Privacy Policy — PopPop AI

This policy explains what PopPop AI collects, why we collect it, how long we keep it and what you can ask us to do with it at any time.

1. Who we are. PopPop AI operates the website at poppop-ai.com and the companion chat experience offered through it. Whenever this policy says "we" or "us", it means PopPop AI.
2. Scope of this policy. This policy covers information collected through the PopPop AI website, its pages and any chat experience reached from it. It does not cover third-party websites you reach by following an outbound link.
3. Age requirement. PopPop AI is intended solely for adults aged 18 or older. We do not knowingly collect information from anyone below that age, and accounts found to belong to minors are removed.
4. Information you give us directly. This includes anything you type into a chat, any preferences you set, and any details supplied when contacting support.
5. Information collected automatically. We record standard technical data such as browser type, device category, approximate region derived from IP address, referring page and timestamps of visits.
6. Cookies and similar technologies. Cookies are used to keep sessions active, remember display preferences and measure aggregate traffic patterns. You can block or delete them in your browser settings.
7. Analytics. Aggregate analytics help us understand which pages are useful and which are ignored. Analytics reports are read at the level of totals, not individuals.
8. Chat content. Messages exchanged with a PopPop AI character are stored so that conversations remain continuous. They are not published, sold or used as public examples.
9. Purpose of processing. Data is processed to deliver the service, maintain conversation continuity, prevent abuse, meet legal duties and improve the quality of the experience.
10. Legal bases. Depending on your jurisdiction, processing rests on your consent, on the performance of a contract with you, on our legitimate interest in running a secure service, or on a legal obligation.
11. Marketing communications. We contact you with promotional material only where you have opted in. Every such message carries a one-click unsubscribe.
12. Sharing with service providers. Hosting, security, payment and analytics providers may process data strictly on our instructions and under written confidentiality terms.
13. No sale of personal data. PopPop AI does not sell personal information, and does not share it with data brokers or advertising networks for their own purposes.
14. International transfers. Where data moves across borders, we rely on recognised safeguards such as standard contractual clauses or adequacy decisions.
15. Retention periods. Information is kept only as long as it serves the purpose it was collected for, or as long as a law requires. After that it is deleted or irreversibly anonymised.
16. Security measures. We apply encryption in transit, restricted internal access, logging of administrative actions and regular review of our providers.
17. Breach handling. If a security incident is likely to affect your rights, we notify the relevant supervisory authority and, where required, the affected users.
18. Your right of access. You may request confirmation of whether we hold data about you and receive a copy of it.
19. Your right to correction. Inaccurate or incomplete information can be corrected on request.
20. Your right to erasure. You may ask us to delete your data where there is no overriding legal reason to keep it.
21. Your right to restriction and objection. You may ask us to pause certain processing, or object to processing based on legitimate interests.
22. Your right to portability. Where technically feasible, you can receive your data in a structured, machine-readable format.
23. Withdrawing consent. Consent, where it is the basis of processing, can be withdrawn at any time without affecting what happened before the withdrawal.
24. Automated decision-making. We do not make decisions producing legal or similarly significant effects about you on a purely automated basis.
25. Regional rights. Residents of the European Economic Area, the United Kingdom, Switzerland, Brazil, Canada and certain United States jurisdictions hold additional statutory rights, which we honour where they apply.
26. Do Not Track. Because there is still no common industry standard for Do Not Track signals, our sites do not respond to them differently.
27. Third-party links. Following an outbound link places you under the privacy practices of the destination site, which we do not control.
28. Children's content. No part of PopPop AI is designed for, targeted at or marketed to children.
29. Complaints. If you believe your data has been mishandled, you may lodge a complaint with your local data protection authority.
30. Changes to this policy. Material changes are published on this page with a revised effective date. Continuing to use PopPop AI afterwards means you accept the updated policy.
31. Contacting us. Privacy questions and rights requests can be sent to privacy@poppop-ai.com and are answered within statutory deadlines.