Privacy Policy

1. Who We Are

Nastia (nastia.ai) is operated by Nastia Cybernetics, a French company, which is the controller of your personal information. This policy applies to the website, apps and related services (the "Service") and should be read together with our Terms of Service. You can reach us at legal@nastia.ai.

2. Information We Collect

• Account information: your email address, username, password (stored in hashed form) and, if you sign in with another service, the basic profile details it shares with us.
• Age confirmation: your confirmation that you are at least 18 and, where the law requires an age check, the result of that check. The check is carried out by a specialist provider; we receive the result, not your ID document or face images.
• What you create in Nastia: your companions, chats, memories, voice messages, custom voice samples, and the images and videos you generate, together with the prompts and settings used.
• Payment information: payments are handled by our payment processors. We receive details of the transaction, such as the plan, amount, date and status. We never receive or store your full card number.
• Device and usage information: your IP address, browser and device type, approximate location derived from your IP address, and how you use the Service, collected through logs, cookies and similar technologies.
• Messages you send us: for example support requests and reports.

3. How We Use It

• To provide the Service: create your account, run your companions and chats, generate media, process payments and provide support (performance of our contract with you).
• To keep the Service safe and legal: verify age where required, enforce our rules, prevent fraud and abuse, and secure our systems (our legitimate interests and our legal obligations).
• To maintain and improve the Service, including the quality of companion replies and our safety systems (our legitimate interests).
• To send you service emails such as receipts and security notices, notifications you turn on, and news and offers, which you can unsubscribe from at any time (our contract with you and our legitimate interests, or your consent where the law requires it).
• To measure and promote the Service (our legitimate interests).
• To comply with the law and respond to lawful requests (our legal obligations).

4. Your Content Stays Private

Nothing you create on Nastia is shown to other users. There are no public profiles, feeds or galleries, and we do not sell your personal information.

To keep Nastia safe, automated systems check requests against our content rules. If our systems detect a serious or repeated violation, your account may be restricted or closed; you can ask for a human review by writing to legal@nastia.ai.

5. Who We Share It With

We share personal information only as needed with:

• Service providers that work on our behalf under contract, such as cloud hosting and storage, AI infrastructure, payment processing, age assurance, content safety, email, analytics and advertising providers.
• Authorities, when the law requires it or to protect people from serious harm, including reporting child sexual abuse material.
• A buyer or successor, if our business is sold or reorganized.

6. International Transfers

Some of our providers process information outside the European Economic Area, including in the United States. Where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. How Long We Keep It

We keep your information while your account is open. You can delete chats, images and videos at any time, and you can delete your account from your settings, which deletes your account and the content in it. We keep some information longer only where needed:

• payment and transaction records, for as long as accounting and tax law requires;
• records of reports, rule violations and enforcement actions, including the related account details, prompts and chats of accounts that broke our rules, for up to 7 years, or longer where needed for an investigation or legal claim;
• answers you choose to give when you cancel a membership;
• backups, which are overwritten on a regular cycle.

8. Your Rights

You can ask to access, correct, delete or export your personal information, to restrict or object to how we use it, and to withdraw any consent you gave. You can make these requests by writing to legal@nastia.ai. If you are in the European Union, you can also complain to your local data protection authority; in France this is the CNIL (cnil.fr).

If you live in a US state with a consumer privacy law, such as California, you have similar rights to know, delete and correct your information and to opt out of targeted advertising, and we will not treat you differently for using them. We do not sell personal information. Some advertising cookies may count as "sharing" under those laws; to opt out, write to legal@nastia.ai.

9. Cookies

We use cookies and similar technologies to keep you signed in and the Service working, to understand how the Service is used, and to measure our advertising. You can block or delete cookies in your browser settings; if you block essential cookies, parts of the Service may not work.

10. Security

We protect your information with encryption in transit and access controls that limit it to people who need it. No system is completely secure, so please use a strong password and keep it private.

11. Adults Only

Nastia is only for people aged 18 or over. We do not knowingly collect information from minors, and we close accounts we believe belong to one.

12. Changes

We may update this policy. The date at the top shows the latest version, and we will tell you about significant changes before they take effect.

13. Contact

For any question about this policy or your personal information, write to Nastia Cybernetics at legal@nastia.ai.