Privacy Policy

Information you provide

We collect account information such as your email address, username if set, profile information and the information you provide to support. Do not include unnecessary sensitive information in your profile or a support request. Information you choose to publish can be seen by other people.

Content and related metadata include prompts, generation settings, uploaded images, video or audio, generated outputs, saved workflows and the visibility choices associated with them. Workspace membership and sharing determine who can access team material. A file can contain another person's identifying information or embedded metadata; obtain the permissions needed to submit it.

Images and recordings can contain faces, voices and other sensitive information. Whether a particular feature processes legally regulated biometric information depends on its operation and applicable law. The AI Additional Terms explain the separate feature notice and permission requirements; general acceptance of this policy does not replace a required biometric consent.

Activity, device and transaction information

We collect information about interactions with the service, including features used, pages viewed, generation and purchase activity, diagnostic logs and device or network information such as an IP address and user agent. We may retain IP addresses associated with moderation warnings, suspensions or bans and use them to detect attempts to evade an account restriction.

When you make a purchase or claim a reward, our fraud-prevention provider (Fingerprint) gives us a pseudonymous identifier for your browser or device. We use it to prevent fraud and to keep once-per-person offers to one use per person.

Cookies and similar storage support sign-in, preferences and the measurement or referral functions used by the service. Referral and campaign information can include campaign parameters and advertising click identifiers. The Cookie Policy explains the identified technologies and the available controls.

Payments are processed through Stripe. We receive transaction and subscription information, including payment identifiers and status, rather than storing your full payment-card number. The information you provide directly to a payment processor is also governed by its policies.

Connected apps

If you authorize a connected app, we receive requests it sends on your behalf, including prompts and settings, and the app's registration information such as its name, logo and redirect address. Its consent screen identifies the app and requested capabilities. A connection can allow access to the model catalog and prices, generation of images or video using your credits, and viewing, listing or cancellation of your generations, within the scopes you authorize.

YouTube Analytics: If you choose to connect YouTube Analytics for the Creator Partner Program, we use read-only access to confirm ownership of your verified channel and retrieve channel reports for campaign evidence review. Connecting is optional, and analytics reports do not themselves approve or pay rewards. Communications with Google use HTTPS. We handle OAuth credentials on our servers and restrict database access to credentials and report snapshots; they are not exposed in browser responses or credential-bearing logs. Connecting and disconnecting require authentication and account ownership, and we verify that the Google authorization controls the YouTube channel you verified. Scheduled cleanup removes stored report snapshots older than 29 days. Disconnecting clears active credentials and stored snapshots and requests revocation of Google access; a credential may be retained temporarily to retry revocation. This cleanup does not delete financial records.

We use information to provide requested features and outputs; maintain accounts, saved content and workspaces; process transactions and subscriptions; provide support; communicate service updates; and improve reliability, performance and safety. We also use it to enforce the Terms and Community Guidelines, investigate abuse, protect accounts, prevent referral fraud and comply with legal obligations.

Referral attribution supports eligible account-signup and purchase attribution and the calculation of affiliate commissions. It is distinct from consent to model training or permission to use your creations in promotion. Requested AI processing can require sending relevant prompts, settings and content to an external processing provider.

Where a law requires a legal basis, the basis depends on the particular purpose. Processing needed to provide an agreed service may rely on contract; compliance with a legal duty may rely on legal obligation; proportionate security, fraud prevention or service administration may rely on legitimate interests where available and after considering individual rights. Optional processing requiring consent must have that consent. We do not treat every purpose as justified by accepting the Terms, and a basis available in one jurisdiction does not automatically apply everywhere.

Aristotto does not currently train its own models using user content. If we introduce such training, personal content may be included only after specific, informed opt-in; team workspace content remains excluded. A public visibility choice alone is not training consent. Promotion beyond ordinary service delivery requires separate permission. You can withdraw an applicable training permission for future uses. If training is introduced, completed lawful training may not be reversible; any limitation must be explained before consent is requested.

Subscription payments and recovery

We use payment status and transaction identifiers received from our payment processor to manage subscriptions, payment recovery, and subscription credits.

For individual subscriptions, if a renewal payment fails, your subscription becomes past due. We may retry payment for a limited recovery period and restrict paid features while payment remains outstanding. New credits for the unpaid renewal period are issued only after payment succeeds. If payment remains unsuccessful after the recovery attempts, the subscription is canceled.

You may cancel an individual subscription during payment recovery. Cancellation while your renewal is overdue takes effect immediately and stops further automatic collection for that subscription. If your current billing period has already been paid, cancellation takes effect at the end of that paid period and access continues until then.

Affiliate program administration

Operate our affiliate program: attributing account signups and purchases to the referring affiliate, calculating commissions, and preventing referral fraud.

Visibility and user-directed sharing

Your generations are private by default. Making content public is optional and depends on your plan. When you first publish, we record that you accepted the publishing rules in our Terms, together with the version of those rules and the time, so we can show that you agreed to them. Content you publish may be viewed, copied, downloaded, or indexed by others. Making it private or removing it does not retrieve independent copies already received elsewhere. Private and team content is subject to the permissions of the relevant account, workspace, and sharing features.

Authorized personnel and providers may process relevant content, including private content, to deliver requested features, provide support, investigate reports, and meet legal obligations. Where we find apparent child sexual abuse material we report it to the National Center for Missing & Exploited Children (NCMEC) as United States law requires, and we may report other apparently unlawful activity to law enforcement. Such a report can include the content, related prompts and uploads, account details, IP addresses, and activity logs, and we preserve that information for as long as the law requires or permits. Automated safety checks may block a request, withhold an output, or refer activity for review. If you believe an action is mistaken, use the appeal channel described in our Terms. Applicable rights concerning automated decisions remain available.

An app you authorize receives the results of permitted requests: catalog and prices, quotes and started jobs with credit costs, and generation information such as status, model, task and output links. The connection uses an account identifier rather than your email address and does not provide your password. The app operator's policy governs its separate storage and use. Revoking access prevents future authorized requests but does not retract information already received.

If an invite is applied to your account, the member who invited you sees your username, when you earned them a reward (your first creation and, if applicable, your subscription) and whether that reward was approved, but not your email, your creations, the plan you chose or why a reward wasn't approved. We keep invitation and reward records to operate the program and prevent abuse. Withdrawing cookie consent after an invite has been applied does not undo rewards already granted.

Providers and affiliate attribution

Service providers can process information needed for hosting, storage, AI generation, account administration, support, email and measurement. Stripe processes payments and subscriptions. The information sent for AI inference is determined by the requested feature; the operating license and our training choice do not establish an external provider's separate retention or training practices.

proxycheck.io checks whether the IP address used to create an account, or to earn a referral reward, belongs to a VPN, proxy, Tor or data-centre network. We send it the IP address only.

pyannoteAI checks that a voice created from a recording is the speaker's own. We send it the recording and your reading of the consent line; it tells us how many people talk in each and how closely the two voices match. pyannoteAI processes this in the European Union and deletes its results after 24 hours. We keep the match score and the words heard with the check, and we do not store the voiceprint used to compare the voices.

FirstPromoter administers the affiliate program. An attributed signup or purchase can involve sharing an email address, account identifier, referral identifiers and relevant transaction information for referral credit, commission administration and fraud prevention. This policy does not make a blanket claim that every provider has identical purposes, retention or contractual restrictions.

Legal, safety and business circumstances

We may disclose information when required by law or when reasonably necessary to protect rights, safety or service security, address abuse, or establish or defend a legal claim. Copyright notices and counter-notices can require forwarding information as explained in the DMCA process. A business transfer may involve information relevant to a merger, acquisition or asset transfer, subject to applicable privacy protections and required notices. A transfer does not itself grant new training or promotion permission.

Mobile app services

• App-store purchases and RevenueCat: Apple processes payments for credit packs purchased in the iOS app, and Google Play processes payments for credit packs purchased in the Android app. RevenueCat validates purchases and sends transaction information to our server so we can grant credits and handle refunds. Information includes your Aristotto account identifier, product and transaction identifiers, purchase history, and app/device information. We do not receive your full payment-card number from Apple or Google Play.

• Crash reporting with Sentry: we use crash reports, error diagnostics and release-health information to find and fix app failures. Reports can include your account identifier, app version, device and operating-system information, locale and time zone. The app does not enable Sentry session replay, performance tracing, profiling or advertising tracking. We filter sensitive diagnostic data and configure Sentry not to store IP addresses.

• Notifications through Expo, Apple and Google: We use Expo's push service with Apple Push Notification service on iOS and Google's Firebase Cloud Messaging on Android. These services process notification content and installation/device/push identifiers to operate the notification service and deliver updates such as generation completion. We associate the device registration with your Aristotto account. When you allow notifications, we can send these updates to that device. You can turn notifications off in your device settings. Firebase Cloud Messaging may initialize installation identifiers independently of the operating system's notification permission. Aristotto does not enable Firebase Analytics for this Android app.

• Sign-in providers and Supabase: Supabase manages account authentication. When you choose Apple, Google or another supported sign-in provider, we process the identity information and credentials needed to authenticate you, which can include a provider identifier, email address and name. Apple can provide a private relay email address when you choose Hide My Email. The information shared depends on your provider and choices.

After an account deletion completes, we request deletion of its RevenueCat customer record. We retain the deleted account identifier in a restricted cleanup record and repeat erasure requests because an app still open on another device can recreate the provider record. Provider processing and repeat requests may take additional time. This does not erase records that Apple, Google Play or payment providers retain for their own accounting, fraud prevention or legal obligations, or records we must retain as described below. Deleting a RevenueCat customer record does not itself cancel a subscription billed by Apple or Stripe.

When you sign out or delete your account in the app, we remove or deactivate the account's push-device registration and request deletion of the device's messaging token. Deleting a messaging token is different from deleting a Firebase installation identifier. Google can retain installation identifiers and service records under its own processing and retention policies; account deletion does not promise immediate deletion of all provider-held records.

Connected apps and AI assistants

You can connect your account to an AI assistant or another app that supports the Model Context Protocol. A connection starts on our consent screen, which names the app and lists what it can do: see the model catalog and prices, generate images and videos with your credits, generate audio with your credits when that permission is shown, and view, list, and cancel your generations. The app receives access to your account only after you allow the connection.

• What the app receives: the results of requests it makes on your behalf, including the catalog and prices, quotes and started jobs with their credit cost, and your generation jobs (their status, model and task, and links to their outputs), together with an account identifier that is not your email address. It never receives your password.

• What we receive: requests the app sends on your behalf, including prompts and settings, and the app’s registration details (its name, logo, and redirect address). Generations started through an app run on your account, use your credits, and are covered by this Policy, including the current training information above, like generations you start directly on the Service.

• The app operator: what the app does with results it receives, including what it stores or shows in its own product, is governed by its operator’s privacy policy.

• Your controls: Settings → Connected apps lists every active connection and lets you disconnect it. Disconnecting ends the app’s access immediately. It does not delete information or outputs the app already received; contact its operator about those copies.

Affiliate program processing

FirstPromoter administers our affiliate program. When a referral is attributed, we may share your email address, account identifier, referral identifiers and relevant transaction information to credit eligible signups and purchases, calculate commissions and prevent referral fraud. Its processing and retention depend on the applicable arrangements and privacy information.

Cookies and browser storage can keep you signed in, support security, remember preferences and associate activity with a campaign or referral. Some technologies are session-based and others persist for an identified period. See the Cookie Policy for the inventory and use Cookie Preferences for supported optional choices.

Cookie choices concern the browser or device on which they are made. They do not replace account visibility settings, revoke a connected app, cancel a subscription or withdraw a separate training permission. Browser restrictions or clearing storage can affect sign-in and whether a prior choice is remembered.

Affiliate referral cookies

Cookies and similar technologies keep you signed in, remember preferences and support campaign and referral attribution. In affiliate-referral flows, first-party cookies named _fprom_tid and _fprom_ref may associate eligible visits, signups and purchases with the referring affiliate. Our separate first-touch campaign cookie, aristotto_attribution, has a code-configured 30-day lifetime and can contain campaign parameters and advertising click identifiers. See the Cookie Policy for identified storage, purposes, durations and available controls.

Referral invitation cookies

Referral invitation cookies (only with your consent). When you open a member's invite link, we do not store the invite on your device until you make your cookie choice; until then the invite is carried only in the page address. If you allow the marketing (advertising) category, we set two first-party cookies for up to 30 days: aristotto_ref, which records in signed form who invited you and when you opened their link, and aristotto_ref_pending, which tells the site an invite is waiting so it can be applied after you sign in. We remove both once the invite is applied or when you withdraw that consent. If you decline, the invite is not credited.

Cookie Preferences

Usage and diagnostic information helps us understand whether features work, investigate failures and improve the service. Measurement can involve browser technologies and providers configured for that purpose. Available optional controls depend on the technology deployed and the applicable consent requirements.

We distinguish service and security records needed to operate a requested feature from optional audience measurement. A browser setting does not necessarily erase information already lawfully processed or remove a record required for security or accounting. This policy does not claim membership in an industry opt-out program or a universal cross-device opt-out arrangement.

Campaign and referral attribution can associate a visit or eligible purchase with a campaign, advertising click identifier or affiliate. This does not, by itself, establish that Aristotto operates an advertising network or shares every visitor's information for cross-site targeting.

If optional interest-based advertising technologies are used, their providers, purposes and available controls must be identified for that deployment. Read the Interest-Based Advertising page and Cookie Policy for the distinction between attribution, optional advertising and account-level privacy requests. Applicable sale or sharing opt-out rights are separate from simply disabling a browser cookie.

You can update profile and available privacy settings, review content visibility, and manage active connections in Settings → Connected apps. Disconnecting ends future authorized access. Use an unsubscribe link where one is provided for optional marketing messages; required transactional, safety and legal notices may still be sent.

Use Cookie Preferences and browser controls for supported storage choices. A future personal-content training permission must be a separate affirmative opt-in, and team content remains excluded. A public content setting does not supply training or promotion permission.

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, consent withdrawal, or an applicable sale or sharing opt-out. Privacy Choices explains how to contact us and the verification process. Rights can have exceptions, and information about another person is not disclosed merely because a requester asks for it. California residents may have rights to access, deletion or correction, subject to the applicable law and exceptions.

California and other US privacy rights

If you are a California resident, you may have rights to request access to, deletion of, or correction of certain personal information, subject to exceptions. To exercise these rights, contact us at info@aristotto.com.

Depending on your state and whether its law applies, you may also have rights to a portable copy, to opt out of specified uses such as sale, sharing, targeted advertising or certain profiling, to limit certain uses of sensitive information, or to appeal a denied request. We do not unlawfully discriminate against people for exercising applicable privacy rights. These rights and their conditions vary by jurisdiction.

Australian privacy rights

Where the Australian Privacy Act applies, you may request access to or correction of your personal information and complain about its handling. Contact info@aristotto.com with enough information to identify the concern. We will review the complaint and communicate the outcome and applicable escalation options, including the Office of the Australian Information Commissioner.

The service is for people aged 18 and over. Do not create an account or use the service if you are under 18. Adult eligibility does not permit sexualized child content or other exploitation; the Community Guidelines apply to all features and visibility settings.

Contact the privacy or support channel if you believe an underage person is using the service or that we have received their information improperly. Provide only the information needed to identify the concern. This policy does not claim that an age-verification system detects every underage account or that every reported record can immediately be deleted regardless of legal or safety obligations.

Aristotto is a United States company and users and processing providers may be located in different countries. Providing a feature may involve processing outside your country, where the applicable protections can differ. A person's use of the service does not eliminate legal requirements governing an international transfer.

Where applicable law requires a transfer safeguard, exception or additional notice, the relevant processing must satisfy it. Contact us for information about a transfer affecting you. This policy does not assert that every supplier uses a particular contractual clause, certification or transfer framework.

Where European Union or United Kingdom data-protection law applies, rights can include access, correction, erasure, restriction, portability and objection, including objection to certain legitimate-interest processing and direct marketing. You may withdraw consent for future processing based on that consent without changing the lawfulness of earlier processing.

Contact the privacy channel to make a request or ask about the applicable processing basis or transfer safeguards. We may need proportionate information to verify identity and understand the request. You may complain to the competent data-protection authority in your jurisdiction. These rights are subject to the law's conditions and exceptions; this policy does not replace a required feature-specific notice or impose a universal response period for every country.

UK data-protection complaints

To raise a UK data-protection complaint, contact info@aristotto.com and describe your concern. Where the UK complaint requirements apply, we acknowledge receipt within 30 days, investigate appropriately without undue delay, keep you informed, and communicate the outcome. You may also contact the Information Commissioner’s Office. This complaint process is separate from data-rights requests, which have their own legal deadlines.

Retention depends on the information, purpose and applicable obligations. Account, content and workspace information can be needed to provide requested features. Financial records, security or fraud records, copyright disputes and legal obligations can require different periods. Deleted material may remain temporarily in backups or be subject to another person's lawful workspace access or a provider's applicable processing obligations.

If you delete content or close an account, deletion or de-identification remains subject to technical and legal constraints. Account closure and subscription cancellation are separate operations. Do not rely on account deletion alone to stop recurring subscription charges; cancel through the subscription controls. Removal from a public page is not necessarily immediate erasure from every operational system.

Marketplace information and retained records

For Marketplace participation and engagements, we process contracting-party and representative details, verification status and references, agreements and amendments, messages and shared resources, delivery versions, publication permissions, payment and transfer identifiers, reviews, disputes and audit records. Access follows the applicable participant, workspace and staff permissions. Client work is private by default; publishing a portfolio item or case study requires separate authority.

Stripe collects sensitive identity, tax, payment-card and payout information through its hosted flows. Aristotto receives the provider references, requirement information and status needed to operate the Marketplace; Stripe’s own policies also govern information supplied directly to it.

Agreements, acquired deliveries and payment, dispute and audit records may need to remain available to fulfill existing obligations, resolve complaints, prevent fraud or meet applicable legal requirements. Account deletion can be restricted while retained Marketplace records or obligations remain. Retention depends on the record and purpose; this section creates no blanket retention period or promise that account closure immediately erases all records.

For connected apps, an access token lasts one hour and a refresh token 30 days, renewed when used. Daily cleanup removes expired sign-in codes and price quotes after one day past expiry, ordinarily within two days of expiry, and removes a self-registered app that never completed a connection after 30 days. Replaced refresh tokens are retained for about 30 days to detect reuse. Connection records, including disconnection information, are retained while the account exists. These specific connection periods do not establish a retention period for every kind of personal information.

Deleted content

When you delete your account, a generation or an output, it leaves your account at once and its files stop opening from their links. We keep a private copy (the content, its prompts and settings, and related safety records) for 30 days so we can investigate abuse and meet legal obligations, then delete it permanently. A copy is kept longer only where the law requires it, for example one year after a report to NCMEC (see Safety-report preservation).

Offer records

To keep once-per-person offers, such as a first-month discount or a first-purchase code, to one use per person, we keep a record of each web purchase: one-way, keyed hashes of the device identifier, your email address and your card's fingerprint as our payment processor reports it, with the offer used. The record cannot be turned back into your email or card details. We keep it for 12 months, also after you delete your account, and use it only to decide whether an offer is available to you and to review offer misuse.

Payment event records

We keep the payment events Stripe, and RevenueCat for app store purchases, send us, to process and reconcile payments. Names, email addresses, postal addresses, phone numbers and card details are removed from them 30 days after each event; amounts, dates and identifiers stay for accounting and disputes.

Safety-report preservation

Deletion and access requests are subject to applicable exceptions, including valid preservation obligations. For material covered by the report-related preservation requirements of 18 U.S.C. §2258A, the statutory preservation period is one year after a qualifying CyberTipline submission, with the required protection of preserved material. Additional lawful preservation obligations may apply. This is not a general one-year retention rule for all customer content.

Published revisions identify their effective date and substantive update. Changes affecting rights or processing receive notices and any consent required by applicable law. Posting a revised policy does not retroactively authorize new promotion, model training or another incompatible use of information.

Review the current policy and feature notices when deciding whether to use a feature. A convenience translation or summary must correspond to the published revision rather than quietly introduce a different processing permission.

If a convenience translation differs from the English policy, the English version controls to the extent applicable law permits. This does not waive a right to required local-language information or another non-waivable protection. A translation must identify the revision it translates.

Aristotto, Inc., 1401 21st ST, #14283, Sacramento, CA 95811, United States.

Privacy and legal requests: info@aristotto.com. Product or account support: support@aristotto.ai. Include the request type and enough information to identify your account without sending a password, payment-card number or unnecessary sensitive information. Qualifying copyright notices use the separate designated agent on the DMCA page.