Privacy Policy

1. What we collect

Account data — email, hashed password, sign-in metadata.
Conversation data — messages you send and receive, including content, timestamps, and any media exchanged.
Memory data — facts the system extracts from your conversations to personalize future interactions. You can view, edit, and delete this at /account/memory.
Billing data — payment processor handles card details directly; we store only customer/subscription identifiers and receipts.
Usage data — page visits, feature usage, error reports. May include IP address and device metadata for fraud prevention and analytics.

2. How we use your data

To deliver the service (chat, memory, image delivery).
To personalize character interactions across sessions.
To process payments and prevent fraud.
To improve the product through aggregated analytics.
To send service-related emails (account, billing, security).

3. How we share your data

We do not sell personal data. We share limited data with service providers needed to operate roxii.ai (cloud hosting, payment processing, email delivery, AI inference). Each provider is contractually bound to use data only for the service they provide. We do not share conversation content with advertisers.

4. AI processing

Your messages are sent to large language model providers to generate character responses. Providers may retain inputs briefly for abuse monitoring; they do not use roxii.ai data for model training.

5. Data retention

Conversation history: retained while your account is active.
Memory data: retained until you delete it or close your account.
Account data: retained for the life of your account; deleted within 30 days of closure.
Billing records: retained as required by tax and accounting law (typically 7 years).

6. Your rights

You can access, export, or delete your data at any time. California residents have additional rights under the CCPA, including the right to know what data we have about you and to request deletion. Contact privacy@roxii.ai to exercise any right.

7. Security

We use industry-standard encryption in transit and at rest, hashed passwords, and access controls on production data. No system is perfectly secure; if a breach affects you, we will notify you within the timeframes required by law.

8. Age requirement (18+)

Accounts on roxii.ai are open to users 18 and older. This is a data-protection decision, not a content one — the product is fully moderated and SFW, but the depth of personal data we collect and process (conversation history, extracted facts about you, profiles that power memory and continuity, automated interpretation of your messages) exceeds what we are equipped to handle for minors.

Federal law (COPPA) prohibits us from knowingly collecting personal data from children under 13. State laws — including California's CPRA, the Age-Appropriate Design Code Act, and AI companion legislation such as California SB 243 — impose additional protections for users under 18, including limits on profiling and special handling of sensitive personal information. Our system architecture cannot accommodate those minor-specific obligations, so we do not permit anyone under 18 to use the service.

We do not knowingly collect data from anyone under 18. If we discover an account belongs to a minor, we will close it and delete the associated data. If you believe a minor has registered, please email privacy@roxii.ai.

9. Changes to this policy

We will notify you of material changes by email or in-product notification before they take effect. Continued use after the effective date constitutes acceptance.

10. Contact

Questions about this policy: privacy@roxii.ai or /support.