This Privacy Policy explains how Immersive Character AI ("we", "us") collects, uses, and safeguards your information when you use our website at imrsvprtl.com and related services (the "Service").
1. Information We Collect
Information you give us
- Account data — email address, username, password (hashed), date of birth
- Profile data — display name, avatar, bio (if you provide one)
- Content — characters, personas, and chat messages you create
- Age verification — a selfie photo (if you opt in to NSFW content). We use an AI model to confirm the subject appears to be an adult; the photo is not retained after verification completes
- Payment info — billing details for Immersive+ subscriptions. These are processed and stored directly by Stripe. We only receive a subscription status and non-sensitive metadata
- Communications — feedback and support messages you send us
Information collected automatically
- Usage data — pages visited, features used, timestamps
- Device data — browser type, operating system, IP address (for security and abuse prevention)
- Cookies — a session cookie for keeping you signed in. We do not use third-party advertising cookies
2. How We Use Your Information
- To operate the Service (authenticate you, deliver AI-generated responses, save your characters and chats)
- To process payments and manage subscriptions
- To send transactional email (password reset, subscription receipts, admin replies)
- To detect and prevent fraud, abuse, and Terms of Service violations
- To improve the Service and develop new features
- To comply with legal obligations
We do not sell your personal information. We do not use your chat content to train third-party AI models beyond the transient processing required to generate a response.
3. AI Processing of Your Content
Chat messages, character descriptions, and personas you create are transmitted to Anthropic's Claude API to generate responses. Anthropic processes this data transiently and does not retain it for training under its enterprise API terms. Similarly, avatar prompts are sent to Google's Nano Banana model for image generation and are not retained.
4. How We Share Information
We share information only with:
- Service providers — Anthropic, Google, Stripe, Resend, and our hosting/database providers, each bound by contract and data-protection standards
- Legal & safety — law enforcement or other authorities when required by law, subpoena, or to protect the safety of users. This includes reporting Child Sexual Abuse Material (CSAM) to NCMEC
- Business transfers — if we are acquired or merge, your information may be transferred to the acquiring entity subject to this Policy
5. Data Retention
We retain your account and content for as long as your account is active. When you delete your account (Settings → Delete Account), we permanently delete your characters, chats, personas, feedback, and reset tokens within 30 days. Backups may retain data for up to 90 days after deletion.
6. Security
We protect your information using industry-standard practices: passwords hashed with bcrypt, TLS for all data in transit, restricted database access, and regular security reviews. No system is 100% secure, however, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (via the "Delete Account" flow, or by emailing us)
- Export your data in a machine-readable format (subscribers can export chats as PDF/HTML/MD from within the app; other data on request)
- Object to or restrict certain processing
- Withdraw consent for optional processing at any time
To exercise these rights, email privacy@imrsvprtl.com. We will respond within 30 days.
California residents (CCPA)
California residents have additional rights to know what personal information we collect, delete it, and opt out of the "sale" of personal information (we do not sell it). Requests can be made through the email above.
European residents (GDPR)
We process your data under legitimate interest, contract performance, and consent as applicable. You have the right to lodge a complaint with your local supervisory authority.
8. Children
The Service is not intended for anyone under 18. We do not knowingly collect information from minors. If we discover that a minor has created an account, we will delete it immediately. If you believe a minor is using the Service, contact us at support@imrsvprtl.com.
9. International Transfers
We operate from Texas, USA. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. By using the Service you consent to this transfer.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced by email or in-app notice at least 14 days before they take effect.
11. Contact
General questions: support@imrsvprtl.com
Privacy requests: privacy@imrsvprtl.com
Mailing address: available on request