01Data controller
The controller of personal data collected through the SpiriIA platform and services is VELTYZ GROUP LLC (contact: admin@spiriia.com).
02Data we collect
When you use SpiriIA, we collect and process the following categories of data:
- Account and identification data: e-mail address, unique user identifier (UUID), display name, phone number (for messaging channels such as WhatsApp / Telegram), hashed password.
- AI interaction data & content: text, prompts, voice recordings and files, and exchanges entered or transmitted in the conversation interfaces.
- Technical and browsing data: IP address (anonymised), browser type, third-party messaging application identifiers (WhatsApp, Telegram, Discord, Messenger), error logs, and timestamps natively attached to messages.
03Purposes and legal bases for processing
- Providing the service (performance of the contract): generating personalised text, voice and visual responses.
- Managing subscriptions and credits (performance of the contract): transmission to the Merchant of Record (Bonzai / Squidlane OÜ) and associated payment processors to validate access and track credit balances.
- Security and archiving (legal obligation & legitimate interest): detecting abuse, preventing fraud and securely archiving your consent.
05Technical sub-processors & international transfers
To operate the service, VELTYZ GROUP LLC relies on the following categories of technical sub-processors:
- Generative AI engines (text, voice, image): OpenAI (GPT, Whisper), Google (Gemini), Anthropic (Claude), Mistral AI, Meta (Llama), FLUX, Suno, Stable Audio, Midjourney, ElevenLabs, Runway.
- Interface & messaging platforms: Meta (WhatsApp Business API), Telegram, Discord, Messenger.
- Automation & orchestration services: n8n, Traefik, Docker.
- Transactional e-mail & support: Brevo, Google Workspace, SendGrid, Mailchimp, Resend.
- Encrypted utility services (third-party APIs): calls to third-party contextual information services (weather data, currency conversion) are executed in a strictly anonymised manner, without transmitting directly identifying data.
All data transfers outside the European Economic Area are governed by the EU-US Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCCs).
Prompts and conversations are transmitted to AI model providers through secure APIs covered by no-retention clauses. Your personal exchanges are never used or sold to train or improve third-party public AI models.
06No processing of medical data
SpiriIA is a tool for entertainment and personal development. It neither collects nor processes health data within the meaning of Article 9 of the GDPR. Any sensitive personal data you spontaneously share in a conversation is processed on the basis of your express consent, solely for the purpose of generating an automated response.
07Your rights (GDPR / international rights)
You have the right to access, rectify, erase (the "right to be forgotten"), restrict, port and object to the processing of your personal data.
All requests should be sent by e-mail to admin@spiriia.com.
For the detailed deletion procedure, see our Data deletion page.
