Privacy Policy

1. Overview

Shiori AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI chat application and related services (the "Service"). By using Shiori, you agree to the collection and use of information in accordance with this policy.

Data Controller: Sami Hindi, sami.hindi@shiori.ai
Jurisdiction: Zurich, Switzerland

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Email address, name, password (encrypted)
• Profile Information: Display name, profile picture
• Payment Information: Billing details processed through Stripe (we do not store full payment card details)
• Communication: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: Features used, models selected, generation requests, usage statistics
• Technical Data: IP address, browser type, device information, operating system
• Analytics Data: Page views, clicks, session duration via DataFast analytics
• Chat Data: Your conversations with AI models, prompts, and generated content
• Generated Content: Images, videos, and audio files you create using our services

2.3 File Uploads

When you upload files (PDFs, CSVs, images, audio files), we process and store these files to provide our services. Uploaded files are stored securely and used only for the purposes of your AI interactions.

3. How We Use Your Information

3.1 Service Provision

• Providing AI chat, image generation, video generation, and voice synthesis services
• Processing your requests through various AI model providers
• Managing your account and subscription
• Storing your chat history and preferences
• File processing and analysis for document chat features

3.2 Service Improvement

• Analyzing usage patterns to improve our services (aggregated, non-personal data)
• Developing new features and capabilities
• Monitoring service performance and reliability
• Fraud prevention and security monitoring

3.3 Communication

• Sending service-related notifications and updates
• Responding to your inquiries and support requests
• Sending billing and subscription information

4. AI Model Training Policy

Important: WE (shiori.ai) do NOT use your conversations, prompts, or generated content to train AI models. Your data remains secure, but it is shared with AI model providers for training purposes.

5. Data Sharing and Third-Party Services

5.1 AI Model Providers

To provide our services, we share your prompts and requests with:

• OpenAI: For GPT models, DALL-E image generation, TTS services
• Anthropic: For Claude models
• Google: For Gemini models and image generation
• xAI: For Grok models
• DeepSeek: For DeepSeek models
• Groq: For LLaMA models
• Stability AI: For Stable Diffusion image generation
• Runway ML: For video generation services
• Luma Labs: For video generation services
• ElevenLabs: For voice synthesis services

Each provider has their own privacy policies and data handling practices. We recommend reviewing their policies.

5.2 Infrastructure and Support Services

• Convex: Database and real-time data synchronization
• Vercel: Hosting and file storage (Vercel Blob)
• Stripe: Payment processing
• DataFast: Analytics and performance monitoring
• Microsoft Azure: Some AI model access through Azure OpenAI

5.3 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, safety, or the safety of others.

6. Data Storage and Security

6.1 Security Measures

• Encryption in transit and at rest
• Secure authentication systems
• Regular security monitoring and updates
• Access controls and staff training

6.2 Data Location

Your data is primarily stored in secure data centers operated by our service providers, including servers in the United States and Europe. We ensure appropriate safeguards for international data transfers.

6.3 Data Retention

• Account Data: Retained until account deletion
• Chat History: Retained until manually deleted by user
• Generated Content: Stored according to your account settings
• Usage Analytics: Aggregated data retained for service improvement
• Payment Data: Billing records retained as required by law

7. Your Rights and Choices

7.1 Account Management

• Access: View and download your account data
• Correction: Update your profile information
• Deletion: Delete your account and associated data
• Export: Export your chat history and generated content

7.2 Privacy Controls

• Manage AI memory settings
• Control chat history retention
• Delete individual conversations
• Manage subscription and billing preferences

7.3 Communication Preferences

Shiori only sends emails to you when you sign up to our services, or you upgrade to a paid plan..

8. Cookies and Tracking

8.1 Essential Cookies

• Authentication and session management
• Security and fraud prevention
• Service functionality and preferences

8.2 Analytics Cookies

• DataFast analytics for service improvement
• Usage statistics and performance monitoring
• Feature usage and error tracking

8.3 Managing Cookies

You can control cookies through your browser settings, though disabling essential cookies may affect service functionality.

9. International Data Transfers

As we operate globally and use international service providers, your data may be transferred to and processed in countries outside Switzerland, including the United States. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by Swiss authorities
• Standard contractual clauses
• Certified service providers with appropriate protections

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. Swiss and EU Privacy Rights

Under Swiss data protection law and GDPR (where applicable), you have the following rights:

• Right to Information: Know what data we process and why
• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a usable format
• Right to Object: Object to certain types of processing
• Right to Lodge a Complaint: Contact Swiss or EU data protection authorities

12. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, in accordance with applicable law.

13. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

14. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you of any such change and provide choices regarding your information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to the address associated with your account
• Posting a notice in our application
• Updating the "Last updated" date at the top of this policy

Continued use of our services after changes become effective constitutes acceptance of the updated policy.

16. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

17. Supervisory Authority

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local data protection authority.