Privacy Policy

Last updated: April 7, 2026

1. Data Controller

The data controller responsible for your personal data is: In a Box Sarl / Audacia Group Switzerland Email: info@soulmaite.io We process your personal data in compliance with the Swiss Federal Act on Data Protection (nDSG), the General Data Protection Regulation (GDPR), and other applicable data protection legislation.

2. Data We Collect

We collect the following categories of personal data: Account data: Name, email address, Telegram username, and account preferences. Usage data: Conversation history with AI companions, interaction patterns, feature usage, and session information. Payment data: Billing information processed through our payment providers. We do not store your full credit card details on our servers. Technical data: IP address, browser type, device information, operating system, and access logs. Communication data: Messages you send to our support team and feedback you provide.

3. Purpose of Processing

We process your personal data for the following purposes: - Providing and maintaining the AI companion service - Processing subscriptions and payments - Personalizing your companion experience and conversation continuity - Improving our AI models and service quality - Communicating with you about your account, updates, and support requests - Ensuring the security and integrity of our platform - Complying with legal obligations

4. Legal Basis

We process your data based on the following legal grounds: Contract performance: Processing necessary to provide you with the Service you subscribed to (Art. 6(1)(b) GDPR). Legitimate interests: Processing for service improvement, security, and fraud prevention (Art. 6(1)(f) GDPR). Consent: Where you have given explicit consent, such as for marketing communications (Art. 6(1)(a) GDPR). You may withdraw consent at any time. Legal obligation: Processing required to comply with applicable laws (Art. 6(1)(c) GDPR).

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected: - Account data: Retained for the duration of your account, plus 30 days after deletion. - Conversation data: Retained for the duration of your account to maintain conversation continuity. Deleted within 30 days of account closure. - Payment records: Retained for up to 10 years as required by Swiss financial regulations. - Technical logs: Retained for up to 90 days for security and debugging purposes. You may request deletion of your data at any time by contacting info@soulmaite.io.

6. Third Parties

We may share your data with the following categories of third-party service providers: Telegram: Our AI companions operate through the Telegram messaging platform. Your interactions are subject to Telegram's own privacy policy. Payment processors: We use PayPal and other payment providers to process subscription payments securely. Analytics providers: We use analytics tools to understand how our Service is used and to improve user experience. Hosting providers: Our infrastructure is hosted on secure cloud platforms with appropriate data protection measures. All third-party providers are contractually obligated to protect your data and process it only as instructed by us.

7. Your Rights

Under GDPR and Swiss data protection law, you have the following rights: Right of access: You may request a copy of your personal data. Right to rectification: You may request correction of inaccurate or incomplete data. Right to erasure: You may request deletion of your personal data ("right to be forgotten"). Right to restriction: You may request restriction of processing in certain circumstances. Right to data portability: You may request your data in a structured, machine-readable format. Right to object: You may object to processing based on legitimate interests. Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at info@soulmaite.io. We will respond within 30 days.

8. Cookies

Our website uses cookies and similar technologies for the following purposes: Essential cookies: Required for the website to function properly (e.g., session management). Analytics cookies: Help us understand how visitors interact with our website. These are only set with your consent. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Switzerland and the European Economic Area. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent measures, to protect your data.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at: In a Box Sarl / Audacia Group Switzerland Email: info@soulmaite.io