Privacy Policy

AIPay Inc. (dba “AIsa,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you access or use our website located at www.aisa.one (the “Site”), the AIsa Dashboard, the AIsa API, and all related services (collectively, the “AIsa Services”).

By accessing or using the AIsa Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the AIsa Services. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the AIsa Services Agreement.

1. Information We Collect

We collect information in the following ways:

1.1 Information You Provide to Us

When you create an AIsa Account, use the AIsa Services, or communicate with us, you may provide us with the following types of information:

• Account Information. When you register for an AIsa Account, we collect your name, email address, and any other information you provide during the registration process.
• Payment and Billing Information. When you purchase Credits or conduct Transactions through the AIsa Services, we collect payment-related information necessary to process your transactions. This may include billing address and payment method details. We use third-party payment processors and do not store full credit card numbers on our servers.
• Communications. When you contact us for support, provide feedback, or otherwise communicate with us, we collect the content of those communications, including any attachments or files you submit.
• User Information. Information you provide to initiate and maintain your AIsa Account, which may include information about your business entity, representatives, beneficial owners, and other individuals associated with your Account.

1.2 Information Collected Automatically

When you access or use the AIsa Services, we automatically collect certain information, including:

• Usage Data. Information about how you interact with the AIsa Services, including the features you use, the pages you visit, the actions you take, the time and duration of your activities, and other usage statistics.
• API Usage Data. When you use the AIsa API, we collect metadata about your API requests, including request timestamps, endpoints accessed, model identifiers, token counts, response times, and error codes. This data is used for billing, performance monitoring, abuse prevention, and service improvement.
• Device and Connection Information. Information about the device and internet connection you use to access the AIsa Services, including your IP address, browser type and version, operating system, device identifiers, and network information.
• Cookies and Similar Technologies. We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity on the Site. You can manage your cookie preferences through your browser settings.

1.3 Information from Third Parties

We may receive information about you from third parties, including Connected Service Providers, identity verification services, fraud prevention services, and publicly available sources. We may combine this information with other information we collect about you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and Maintaining the AIsa Services. To operate, maintain, and improve the AIsa Services, including processing Transactions, managing your AIsa Account, routing API requests to Connected Service Providers, and providing customer support.
• Billing and Payments. To process Credit purchases, calculate usage-based charges, manage your AIsa Wallet balance, and facilitate payments to and from Connected Service Providers.
• Security and Fraud Prevention. To detect, investigate, and prevent fraudulent, unauthorized, or illegal activity, and to protect the rights, property, and safety of AIsa, our users, and others.
• Compliance. To comply with applicable laws, regulations, legal processes, and governmental requests, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Communications. To send you service-related notices, updates, security alerts, and administrative messages. With your consent, we may also send you promotional communications, which you can opt out of at any time.
• Analytics and Improvement. To analyze usage patterns, monitor the performance and reliability of the AIsa Services, and develop new features and services.
• Personalization. To personalize your experience with the AIsa Services, including by providing tailored content and recommendations.

3. AI-Specific Data Practices

3.1 API Request and Response Data

When you use the AIsa API to access AI models and Connected Services, your API requests (including prompts) and the corresponding responses are transmitted through our infrastructure to the applicable Connected Service Provider. AIsa processes this data to route requests, calculate billing, and ensure service quality.

3.2 Data Retention of API Content

AIsa does not retain the content of your API requests or responses (such as prompts and completions) beyond the time necessary to process and deliver them, unless required for billing disputes, fraud investigation, or compliance with legal obligations. Metadata associated with API requests (such as timestamps, token counts, and model identifiers) may be retained for billing and analytics purposes.

3.3 Connected Service Provider Data Practices

When your API requests are routed to a Connected Service Provider, that provider may have its own data retention and privacy practices. AIsa is not responsible for the data practices of Connected Service Providers. We encourage you to review the privacy policies of any Connected Service Provider whose services you access through AIsa.

4. How We Share Your Information

We may share your information in the following circumstances:

• Connected Service Providers. We share information necessary to route your API requests and facilitate Transactions with the Connected Service Providers you choose to access through the AIsa Services. This may include authentication credentials and Access Authorizations.
• Service Providers. We share information with third-party service providers who perform services on our behalf, such as payment processing, data analytics, email delivery, hosting, customer support, and identity verification. These service providers are contractually obligated to use your information only as necessary to provide services to us.
• Legal Requirements. We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of AIsa, our users, or others.
• Business Transfers. In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity or successor.
• With Your Consent. We may share your information with third parties when you have given us your explicit consent to do so.
• Aggregated or De-identified Data. We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, and other purposes.

5. Data Retention

We retain your personal data for as long as your AIsa Account is active or as needed to provide you with the AIsa Services. We may also retain your information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes such as maintaining security and preventing fraud.

When your AIsa Account is closed or terminated, we will delete or anonymize your personal data within a reasonable period, except where retention is required or permitted by applicable law. API usage metadata may be retained in aggregated or anonymized form for analytics and service improvement purposes.

6. Data Security

We implement commercially reasonable technical, administrative, and organizational measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training.

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your AIsa Account credentials and for any activity that occurs under your Account.

7. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal data:

• Access. You may request a copy of the personal data we hold about you.
• Correction. You may request that we correct inaccurate or incomplete personal data.
• Deletion. You may request that we delete your personal data, subject to certain exceptions.
• Portability. You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Restriction. You may request that we restrict the processing of your personal data in certain circumstances.
• Objection. You may object to the processing of your personal data for certain purposes, including direct marketing.
• Withdrawal of Consent. Where we rely on your consent to process your personal data, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law. We may ask you to verify your identity before processing your request.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include:

• Right to Know. You have the right to request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, our business or commercial purpose for collecting it, and the categories of third parties with whom we shared it.
• Right to Delete. You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale or Sharing. AIsa does not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
• Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a request, please contact us at [email protected]. You may also designate an authorized agent to make a request on your behalf.

9. European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, you have certain rights under the General Data Protection Regulation (“GDPR”) and applicable local data protection laws.

9.1 Legal Bases for Processing

We process your personal data on the following legal bases:

• Performance of a Contract. Processing necessary to perform our obligations under the AIsa Services Agreement, including providing the AIsa Services and managing your Account.
• Legitimate Interests. Processing necessary for our legitimate interests, such as fraud prevention, security, analytics, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Compliance with Legal Obligations. Processing necessary to comply with applicable laws and regulations.
• Consent. Where required, we process your personal data based on your consent, which you may withdraw at any time.

9.2 International Data Transfers

Your personal data may be transferred to and processed in the United States or other countries outside the EEA, UK, or Switzerland. When we transfer personal data internationally, we implement appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, to ensure that your data is protected in accordance with applicable data protection laws.

9.3 Data Protection Officer

If you have questions or concerns about our data processing practices, you may contact us at [email protected]. You also have the right to lodge a complaint with your local data protection supervisory authority.

10. Cookies and Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential Cookies. These cookies are necessary for the AIsa Services to function properly, including authentication, session management, and security.
• Analytics Cookies. These cookies help us understand how users interact with the AIsa Services by collecting usage data in an aggregated or anonymized form.
• Functional Cookies. These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the AIsa Services.

11. Children’s Privacy

The AIsa Services are not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete such information promptly. If you believe that a child under 13 has provided us with personal data, please contact us at [email protected].

12. Third-Party Links and Services

The AIsa Services may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the AIsa Services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Privacy Policy on the Site with a revised “Last update” date. We may also provide additional notice, such as an email notification or a notice through the AIsa Dashboard, for significant changes. Your continued use of the AIsa Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: