Privacy Policy

Effective Date: May 19, 2026

1. Introduction

This Privacy Policy explains how DoesNotExist collects, uses, stores, discloses, and protects information when you use our website, applications, AI character creation tools, subscriptions, and related services (the "Service"). The Service allows users to create fictional synthetic AI characters from scratch or personalize them with user-provided context and optional imported content they have the right to use.

2. Operator and Legal Entity

DoesNotExist is operated by SA TECHNOLOGIES DOO BEOGRAD, a company registered in Serbia, registration / Matični broj: 22199528. You may contact us at support@doesnotexist.ai for any privacy-related inquiries.

3. Information We Collect

Account information: email address, display name, authentication identifiers, profile avatar, account settings, subscription status, and related account records.

Optional imported content: Depending on what you choose to upload, optional imported content may temporarily include messages, names, usernames, timestamps, metadata, participant information, and other information contained in the imported file. Original imported files are processed to create derived personalization data and are not stored after preprocessing.

AI character and derived data: character profiles, derived character memory, extracted preferences and style data, character settings, prompts, instructions, generated AI messages, generated conversations, reports, moderation records, and conversations you have with AI characters. Information you provide to create synthetic characters, such as name, age, appearance, background, conversation dynamics, prompts, generated images, and generated conversations, may be processed to provide, secure, moderate, and improve the Service.

Payment and subscription information: plan type, purchase history, renewal status, payment processor identifiers, invoices, and billing metadata. Payment and add-on information may include token pack purchases, add-on balances, usage history, and related billing metadata. We do not store full payment card numbers. When payment processing is enabled, payments will be handled by a third-party payment processor.

Technical and usage data: IP address, device and browser information, log data, session events, error reports, security events, rate-limit data, feature usage, upload status, and information needed to detect abuse, fraud, or policy violations.

4. Information About Other People

Optional imported content may contain personal data, private communications, names, writing styles, metadata, or other information about people other than you. Users are responsible for ensuring they have the legal right, permissions, consents, and lawful basis required to upload and process any third-party content.

You must not upload private conversations or create AI characters based on real people if doing so violates privacy rights, confidentiality obligations, platform terms, laws, or third-party rights. DoesNotExist does not verify whether you obtained consent from all participants.

5. How We Use Information

• To provide, operate, maintain, secure, and improve the Service.
• To authenticate users, manage accounts, provide support, and communicate service notices.
• To temporarily process optional imported content for user-directed AI character personalization, then discard the original imported files after preprocessing.
• To generate AI responses using derived character memory and user conversations.
• To enforce usage limits, subscription tiers, payment status, rate limits, and platform rules.
• To detect, investigate, prevent, and respond to fraud, abuse, security incidents, policy violations, illegal activity, and harmful use.
• To process reports, takedown requests, moderation actions, legal requests, and compliance obligations.

6. Automated Processing and AI Infrastructure

Providing the Service requires automated processing, including parsing, extraction, indexing, embedding, model calls, temporary processing, and generation of AI responses. Derived character data is encrypted at rest and in transit, and access is limited. Certain features may require temporary decryption or processing so that the Service can create AI characters, retrieve relevant context, generate responses, investigate abuse, or comply with legal obligations.

Selected context may be shared with AI infrastructure providers only as needed to generate responses or provide related functionality. We may minimize, pseudonymize, or limit context where feasible, but we do not represent that all context is fully anonymized.

7. Sensitive Data Warning

Do not upload sensitive personal data unless you have a lawful basis, required consent, and understand the risks. Sensitive data may include information about health, biometrics, finances, government identifiers, precise location, children, sexuality, religion, political views, criminal history, or similarly sensitive topics. If such data appears in imported content, it may be processed only as part of user-directed character creation, chat functionality, security, moderation, support, or legal compliance.

8. Data Sharing and Service Providers

We do not sell personal information. We may share information with service providers and subprocessors that help us operate the Service, including cloud hosting, storage, databases, authentication, payment processing, AI model infrastructure, security, analytics, email delivery, customer support, and moderation tools.

Current or potential provider categories may include Google Cloud Platform, OpenAI, BytePlus/Volcengine, Google Sign-In, payment processors (such as Paddle, when enabled), infrastructure vendors, security vendors, and other providers that may change over time. These providers may process information only as needed to provide services to DoesNotExist, subject to applicable contractual and legal requirements.

We may also disclose information if required by law, court order, subpoena, government request, payment provider review, fraud investigation, safety investigation, rights protection, enforcement of our Terms, or to protect users, third parties, DoesNotExist, service providers, or platform integrity.

9. Reporting, Takedown, and Moderation

Users can report harmful, inaccurate, abusive, or policy-violating AI messages through the reporting functionality where available. If you object to an AI response, you should use the report function or contact us.

A real person who believes an AI character was created based on them without permission may contact DoesNotExist and request review or removal. We may require verification before acting on third-party removal requests. We do not guarantee that every report will result in removal, but we may investigate and may restrict features, delete characters, remove content, suspend accounts, or terminate accounts at our discretion.

We may process account information, derived character data, AI outputs, reports, logs, and related records to investigate misuse and may act without prior notice when necessary to protect users, third parties, the Service, payment providers, legal compliance, or platform integrity.

10. Data Storage, Security, and Encryption

We use technical and organizational measures designed to protect information, including encryption at rest and in transit, per-user encryption keys, access controls, signed URLs with time-limited access, password hashing, rate limiting, IP-based abuse prevention, automated content moderation, and security review. No system is perfectly secure, and we cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

Original chat imports are processed for personalization and are not stored after preprocessing. The Service stores only derived character memory, personalization data, and operational records needed to provide the product. Your data may be stored on cloud infrastructure, including Google Cloud Platform or other infrastructure providers, in regions selected for operational, security, legal, or performance reasons.

11. Data Retention and Deletion

Original imported conversation files are used only for preprocessing and character personalization. After preprocessing is complete, the original raw chat history is not retained as a stored archive by the Service.

The Service may retain derived character memory, extracted preferences, character settings, embeddings or vector records where applicable, generated conversations, account data, usage records, payment metadata, security and moderation records, and logs as needed to operate the Service.

When you delete your account or request deletion where available, deletion is intended to cover account data, derived character data, AI character profiles, generated conversations, embeddings or vector records where applicable, generated content linked to the account, uploaded files if any remain temporarily, and related user-controlled data. Some limited records may remain in backups, logs, fraud prevention records, payment records, legal records, or security records where retention is required by law. Backup deletion may take up to 30 days or another reasonable retention window based on our infrastructure.

12. Cookies and Local Storage

We use cookies, local storage, and similar technologies for authentication, session management, security, preferences, and essential service functionality. We do not sell personal information for advertising purposes.

13. Children's Privacy

The Service is intended only for users who are at least 18 years old. We do not knowingly collect personal information from children. You must not upload content involving minors in exploitative, abusive, or otherwise unlawful contexts.

14. International Data Transfers

Your information may be processed in countries other than your country of residence, including the United States, the European Union, and other jurisdictions where we or our service providers operate. Where required, we use appropriate safeguards such as contractual protections, standard contractual clauses, encryption, and access controls.

15. Legal Bases for EU/EEA Users

If you are in the EU/EEA or another jurisdiction requiring legal bases for processing, our legal bases may include performance of a contract to provide the Service, consent where required, legitimate interests for security, fraud prevention, abuse prevention, service improvement, moderation, support, and platform integrity, and compliance with legal obligations. Where we rely on consent, you may withdraw it where applicable, but withdrawal may limit or prevent use of certain features.

16. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export personal information, and to lodge a complaint with a data protection authority. You may also have rights to withdraw consent where processing is based on consent. We may need to verify your identity before fulfilling requests and may deny or limit requests where permitted by law.

17. California Privacy Notice

California residents may have rights to know, access, correct, delete, and obtain information about categories of personal information collected, disclosed, or shared. We do not sell personal information. To exercise rights, contact us using the email below.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated effective date. Where required, we may provide additional notice. Continued use of the Service after changes become effective means you acknowledge the updated Policy.

19. Contact

For privacy questions, reports, takedown requests, or rights requests, contact us at support@doesnotexist.ai.