Scope

This policy explains how Poly ("Poly", "we", "us", "our") collects, uses, stores, transfers, and discloses information when you use our website, applications, APIs, and related services (collectively, the "Services"). By using the Services, you acknowledge this policy.

Poly is a property of Ethion AI Limited (SARL), which acts as the controller for personal data processed under this Privacy Policy unless stated otherwise.

Information We Collect

• Account data: email, profile name, auth identifiers, subscription tier, billing metadata.
• Content data: prompts, responses, uploaded files/images, generated outputs, titles, and conversation metadata.
• Memory data: memory entries you import, related labels/categories, and memory-control events such as enable/disable and deletion actions.
• Usage and diagnostics: event logs, feature usage, approximate geolocation from IP, device/browser metadata, error traces.
• Security and fraud signals: authentication events, abuse indicators, rate-limit and risk-control telemetry.

It's important to note that we do not knowingly collect personal data from children under 13 (or higher age where required by local law). If you believe a child has provided us with personal data, please contact us to request deletion.

When we say we collect data, in many instances, it simply means, we receive and process data on-the-fly to provide the Services. Meaning, some data is processed in real-time without being stored.

How We Use Information

• Provide, maintain, and improve the Services, including routing requests across AI providers.
• Use imported memory (when enabled by you) to provide better continuity and personalization across chats.
• Operate security, fraud prevention, abuse detection, and compliance workflows.
• Detect and prevent policy-violating behavior, including disrespectful, exploitative, non-consensual, or harmful synthetic image generation involving women, children, or other identifiable individuals.
• Provide support, troubleshoot incidents, and monitor service reliability/performance.
• Process payments/subscriptions and enforce usage limits and plan entitlements.
• Comply with legal obligations and enforce our Terms and other policies.

AI Processing and Third-Party Model Providers

To deliver responses, your prompts and related input data may be sent to third-party model providers and infrastructure vendors. Those providers may process data under their own terms and policies. You are responsible for ensuring you have rights to submit any content you upload.

Do not submit highly sensitive data (for example: passwords, private keys, unredacted regulated data, or secrets) unless you have implemented your own controls and accepted the associated risk.

Legal Bases

Where required by law, we rely on contract necessity, legitimate interests, legal compliance, and in limited cases consent. Legitimate interests include service security, abuse prevention, product improvement, and reliability analytics.

Data Sharing

We may share information with:

• Service providers/subprocessors for hosting, storage, analytics, billing, and support operations.
• AI model and tool providers required to fulfill your requests.
• Professional advisors and counterparties in audits, disputes, or corporate transactions.
• Government or law enforcement where required by law, court order, or to protect rights and safety.

Retention

We retain information for as long as necessary to provide the Services, maintain security records, resolve disputes, enforce agreements, and satisfy legal obligations. Retention periods may differ by data type and jurisdiction.

Memory entries can be deleted by you at any time from Poly settings. Once deleted, those entries are no longer used as active memory context for future chats, subject to limited retention where required for fraud prevention, legal compliance, or security investigations.

International Transfers

Your information may be processed in countries other than your own. We use appropriate safeguards where required, but cross-border processing may involve different legal protections than your jurisdiction.

Your Rights

Depending on applicable law, you may request access, correction, deletion, portability, or restriction/objection to certain processing.

Submit requests at [email protected].

Security

We use commercially reasonable administrative, technical, and organizational safeguards. However, no method of transmission or storage is guaranteed secure; you use the Services at your own risk.

Children

The Services are not directed to children under 13 (or higher age where required by local law). If you believe a child has provided data unlawfully, contact us.

Changes

We may revise this policy from time to time. Updated versions are effective when posted. Continued use after updates constitutes acceptance of the revised policy.

Contact

Questions: [email protected]

Please also review our Terms of Service.