Privacy Notice
Pure Love ("Pure Love", "we", "us", "our") is the data controller for personal data processed through https://purelove.chat and related services (the "Services"). This Privacy Notice describes what personal data we collect, how we use it, who we share it with, and the rights you have under applicable data protection laws including the EU GDPR, UK GDPR, the California Consumer Privacy Act (CCPA), and other state and federal privacy laws.
We are: Pure Love, a Delaware limited liability company, with its principal place of business at (to be updated upon company registration).
1. Personal Data We Collect
Account data: email address, encrypted password (or OAuth identifier from Google, Discord, or X), display name, account creation timestamp, sign-in history, IP address.
Profile and preferences: display name, AI Companion preferences (appearance, personality, voice), language and currency preferences (auto-detected from IP).
Conversation content: messages you send to AI Companions and outputs generated in response. These are stored to provide chat history, conversation memory, and to operate the Services.
Generated content: images and other media generated for you by the Services.
Payment data: processed by our payment partners (CoinGate for cryptocurrency, CCBill for cards if applicable). We do not store full card numbers or wallet keys. We retain transaction records (last 4 digits, transaction ID, date, amount, currency, refund status) for accounting and dispute resolution.
Usage data: pages viewed, features used, errors encountered, device type, browser, operating system, referring URL.
Cookies and similar technologies: see our Cookies Notice for details.
Communications: support requests, complaints, and any correspondence you send us.
2. Why We Process Your Data and Legal Bases
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Account creation and management | Email, password, OAuth ID, sign-in metadata | Performance of contract; legitimate interest |
| Provision of chat and image services | Conversation content, AI Companion preferences | Performance of contract; consent for sensitive content |
| Payment processing | Payment data, transaction records | Performance of contract; legal obligation (tax, accounting) |
| Customer support | Support correspondence, account data | Legitimate interest in addressing your requests |
| Service improvement and AI safety | Aggregated, de-identified usage data | Legitimate interest in improving the Services |
| Trust and safety / moderation | Conversation content, account history, IP, flagged outputs | Legitimate interest; legal obligations including reporting CSAM under 18 U.S.C. § 2258A |
| Marketing emails (only with consent) | Email, name, preferences | Consent (opt-in) |
| Legal and regulatory compliance | Whatever is required | Legal obligation |
| Defense of legal claims | Whatever is relevant | Legitimate interest |
3. How We Share Data
We share personal data with:
Service providers under written contracts that limit their use of your data to providing services to us:
- Hosting: Render, Cloudflare R2, Cloudflare CDN/DNS
- LLM provider: OpenRouter (which routes to model hosts including Together AI, Lambda, Anyscale, etc.). Your messages and outputs are transmitted to the LLM provider for response generation.
- Email: Zoho Mail, transactional email provider
- Payment processors: CoinGate, CCBill (when launched)
- Analytics: PostHog or Mixpanel (if used; see Cookies Notice)
- Error monitoring: Sentry
- Customer support: Zendesk (planned)
Legal authorities when required by valid legal process or to comply with our reporting obligations under U.S. law (including mandatory CSAM reporting to NCMEC).
Successor entities in connection with a merger, acquisition, or sale of assets. Any successor will be bound by this Privacy Notice.
We do not sell your personal data. We do not share your conversation content with third parties for advertising purposes.
4. International Data Transfers
We are a U.S. company operating Services accessible globally. Personal data may be transferred to and processed in the United States and other countries where our service providers operate. For transfers from the EU/EEA, UK, or Switzerland to countries without an adequacy decision, we rely on Standard Contractual Clauses or equivalent safeguards.
5. Retention
- Account data: retained while your account exists; deleted within 30 days of account deletion request, except where longer retention is required by law
- Conversation content: retained while your account is active; deleted with account deletion (subject to backup rotation, typically within 90 days)
- Payment records: retained for 7 years for tax and accounting purposes
- Marketing data: until you withdraw consent
- Moderation logs related to violations: retained as required for legal defense and law enforcement reporting (including CSAM reports under federal law)
- Inactive accounts: purged after 60 days of inactivity (per our retention policy)
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
Under EU/UK GDPR:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to erasure")
- Restrict processing
- Data portability
- Object to processing based on legitimate interests
- Withdraw consent (where processing is based on consent)
- Lodge a complaint with your supervisory authority
Under CCPA/CPRA (California):
- Know what personal information we collect, use, share, and sell
- Delete personal information
- Correct inaccurate personal information
- Opt out of "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising)
- Limit use of sensitive personal information
- Non-discrimination for exercising rights
Under other state privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, etc.): similar rights apply.
To exercise these rights, contact us at legal@purelove.chat. We will respond within 30 days (extendable to 90 days for complex requests). We may need to verify your identity before fulfilling requests.
7. Children
The Services are intended only for adults 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we learn we have inadvertently collected data from a minor, we will delete it promptly. See our Underage Policy.
8. Security
We use industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive data, access controls, security headers, and regular security reviews. No system is perfectly secure; we cannot guarantee absolute security but commit to notifying you of any breach affecting your data without undue delay.
9. Cookies
See our Cookies Notice for information about cookies and similar technologies.
10. Changes to This Notice
We may update this Privacy Notice. Material changes will be notified by email or prominent notice on the Services 30 days before they take effect.
11. Contact
Privacy questions, GDPR/CCPA requests:
Email: legal@purelove.chat
Mailing Address: Pure Love, (to be updated upon company registration)
Data Protection Contact:
Email: dpo@purelove.chat
EU Representative (Article 27 GDPR):
To be appointed. Contact legal@purelove.chat for inquiries.