Privacy Policy
Last updated 23 October 2026
1. Who is responsible
The data controller is Arda Cocen, Via Cimbardi 96A. For anything about your data write to [email protected].
2. What we collect, why, and on what basis
| Data | Why | Basis |
|---|---|---|
| E-mail address; password (stored only as a salted hash; accounts created with Google have none you know); the Google account identifier if you sign in with Google; plan; sign-in sessions (time, IP address, browser) | Create and secure your account, confirm your address, reset your password, keep you signed in | Contract; legitimate interest (security) |
| Security log of account events (sign-up, sign-in, failed sign-in, password change, linking Google) with time and IP address | Detect and investigate abuse and break-in attempts | Legitimate interest |
| Your instructions, conversations, project files and the answers produced | Provide the service; keep your work between visits | Contract |
| Usage records: which model was used, when, how many tokens, how the request ended (never the text of your conversation) | Show your usage, apply plan limits, prevent abuse, calculate our costs | Contract; legitimate interest |
| Billing data: Stripe customer and subscription identifiers, amounts, dates (never your card number) | Charge you, issue receipts, keep accounting records | Contract; legal obligation |
| Technical logs (requests, errors, IP address) | Run, protect and debug the service | Legitimate interest |
When you use “Continue with Google” we ask Google only for your e-mail address (and its verified status) and Google's identifier for your account. We do not ask for your name, photo, contacts or anything else, and we cannot read your Google data.
We do not sell your data, we do not show advertising and we do not use advertising or analytics trackers.
3. Who else processes it
- AI model providers. What you write and the files the assistant needs are sent, through our infrastructure, to the AI models that produce the answers. Do not put in a project anything you are not allowed to share with such providers (for example other people's personal data without a legal basis, or secrets).
- Cloudflare delivers the site and protects it from attacks, so your requests pass through its network.
- Stripe processes payments and sends receipts; it is an independent controller for its own purposes.
- Resend sends the e-mails we owe you (confirmation, password reset).
- Google, only if you choose “Continue with Google”: it authenticates you under its own privacy policy and tells us your verified address.
Some of these providers are outside the European Economic Area, notably in the United States. Where that happens we rely on the safeguards the law provides, such as the European Commission's standard contractual clauses or an adequacy decision.
4. Cookies and local storage
We use one cookie that keeps you signed in. It is strictly necessary and is not used for tracking. If you choose “Continue with Google”, a second cookie lives for at most 10 minutes to make sure the sign-in finishes in the same browser that started it. Your browser also stores a few interface preferences on your device (for example panel sizes and language). No consent banner is needed for these.
5. How long we keep it
- Account, conversations and projects: until you delete them or ask us to delete your account.
- Accounts whose e-mail address is never confirmed: removed after about a week.
- Sign-in sessions: they expire after 7 days without use and after 30 days at most.
- Security log of account events: 12 months.
- Technical logs: about 30 days.
- Backups: kept for a limited period (currently up to 14 days), then overwritten.
- Billing and accounting records: for as long as tax and accounting law requires.
6. Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to [email protected] from the address of your account; we answer within one month. There is no self-service button to delete an account yet: ask us by e-mail. If you think we handle your data unlawfully you can complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali, www.garanteprivacy.it).
7. Security
Connections to https://anvilchat.com are encrypted. Passwords are hashed, sign-in links and session tokens are stored only as digests, projects of different accounts are kept apart, and access to the server is restricted. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
8. The desktop app
The AnvilChat desktop app runs on your own computer. Your conversations and files stay in the app's folder on your computer and are not sent to us. The app has no account with us and contains no analytics. It sends what you write, and the files the assistant needs, to the AI model provider you set up (with your own key or the router you configured), under that provider's terms.
9. Children
The service is not meant for people under 18 and we do not knowingly collect their data.
10. Changes
We may update this policy; the date at the top shows the latest version. We will tell you about important changes.