Privacy Policy

This policy explains how Himalaya Trading Company handles personal data when you use Factory.ai.

1. Data we collect

We may collect your email address, account identifiers, age and Terms confirmation, selected companion, chat messages, conversation summaries, saved memories, image prompts, uploaded reference images, generated-image records, plan and credit balances, payment references, support messages, IP/security logs and basic device or browser information.

2. Why we use it

We use data to create and secure accounts, provide personalized conversations, deliver and retain requested images, remember relevant context, enforce limits, process or verify purchases, prevent abuse, troubleshoot errors, respond to support requests and comply with law.

3. AI and service providers

Relevant prompts and recent conversation context may be sent to AI providers through OpenRouter or another configured model provider. Supabase supports authentication, database and file storage; Railway hosts the application; a payment provider may process payments when enabled. These providers process information under their own terms and security practices.

4. Data minimization and sharing

We aim to send only the context needed for a response. We do not sell personal data. We may share data with processors needed to operate the service, professional advisers, authorities where legally required, or a successor in a lawful business transfer.

5. Storage and retention

Account, chat and image records may remain while your account is active so history and memories work. We may retain limited billing, fraud, security and legal records after deletion where required. Retention periods may vary by record type and legal obligation.

6. Your choices and rights

You may ask to access, correct or delete eligible personal data, withdraw consent where processing relies on consent, or raise a grievance. Withdrawing or deleting required data can make some features unavailable. Send requests from your registered email through the Contact page.

7. Security and breaches

We use access controls, authenticated sessions and protected server credentials. No internet service is completely secure. If a personal-data breach requires notice under applicable law, affected users and authorities will be informed as required.

8. Adults only

The service is not intended for anyone under 18. We do not knowingly permit minors to create accounts. Report suspected underage access immediately.

9. Cross-border processing and updates

Some processors or AI model providers may process data outside your state or country, subject to applicable law. Policy changes will be published here with an updated effective date.