Privacy policy

1. Who is responsible

The operator of Nyxhora is the controller of your personal data. Our contact details are on the legal notice page. For privacy requests, write to the email address listed there.

2. What we collect

Depending on how you use Nyxhora, we process the following data.

• Account data: your name, email address and the identifier of the sign-in provider (for example Google or GitHub).
• Content you create: messages you send to characters, the replies generated for you, your persona text, the memories saved from your chats and any characters you create.
• Telegram data, when you pay: your Telegram user ID and username, which our payment bot receives when you pay with Stars.
• Payment data: purchases are handled by Telegram. We receive a confirmation with the product, the amount in Stars and a payment reference. We never receive your card or bank details.
• Technical data: a hashed form of your IP address, approximate country, device and browser information, and security and abuse-prevention logs.
• Usage events: pages viewed, button clicks and language choices, described in section 6.

3. Why we use your data and on what basis

We use personal data only for the following purposes.

• To provide the service you asked for, such as signing you in, running chats and remembering your preferences (performance of a contract).
• To process and confirm purchases and to handle refund requests (performance of a contract and legal obligations).
• To keep the service safe, prevent abuse and fix errors (our legitimate interest).
• To understand how the product is used and improve it, using analytics that you can accept or refuse (your consent).

4. Who receives your data

We use service providers who process data on our instructions: hosting and database providers, and AI model providers that generate character replies and embeddings. Your chat content is sent to these AI providers so a reply can be produced. Telegram processes data under its own privacy policy when you pay through it.

We do not sell your personal data.

5. International transfers

Some providers are located outside your country, including in the United States. Where required, we rely on safeguards such as the European Commission’s Standard Contractual Clauses.

6. Cookies, storage and analytics

We use a small number of essential items that the site needs to work: your session, your theme, your language choice and your consent choice. These do not require consent.

If you press Accept in the consent banner, we also store a random anonymous identifier in your browser so we can count returning visitors. If you press Essential only, we still measure basic events such as page views, but without any persistent identifier. You can change your choice at any time from the Cookie settings link in the footer.

For aggregated statistics we use Umami (cloud.umami.is). It sets no cookies, stores no identifier on your device and only reports page views and product events such as "chapter finished", never the content of your chats or stories.

Only if you press Accept do we also load Microsoft Clarity (Microsoft Corporation), which uses cookies to show us anonymised heatmaps and session recordings so we can find usability problems. Chats, chapter drafts, onboarding answers and account settings are masked and never recorded. Clarity stops as soon as you switch to Essential only. Microsoft's privacy statement applies: privacy.microsoft.com.

7. How long we keep data

We keep your account, chats and memories until you delete them or ask us to delete your account. Security and payment records are kept as long as the law or a legitimate need requires, and are then deleted or anonymised.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your data, to object to certain processing and to withdraw consent at any time. If you are in the EU or the UK, you can also complain to your local data protection authority. If you are in Canada, you may contact the Office of the Privacy Commissioner or, in Quebec, the Commission d’accès à l’information. If you are in California or another US state with a privacy law, you may have similar rights. To use a right, contact us using the details on the legal notice page.

9. Age limit

Nyxhora is for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has used the service, contact us and we will delete the data.

10. Changes

We may update this policy when the service changes. The date at the top shows when it was last revised, and we will highlight significant changes in the product.