Privacy Policy

Version 1.0|Effective: January 31, 2026|Last updated: February 5, 2026

Privacy Policy

Effective Date: 2026-02-05

Version: 1.0

At AiFormer ("we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (optional)
  • Profile picture (optional)
  • Password (securely hashed)
  • Workspace and organization information

1.2 Usage Information

We automatically collect information about your use of the Service:

  • Application runs and their inputs/outputs
  • Feature usage and interaction patterns
  • Device information (browser type, operating system)
  • IP address and approximate location
  • Log data (access times, pages viewed)

1.3 Payment Information

When you subscribe to paid plans:

  • Payment method details (processed and stored by Stripe)
  • Billing address
  • Transaction history

We do not store complete credit card numbers on our servers.

1.4 API Keys

If you provide third-party API keys:

  • Keys are encrypted using AES-256 encryption at rest
  • Keys are only decrypted when needed for API calls
  • We store hints (last 4 characters) for your reference

1.5 Content Data

We store:

  • Applications you create and their configurations
  • Run inputs and outputs
  • Generated artifacts (documents, images, etc.)
  • Feedback and ratings you provide

2. How We Use Your Information

We use collected information to:

2.1 Provide the Service

  • Create and maintain your account
  • Process your transactions
  • Execute AI-powered applications
  • Store and retrieve your content and runs

2.2 Improve the Service

  • Analyze usage patterns to improve features
  • Debug and fix technical issues
  • Develop new features and services
  • Conduct research and analytics

2.3 Communicate with You

  • Send service-related notifications
  • Provide customer support
  • Send marketing communications (with your consent)
  • Notify you of policy changes

2.4 Security and Compliance

  • Detect and prevent fraud
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect our rights and property

3. AI Processing and Data Retention

3.1 AI Data Processing

When you run applications:

  • Your inputs are sent to third-party AI providers (OpenAI, Anthropic, Google, etc.)
  • AI providers may process data according to their own policies
  • Generated outputs are stored in your account
  • We log AI calls for auditing and debugging purposes

3.2 Data Retention

  • Account data: Retained while your account is active
  • Run history: Retained for your reference until you delete it
  • Audit logs: Retained for 90 days for security purposes
  • Payment records: Retained as required by law (typically 7 years)

3.3 Data Deletion

You can request deletion of your data by:

  • Deleting individual runs from your account
  • Requesting account deletion (removes all associated data)
  • Contacting us at hello@aiformer.ai

4. How We Share Your Information

4.1 Third-Party AI Providers

We share necessary data with AI service providers:

  • OpenAI: For GPT model processing
  • Anthropic: For Claude model processing
  • Google: For Gemini model processing
  • Other providers as needed for specific applications

4.2 Payment Processor

  • Stripe: Processes all payments and stores payment methods securely

4.3 Service Providers

We may share data with service providers who help us operate:

  • Cloud hosting providers
  • Email service providers
  • Analytics providers
  • Customer support tools

4.4 Legal Requirements

We may disclose information if required by law, regulation, or legal process, or to:

  • Protect our rights, privacy, safety, or property
  • Enforce our Terms of Service
  • Respond to government requests

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement appropriate security measures including:

  • Encryption in Transit: All data transmitted using TLS/SSL
  • Encryption at Rest: Sensitive data encrypted using AES-256
  • Access Controls: Role-based access to user data
  • Secure Infrastructure: Hosted on secure cloud providers
  • Regular Audits: Security assessments and vulnerability testing

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights

Depending on your location, you may have rights including:

6.1 Access

Request a copy of personal data we hold about you.

6.2 Correction

Request correction of inaccurate or incomplete data.

6.3 Deletion

Request deletion of your personal data (subject to legal requirements).

6.4 Data Portability

Request an export of your data in a machine-readable format.

6.5 Opt-Out

  • Unsubscribe from marketing emails
  • Disable certain data collection through account settings

6.6 Object

Object to certain processing of your personal data.

To exercise these rights, contact us at hello@aiformer.ai.

7. Cookies and Tracking

7.1 Essential Cookies

We use cookies necessary for the Service to function:

  • Authentication cookies
  • Session management
  • Security features

7.2 Analytics Cookies

With your consent, we use analytics cookies to:

  • Understand how users interact with our Service
  • Measure feature effectiveness
  • Improve user experience

7.3 Cookie Management

You can manage cookies through:

  • Browser settings
  • Our cookie consent banner
  • Account privacy settings

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses
  • Data processing agreements
  • Compliance with applicable transfer mechanisms

9. Children's Privacy

The Service is not intended for users under 19 years of age (the age of majority in British Columbia). We do not knowingly collect personal information from children. If we learn we have collected information from a child under 19, we will delete that information promptly.

10. Canadian Privacy Rights

As a British Columbia-based company, we comply with:

  • PIPA (Personal Information Protection Act - BC)
  • PIPEDA (Personal Information Protection and Electronic Documents Act - Federal)

You have the right to:

  • Access your personal information
  • Request correction of inaccurate information
  • Withdraw consent for certain processing
  • File a complaint with the Office of the Information and Privacy Commissioner of BC

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting a notice on the Service
  • Sending an email to your registered address
  • Updating the "Effective Date" at the top

We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: hello@aiformer.ai

Address: AiFormer Inc. Vancouver, British Columbia Canada


Last updated: 2026-02-05