Privacy policy

How we collect, use and protect your personal data.

✦ Last updated: 22 July 2026

01Data controller

The controller of personal data collected through the SpiriIA platform and services is VELTYZ GROUP LLC (contact: admin@spiriia.com).

02Data we collect

When you use SpiriIA, we collect and process the following categories of data:

  • Account and identification data: e-mail address, unique user identifier (UUID), display name, phone number (for messaging channels such as WhatsApp / Telegram), hashed password.
  • AI interaction data & content: text, prompts, voice recordings and files, and exchanges entered or transmitted in the conversation interfaces.
  • Technical and browsing data: IP address (anonymised), browser type, third-party messaging application identifiers (WhatsApp, Telegram, Discord, Messenger), error logs, and timestamps natively attached to messages.

03Purposes and legal bases for processing

  • Providing the service (performance of the contract): generating personalised text, voice and visual responses.
  • Managing subscriptions and credits (performance of the contract): transmission to the Merchant of Record (Bonzai / Squidlane OÜ) and associated payment processors to validate access and track credit balances.
  • Security and archiving (legal obligation & legitimate interest): detecting abuse, preventing fraud and securely archiving your consent.

04Cookies, trackers and analytics

✦ This showcase site sets no trackers

The spiriia.com website is a static showcase site. It uses no analytics or advertising cookies, and stores on your device only what is strictly necessary for it to work (for example remembering your language). No consent banner is therefore required to browse it.

The SpiriIA services (checkout, customer area, applications and campaign pages), however, may use tracking tags (pixels) and analytics tools provided by third-party partners:

  • Advertising networks: Meta Ads (Facebook / Instagram), TikTok Ads, Pinterest Ads, Google Ads (YouTube), Snapchat Ads.
  • Audience and behaviour analytics: Google Analytics, PostHog.

These trackers allow us to measure the effectiveness of advertising campaigns and improve the service. Where they are used, they are only placed on your device with your prior consent, collected on the service concerned. You may change your choices or withdraw your consent at any time.

05Technical sub-processors & international transfers

To operate the service, VELTYZ GROUP LLC relies on the following categories of technical sub-processors:

  • Generative AI engines (text, voice, image): OpenAI (GPT, Whisper), Google (Gemini), Anthropic (Claude), Mistral AI, Meta (Llama), FLUX, Suno, Stable Audio, Midjourney, ElevenLabs, Runway.
  • Interface & messaging platforms: Meta (WhatsApp Business API), Telegram, Discord, Messenger.
  • Automation & orchestration services: n8n, Traefik, Docker.
  • Transactional e-mail & support: Brevo, Google Workspace, SendGrid, Mailchimp, Resend.
  • Encrypted utility services (third-party APIs): calls to third-party contextual information services (weather data, currency conversion) are executed in a strictly anonymised manner, without transmitting directly identifying data.
✦ Transfer safeguards

All data transfers outside the European Economic Area are governed by the EU-US Data Privacy Framework (DPF) and/or the European Commission's Standard Contractual Clauses (SCCs).

✦ Your data is not used to train third-party models

Prompts and conversations are transmitted to AI model providers through secure APIs covered by no-retention clauses. Your personal exchanges are never used or sold to train or improve third-party public AI models.

06No processing of medical data

SpiriIA is a tool for entertainment and personal development. It neither collects nor processes health data within the meaning of Article 9 of the GDPR. Any sensitive personal data you spontaneously share in a conversation is processed on the basis of your express consent, solely for the purpose of generating an automated response.

07Your rights (GDPR / international rights)

You have the right to access, rectify, erase (the "right to be forgotten"), restrict, port and object to the processing of your personal data.

All requests should be sent by e-mail to admin@spiriia.com.

For the detailed deletion procedure, see our Data deletion page.