Privacy Policy

Last updated: October 2026

What We Collect

We collect your account email and display name when you register. We store the conversations and file attachments you send through AROai, along with usage metadata (message counts, timestamps, plan tier) needed to operate the service.

How We Use Your Data

Your data is used to deliver and improve the AROai service: sending your messages to AI service providers so they can be answered, enforcing quotas, billing, and providing support. Where you allow it, we also measure how well our ads work (see "Advertising measurement" below). We do not sell your data or use it to train AI models.

Third-Party Processors

We share data with service providers under contract, in these categories: third-party AI service providers (to generate responses to your messages), payment processors (to take and reconcile payments), cloud infrastructure providers (to host and operate the service), and an email provider (for account and transactional email). Each receives only the data necessary for its function. We will provide the current list of these providers on request — contact us at the address below. The AI providers that may receive your messages include OpenAI, Anthropic, Google, xAI, Meta, Mistral, DeepSeek, Moonshot, Qwen, Cohere and Perplexity, reached through our routing provider OpenRouter. Each is bound by contract to protect your data to the same or an equal standard as this policy sets out. Separately, Meta receives limited data to measure our ads, as described under "Advertising measurement" below.

Advertising measurement (Meta Pixel and Conversions API)

We advertise AROai on Facebook and Instagram. To learn which ads work, we use the Meta Pixel on our website and Meta's Conversions API on our servers. When you visit our website, sign up, start a paid plan, buy credits or tap a link to our mobile app, we share that event with Meta Platforms together with technical data: the page address, your IP address, your browser type, your country, the Meta cookies _fbp and _fbc and, for account events, your email address and account ID in hashed (SHA-256) form. Meta uses this to connect the event to ad views and clicks and to improve ad delivery. We never share the content of your conversations or files. Visitors in the EU, the EEA, the UK and Switzerland are asked first, and nothing is shared until they accept; everywhere else this is on by default. You can accept or decline at any time with the Cookie settings button below. Meta's own use of this data is described in Meta's Privacy Policy.

Data Retention

Your account data and conversation history are retained for as long as your account is active. You can delete individual conversations at any time. When you close your account, your personal data is deleted within 30 days.

Your Rights

You have the right to access, correct, and delete your personal data. You can export a copy of your data at any time from Settings. To exercise any other right or for questions about your data, contact us at the address below.

Security

API keys you add are encrypted at rest and only the last four characters are ever shown. Connections to AROai are secured with TLS. We apply industry-standard security practices and review them regularly.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by a notice in the application before the change takes effect.

Contact

Questions about this privacy policy? Email us at [email protected].

Who can receive your prompts

To answer you, AROai sends your message to a third-party AI service provider. On the free plan, if your selected model is unavailable, your request may be answered by another model from a comparable provider — so a different provider may receive the content of a free-plan message. Paid plans always use the model you selected. You can turn substitution off in Settings.