Privacy Policy

The controller of personal data processed through Trzask AI is Oskar Trzaskawka, Gębarzewo 13, 62-241 Gębarzewo, [email protected].

Questions about personal data, requests to access or delete data, and privacy complaints may be sent to [email protected].

Depending on how you use the service, we may process account data such as email address, authentication provider identifiers, profile information made available by the sign-in provider, billing identifiers, support correspondence, and plan or entitlement records.

We also process service data necessary to operate Trzask AI, including prompts, chat history, uploaded files, generated outputs, model selections, usage counters, token accounting, premium access events, technical logs, and security-related metadata such as timestamps and IP-based fraud-prevention signals.

Data is processed to authenticate users, provide chat and generation features, store account history, enforce plan access, fulfil orders, prevent abuse, resolve disputes, maintain product security, and support diagnostics or incident response.

Where analytics is enabled by consent, we may also process aggregate performance and usage information to understand failures, stability, and product quality. Analytics is not required for core account functionality.

We process personal data where necessary to perform a contract or pre-contractual service requested by the user, to comply with legal obligations, to pursue legitimate interests such as fraud prevention and service reliability, and, where applicable, on the basis of user consent for optional analytics or preference storage.

To fulfil the service, prompts, files, or metadata may be transmitted to configured AI or infrastructure providers such as model APIs, hosting providers, authentication services, and operational tooling. Payment data needed to confirm an order may also be exchanged with payment processors such as HotPay.

Depending on the model you choose, your messages are processed by the Trzask AI model gateway or by third-party model providers: OpenRouter, Groq, Google (Gemini), LLM7.io and Pollinations. Free models from LLM7.io and Pollinations are community services without a service guarantee. Do not send sensitive personal data to any model.

We do not intentionally store full card data. We may store payment status, order identifiers, entitlement changes, dispute-related metadata, and the minimum information needed for accounting, fraud prevention, and support.

Personal data is retained only for as long as necessary to provide the service, secure accounts, maintain billing accuracy, handle complaints, comply with accounting or tax obligations, and resolve disputes, fraud cases, or abuse investigations.

We use technical and organizational measures intended to reduce the risk of unauthorized access, data loss, misuse, or fraudulent activity. No internet service can guarantee absolute security, but access to personal data is limited to the extent necessary for operation, support, and legal compliance.

Subject to applicable law, you may have the right to request access to personal data, correction, deletion, restriction of processing, objection to processing, and data portability, as well as the right to withdraw consent where consent is the basis of processing.

To exercise those rights, contact [email protected]. You may also lodge a complaint with the competent supervisory authority if you believe your data is being processed unlawfully.