Privacy Policy

Effective Date: Aug 25, 2025

We built CHAD with one thing in mind: your privacy comes first.

This Privacy Policy explains what we collect, how we use it, and how we keep it safe — in plain English, no legal mumbo-jumbo.

What We Collect

Information You Provide

  • Account Info: Your email, display name, and profile photo
  • Early Access Signups: Email and any feature requests you share
  • Chat Content: Messages, files, and anything else you add to CHAD
  • Support: Messages you send to our support team
  • Payments: Billing details (handled securely by Stripe — we never see your card numbers)

Information We Collect Automatically

  • Usage Data: Features you use, time spent, basic interactions
  • Device Info: Browser type, operating system, IP address
  • Analytics: Visits to our public site (via Google Analytics)
  • Performance Data: Error logs and system metrics to keep things running smoothly

Cookies & Tracking

  • Essential Cookies: Required for login and core features
  • Preference Cookies: Save your settings
  • Analytics Cookies: Used to improve User Experience.

How We Use Your Information

We use your info strictly to:

  • Run CHAD: Deliver AI conversations, collaboration, and features
  • Improve CHAD: Spot patterns to make the experience smoother
  • Talk to You: Product updates, support replies, important notices
  • Keep Things Safe: Stop fraud, abuse, and security threats
  • Process Payments: Manage subscriptions through Stripe
  • Stay Legal: Meet obligations when the law requires

✅ CHAD never sells your chat content, never uses it to train our own AI, and never shares it with advertisers.

⚠️ Some AI features rely on third-party providers (via OpenRouter). While we configure them with privacy-first settings where possible, we cannot fully control their policies. Please review those providers’ terms for details.

When We Share Data (and When We Don't)

We do not sell your personal information. Period.

We only share with trusted providers to make CHAD work:

  • Firebase (Google): Database, authentication, hosting
  • Supabase: Analytics database & vector search
  • Stripe: Payment processing & subscriptions
  • OpenRouter: AI model access
  • Resend: Email delivery
  • Upstash: Real-time messaging

AI Providers: To generate responses, CHAD routes your input to third-party model providers through OpenRouter. We work to choose providers that respect privacy, but once data is processed by an external service, their privacy policies apply.

We may also share if:

  • Law requires it: Subpoenas, court orders, or legal processes
  • Business changes: If CHAD is acquired or merged, your data transfers with the service

How We Protect Your Data

  • 🔐 Encryption: Data encrypted in transit and at rest
  • 🔑 Access Controls: Only authorized staff can touch sensitive systems
  • 🛡️ Regular Audits: Security reviews and vulnerability testing
  • ☁️ Secure Hosting: Enterprise-grade infrastructure (Firebase & Supabase)
  • Chat Data: Stored securely in Firebase Firestore with backups
  • Analytics Data: Stored in Supabase, anonymized where possible

Your Rights

You're in control of your data:

  • Access & Portability: Get a copy of your data or export chat history anytime
  • Correction: Update profile info, fix inaccuracies, adjust preferences
  • Deletion: Delete your account or specific chats, opt out of marketing
  • Cookies: Control cookie preferences in your browser, opt out of Google Analytics tracking

International Users

CHAD runs from the United States. If you're outside the US, your data may be transferred here.

  • EU Users: We comply with GDPR — you keep your rights over access, deletion, and consent.

Children's Privacy

CHAD isn't for kids under 13. We don't knowingly collect their info. If you think we have, contact us right away.

Policy Changes

We may update this policy from time to time. When we do, we'll:

  • Update the "Effective Date" above
  • Post changes here on this page
  • Notify you by email if you have an account
  • For big changes, show a notice inside the app

Contact Us

  • Email: [email protected]
  • Subject Line: Privacy Policy Question
  • Response Time: Usually within 48 hours

CHAD's Promise:

We don't stalk you, we don't sell you, and we don't train AI on your convos. Ever.