, legitimate interests such as security and service reliability, compliance with legal obligations, or consent where required.

Service providers and disclosures

Hosting, infrastructure, AI inference, speech, and support providers may process information needed to perform their services. To generate a reply, we send your message, persona, and relevant history to the configured AI provider. Do not submit secrets or personal information you are not authorized to share.

If you use a Stripe checkout when available, Stripe processes the payment information you provide under its own privacy policy. We may receive payment references, status, amount, currency, and billing details needed to reconcile your purchase. Payment availability is determined by the checkout actually offered on the site.

We may disclose information when required by law or reasonably necessary to address fraud, security incidents, or legal claims. Providers and infrastructure may operate outside your country; any required safeguards depend on the applicable data protection rules.

Storage, retention, and security

Your browser stores login tokens, your remembered email, language, and interface preferences locally. Clearing this storage or signing out may remove your local login state; it does not delete server-side account or conversation records.

Conversation history remains available until deleted through the service or handled through a verified deletion request. Account, usage, billing, security, and backup records may need to be retained for service operation, legal obligations, dispute resolution, or fraud prevention. Deleting a conversation from active storage does not necessarily immediately remove copies from backups or independent provider records.

We use HTTPS and access controls to help protect information. No internet service or storage system can guarantee absolute security.

Your choices and rights

You can manage API keys, delete conversations, and change available account settings in the console. Contact us to request access, correction, export, account deletion, or other rights available under the law that applies to you. We may verify your identity and retain information where legally required. Where applicable, you may also complain to your data protection authority.

Updates and contact

We will publish changes on this page and update the date above. Material changes will be communicated as required by applicable law. Use the contact details below for privacy questions and requests.